9374 matches found
UBUNTU-CVE-2023-30408
Jerryscript commit 1a2c047 was discovered to contain a segmentation violation via the component build/bin/jerry...
UBUNTU-CVE-2023-30406
Jerryscript commit 1a2c047 was discovered to contain a segmentation violation via the component ecmafindnamedproperty at /base/ecma-helpers.c...
PT-2023-22677 · Unknown · Jerryscript
Name of the Vulnerable Software and Affected Versions: Jerryscript version 1a2c047 Description: A segmentation violation was discovered in Jerryscript via the component ecma find named property at /base/ecma-helpers.c. Recommendations: For Jerryscript version 1a2c047, consider avoiding the use of...
JerryScript 资源管理错误漏洞
JerryScript is a lightweight JavaScript engine from the Jerryscript project. A security vulnerability exists in JerryScript version 1a2c047, which stems from a component of /base/ecma-helpers.c containing a segmentation violation...
Amazon Linux 2 : ImageMagick (ALAS-2023-2014)
The version of ImageMagick installed on the remote host is prior to 6.9.10.97-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-2014 advisory. A vulnerability was discovered in ImageMagick where a specially created SVG file loads itself and causes a segmentation...
Medium: ImageMagick
Issue Overview: A vulnerability was discovered in ImageMagick where a specially created SVG file loads itself and causes a segmentation fault. This flaw allows a remote attacker to pass a specially crafted SVG file that leads to a segmentation fault, generating many trash files in "/tmp," resulti...
GHSA-FJX5-QPF4-XJF2 Parsing borsh messages with ZST which are not-copy/clone is unsound
Affected versions of borsh cause undefined behavior when zero-sized-types ZST are parsed and the Copy/Clone traits are not implemented/derived. For instance if 1000 instances of a ZST are deserialized, and the ZST is not copy this can be achieved through a singleton, then accessing/writing to...
Parsing borsh messages with ZST which are not-copy/clone is unsound
Affected versions of borsh cause undefined behavior when zero-sized-types ZST are parsed and the Copy/Clone traits are not implemented/derived. For instance if 1000 instances of a ZST are deserialized, and the ZST is not copy this can be achieved through a singleton, then accessing/writing to...
Security Bulletin: Vulnerabilities in OpenSSL affect QLogic 8Gb Intelligent Pass-thru Module and SAN Switch Module for BladeCenter
Summary OpenSSL vulnerabilities were disclosed on March 19, 2015 by the OpenSSL Project. OpenSSL is used by QLogic 8Gb Intelligent Pass-thru Module and SAN Switch Module for BladeCenter. QLogic 8Gb Intelligent Pass-thru Module and SAN Switch Module for BladeCenter have addressed the applicable...
Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM : Kamailio vulnerabilities (USN-6022-1)
The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6022-1 advisory. It was discovered that Kamailio did not properly sanitize SIP messages under certain circumstances. An attacker could use this...
Huawei EulerOS: Security Advisory for e2fsprogs (EulerOS-SA-2023-1592)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Mz Automation Libiec61850 代码问题漏洞
Mz Automation Libiec61850 is an open source library for the IEC 61850 protocol from Mz Automation. A security vulnerability exists in Mz Automation libiec61850 version v1.5.1, which stems from the ControlObjectClientsetOrigin function via /client/clientcontrol.c found to contain a segmentation...
EulerOS 2.0 SP8 : e2fsprogs (EulerOS-SA-2023-1592)
According to the versions of the e2fsprogs packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possibly arbitrary code...
PT-2023-21339 · Unknown · Libiec61850
Name of the Vulnerable Software and Affected Versions: libiec61850 version 1.5.1 Description: A segmentation violation issue was discovered in the function ControlObjectClient setOrigin at /client/client control.c. Recommendations: For libiec61850 version 1.5.1, consider disabling the...
CVE-2023-29581
yasm 1.3.0.55.g101bc has a segmentation violation in the function deleteToken at modules/preprocs/nasm/nasm-pp.c. NOTE: although a libyasm application could become unavailable if this were exploited, the vendor's position is that there is no security relevance because there is either supposed to ...
AZL-35387 CVE-2023-29581 affecting package yasm 1.3.0-17
yasm 1.3.0.55.g101bc has a segmentation violation in the function deleteToken at modules/preprocs/nasm/nasm-pp.c. NOTE: although a libyasm application could become unavailable if this were exploited, the vendor's position is that there is no security relevance because there is either supposed to ...
DEBIAN-CVE-2023-29581
yasm 1.3.0.55.g101bc has a segmentation violation in the function deleteToken at modules/preprocs/nasm/nasm-pp.c. NOTE: although a libyasm application could become unavailable if this were exploited, the vendor's position is that there is no security relevance because there is either supposed to ...
AZL-26166 CVE-2023-29581 affecting package yasm 1.3.0-17
yasm 1.3.0.55.g101bc has a segmentation violation in the function deleteToken at modules/preprocs/nasm/nasm-pp.c. NOTE: although a libyasm application could become unavailable if this were exploited, the vendor's position is that there is no security relevance because there is either supposed to ...
UBUNTU-CVE-2023-29581
DISPUTED yasm 1.3.0.55.g101bc has a segmentation violation in the function deleteToken at modules/preprocs/nasm/nasm-pp.c. NOTE: although a libyasm application could become unavailable if this were exploited, the vendor's position is that there is no security relevance because there is either...