234 matches found
PT-2021-18306 · Google · Tensorflow
Name of the Vulnerable Software and Affected Versions: TensorFlow versions prior to 2.5.0 TensorFlow versions 2.4.2 and earlier TensorFlow versions 2.3.3 and earlier TensorFlow versions 2.2.3 and earlier TensorFlow versions 2.1.4 and earlier Description: An attacker can cause a denial of service...
CVE-2020-36067
GJSON =v1.6.5 allows attackers to cause a denial of service panic: runtime error: slice bounds out of range via a crafted GET call...
CVE-2020-29244
dhowden tag before 2020-11-19 allows "panic: runtime error: slice bounds out of range" via readTextWithDescrFrame...
CVE-2020-29245
dhowden tag before 2020-11-19 allows "panic: runtime error: slice bounds out of range" via readAtomData...
Out-of-bounds
dhowden tag before 2020-11-19 allows "panic: runtime error: slice bounds out of range" via readAtomData...
Design/Logic Flaw
dhowden tag before 2020-11-19 allows "panic: runtime error: index out of range" via readPICFrame...
CVE-2020-29245
dhowden tag before 2020-11-19 allows "panic: runtime error: slice bounds out of range" via readAtomData...
CVE-2020-29245
The CVE-2020-29245 issue affects the Go package github.com/dhowden/tag, where multiple code paths panic due to out-of-bounds reads in readAtomData and related parsing paths (e.g., readPICFrame/readAPICFrame). The root cause is improper bounds checking, leading to panics when parsing user-supplied...
CVE-2020-29244
The CVE-2020-29244 entry concerns the Go library github.com/dhowden/tag. It is triggered by improper bounds checking in functions such as readTextWithDescrFrame (and related readPICFrame/readAtomData paths), causing a panic: runtime error: slice bounds out of range. Exposures reported as a Denial...
CVE-2020-29244
dhowden tag before 2020-11-19 allows "panic: runtime error: slice bounds out of range" via readTextWithDescrFrame...
CVE-2020-29243
CVE-2020-29243 affects the Go package github.com/dhowden/tag. The issue is an out-of-bounds read panic triggered in readAPICFrame (and related code paths) that can cause a denial of service. Several connected advisories (GHSA entries and OSV notes) describe improper bounds checking across methods...
CVE-2020-29242
The CVE affects the Go library github.com/dhowden/tag. It describes a panic: runtime error: index out of range in readPICFrame, caused by improper bounds handling. This leads to denial-of-service via a crash when parsing PIC frames. Public references in the Connected documents corroborate a DoS v...
CVE-2020-35381
jsonparser 1.0.0 allows attackers to cause a denial of service panic: runtime error: slice bounds out of range via a GET call...
CVE-2020-35381
jsonparser 1.0.0 allows attackers to cause a denial of service panic: runtime error: slice bounds out of range via a GET call...
Out-of-bounds
jsonparser 1.0.0 allows attackers to cause a denial of service panic: runtime error: slice bounds out of range via a GET call...
Moderate: Red Hat Security Advisory: OpenShift Container Platform 4.5.23 security and bug fix update
Red Hat OpenShift Container Platform release 4.5.23 is now available with updates to packages and images that fix several bugs. This release includes a security update for Kubernetes for Red Hat OpenShift Container Platform 4.5. Red Hat Product Security has rated this update as having a security...
CVE-2020-35381
jsonparser 1.0.0 allows attackers to cause a denial of service panic: runtime error: slice bounds out of range via a GET call...
CVE-2020-35381
jsonparser 1.0.0 allows attackers to cause a denial of service panic: runtime error: slice bounds out of range via a GET call...
Denial Of Service (DoS)
imagemagick is vulnerable to denial of service DoS. The vulnerability exists in the MagickCore/colorspace-private.h and MagickCore/quantum.h. An attacker could exploit this vulnerability by providing untrusted input data which may lead to a divide-by-zero runtime error and application crash...