sam2p segmentation error vulnerability

sam2p is a command-line utility that converts many raster bitmap image formats such as GIF, JPG/JPEG, and PNG to PostScript or PDF files. sam2p version 0.49.4 is vulnerable to a segmentation error. The vulnerability stems from a floating-point exception in ReadImage. An attacker could exploit the...

Exiv2 has an unspecified vulnerability (CNVD-2021-62174)

Exiv2 is a set of C libraries and command line applications for managing image metadata. It provides the ability to read and write image metadata in multiple formats such as EXIF, IPTC, and XMP.A security vulnerability exists in Exiv2 version 0.27.1, which stems from an integer overflow in Exiv2'...

Advisory ROSA-SA-2021-1975

Software: sqlite 3.7.17 OS: Cobalt 7.9 CVE-ID: CVE-2015-3717 CVE-Crit: HIGH CVE-DESC: Multiple buffer overflows in SQLite's printf function, used in Apple iOS before 8.4 and OS X before 10.10.4, allow remote attackers to execute arbitrary code or cause a denial of service application crash via...

Advisory ROSA-SA-2021-1946

Software: path 2.7.1 OS: Cobalt 7.9 CVE-ID: CVE-2014-9637 CVE-Crit: MEDIUM CVE-DESC: GNU patch 2.7.2 and earlier allows remote attackers to cause a denial of service memory consumption and segmentation error with a crafted diff file. CVE-STATUS: default CVE-REV: default CVE-ID: CVE-2015-1196...

Advisory ROSA-SA-2021-1910

Software: lua 5.1.4 OS: Cobalt 7.9 CVE-ID: CVE-2020-15888 CVE-Crit: HIGH CVE-DESC: Lua through 5.4.0 incorrectly handles the interaction between stack resizing and garbage collection, resulting in heap-based buffer overflow, heap-based buffer overflow, or post-release usage. CVE-STATUS: default...

Advisory ROSA-SA-2021-1854

Software: imlib2 1.4.5 OS: Cobalt 7.9 CVE-ID: CVE-2011-5326 CVE-Crit: HIGH CVE-DESC: imlib2 before 1.4.9 allows remote attackers to cause a denial of service division-by-zero error and application crash by drawing a 2x1 ellipse. CVE-STATUS: default CVE-REV: default CVE-ID: CVE-2014-9762 CVE-Crit:...

Google TensorFlow suffers from an unspecified vulnerability (CNVD-2021-46659)

Google TensorFlow is a suite of end-to-end open source platforms for machine learning from Google USA. A security vulnerability exists in TensorFlow 2.4.2,2.3.3,2.2.3,2.1.4, which stems from the fact that tf.rawops.SparseCountSparseOutput causes a segmentation error to be thrown from the standard...

GNU Gama Denial of Service Vulnerability

GNU Gama is a software package of the GNU community. It is used for traditional geodesy still used and needed in special surveys where the Global Positioning System GPS cannot be used e.g. underground or high-precision engineering surveys. A denial of service vulnerability exists in Gama version...

Google TensorFlow QuantizedBatchNormWithGlobalNormalization Denial of Service Vulnerability

Google TensorFlow is an end-to-end open source machine learning platform. A security vulnerability exists in Google TensorFlow QuantizedBatchNormWithGlobalNormalization. An attacker could exploit the vulnerability to cause a segmentation error, which could lead to a denial of service...

Google TensorFlow Null Pointer Dereference Vulnerability

Google TensorFlow is an end-to-end open source machine learning platform. A null pointer dereference vulnerability exists in TrySimplify in Google TensorFlow. An attacker could exploit the vulnerability to cause a segmentation error...

libmysofa null pointer dereference vulnerability (CNVD-2021-11057)

libmysofa is a lightweight C library for reading AES SOFA files. A null pointer dereference vulnerability exists in libmysofa 0.5 - 1.1. The vulnerability stems from the verifyAttribute function failing to properly handle input data. An attacker can exploit the vulnerability to cause segmentation...

Envoy has an unspecified vulnerability

Envoy is an open source distributed proxy server . A security vulnerability exists in versions prior to Envoy 1.16.1 that stems from incorrect handling of dropped and truncated datagrams, as evidenced by a UDP packet size greater than 1500 segmentation error. No details of the vulnerability are...

The vulnerability of the AAC stream processing tool faad, related to segmentation errors, allows a perpetrator to trigger a service failure.

The vulnerability of the AAC stream processing tool faad is related to segmentation errors. Exploiting this vulnerability can allow an attacker to cause a service failure in the application by entering a specially crafted sequence of data into the command line...

The vulnerability of the TCP Selective Acknowledgment mechanism in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the TCP Selective Acknowledgment mechanism in the Linux operating system arises due to a segmentation error in the retransmission queue. Exploiting this vulnerability allows an attacker to cause a service failure by sending a specially crafted sequence of SACK packets...

Unspecified Vulnerability in JBMC DirectAdmin

JBMC DirectAdmin is a server visual management panel from JBMC Software Canada. A security vulnerability exists in JBMC DirectAdmin versions prior to 1.52. A remote attacker can exploit this vulnerability by sending a request to gain access or cause a denial of service segmentation error...