VMIR 安全漏洞

VMIR is a standalone library written in C by the individual developer Andreas Smas. A security vulnerability exists in VMIR version e8117, which stems from a segmentation violation in the functionprepareparse function...

PT-2024-26490 · Vmir · Vmir

Name of the Vulnerable Software and Affected Versions: vmir version e8117 Description: A segmentation violation issue was discovered in vmir via the wasm parse block function at /src/vmir wasm parser.c. This issue occurs due to a problem in the wasm parse block function, which can cause a...

CVE-2024-35421

vmir e8117 was discovered to contain a segmentation violation via the wasmparseblock function at /src/vmirwasmparser.c...

CVE-2024-35425

CVE-2024-35425 affects vmir e8117. A segmentation violation occurs in the function_prepare_parse function located at /src/vmir_function.c. CVSSv3.1 = 5.5 (Medium): Attack vector LOCAL, privileges NONE, user interaction REQUIRED, impact on Availability HIGH. Exploitation status is not indicated in...

CVE-2024-35424

CVE-2024-35424 affects the VMIR library (e8117) with a segmentation violation in the internal function import_function at /src/vmir_wasm_parser.c. The metric data indicates a MEDIUM base score (CVSS 3.1: AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) and a HIGH impact on availability, with no confidentiali...

CVE-2024-35427

The CVE-2024-35427 entry relates to VMIR e8117, a standalone C library. Multiple connected sources confirm a segmentation fault triggered by the export_function function in /src/vmir_wasm_parser.c, constituting a vulnerability in the VMIR parsing path. The core issue is a segmentation violation w...

CVE-2024-35421

vmir e8117 was discovered to contain a segmentation violation via the wasmparseblock function at /src/vmirwasmparser.c...

PT-2024-26493 · Vmir · Vmir

Name of the Vulnerable Software and Affected Versions: vmir e8117 version e8117 Description: A segmentation violation was discovered in vmir e8117 via the import function function at /src/vmir wasm parser.c. Recommendations: For vmir e8117 version e8117, as a temporary workaround, consider...

CVE-2024-35425

vmir e8117 was discovered to contain a segmentation violation via the functionprepareparse function at /src/vmirfunction.c...

CVE-2024-35427

vmir e8117 was discovered to contain a segmentation violation via the exportfunction function at /src/vmirwasmparser.c...

CVE-2024-35425

vmir e8117 was discovered to contain a segmentation violation via the functionprepareparse function at /src/vmirfunction.c...

CVE-2024-35427

vmir e8117 was discovered to contain a segmentation violation via the exportfunction function at /src/vmirwasmparser.c...

CVE-2024-35424

vmir e8117 was discovered to contain a segmentation violation via the importfunction function at /src/vmirwasmparser.c...

CVE-2024-35421

CVE-2024-35421 affects vmir (version e8117). The issue is a segmentation fault in the wasm_parse_block function located at /src/vmir_wasm_parser.c, caused by an underlying bug in wasm parsing. Impact is listed as Availability Impact = HIGH, with Confidentiality/Integrity not affected; Overall CVS...

openSUSE Security Advisory (SUSE-SU-2024:3773-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLED15: Mesa / Mesa-32bit / Mesa-KHR-devel / Mesa-devel / Mesa-dri / etc (SUSE-SU-2024:3548-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3548-1 advisory. - CVE-2023-45913: Fixed NULL pointer dereference via dri2GetGlxDrawableFromXDrawableId bsc122204...

SUSE SLED15 / SLES15 Security Update : Mesa (SUSE-SU-2024:3544-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3544-1 advisory. - CVE-2023-45919: Fixed buffer over-read in glXQueryServerString bsc1222041. - CVE-2023-45913: Fixed NULL...

openSUSE: Security Advisory for Mesa (SUSE-SU-2024:3544-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security update for Mesa

This update for Mesa fixes the following issues: CVE-2023-45919: Fixed buffer over-read in glXQueryServerString bsc1222041. CVE-2023-45913: Fixed NULL pointer dereference via dri2GetGlxDrawableFromXDrawableId bsc1222040. CVE-2023-45922: Fixed segmentation violation in glXGetDrawableAttribute...

SUSE-SU-2024:3544-1 Security update for Mesa

This update for Mesa fixes the following issues: - CVE-2023-45919: Fixed buffer over-read in glXQueryServerString bsc1222041. - CVE-2023-45913: Fixed NULL pointer dereference via dri2GetGlxDrawableFromXDrawableId bsc1222040. - CVE-2023-45922: Fixed segmentation violation in glXGetDrawableAttribut...