CVE-2022-47086

GPAC MP4Box vulnerability CVE-2022-47086: a segmentation violation is triggered by gf_sm_load_init_swf in scene_manager/swf_parse.c affecting GPAC MP4Box v2.1-DEV-rev574-g9d5bb184. The issue is documented in multiple sources (NVD/NV D details) with CVSS 3.1 base score 5.5 (Medium) and a local att...

CVE-2022-47086

GPAC MP4Box v2.1-DEV-rev574-g9d5bb184b contains a segmentation violation via the function gfsmloadinitswf at scenemanager/swfparse.c...

CVE-2022-46457

NASM v2.16 was discovered to contain a segmentation violation in the component ieeewritefile at /output/outieee.c...

Design/Logic Flaw

NASM v2.16 was discovered to contain a segmentation violation in the component ieeewritefile at /output/outieee.c...

CVE-2022-46457

NASM v2.16 was discovered to contain a segmentation violation in the component ieeewritefile at /output/outieee.c...

CVE-2022-46457

NASM v2.16 was discovered to contain a segmentation violation in the component ieeewritefile at /output/outieee.c...

CVE-2022-46457

NASM v2.16 was discovered to contain a segmentation violation in the component ieeewritefile at /output/outieee.c...

CVE-2022-46457

NASM v2.16 was discovered to contain a segmentation violation in the component ieeewritefile at /output/outieee.c...

CVE-2022-46457

CVE-2022-46457 affects NASM, with a concrete issue: a segmentation violation in the ieee_write_file function (outieee.c) observed in NASM v2.16. The CVSS analysis in the initial document indicates Local attack vector, Low attack complexity, no privileges required, but user interaction required, a...

CVE-2022-46457

NASM v2.16 was discovered to contain a segmentation violation in the component ieeewritefile at /output/outieee.c...

CVE-2022-23526 Helm contains Denial of service through schema file

Helm is a tool for managing Charts, pre-configured Kubernetes resources. Versions prior to 3.10.3 are subject to NULL Pointer Dereference in thechartutil package that can cause a segmentation violation. The chartutil package contains a parser that loads a JSON Schema validation file. For example,...

CVE-2022-23526 Helm contains Denial of service through schema file

Helm is a tool for managing Charts, pre-configured Kubernetes resources. Versions prior to 3.10.3 are subject to NULL Pointer Dereference in thechartutil package that can cause a segmentation violation. The chartutil package contains a parser that loads a JSON Schema validation file. For example,...

Helm vulnerable to denial of service through schema file

Fuzz testing, by Ada Logics and sponsored by the CNCF, identified input to functions in the chartutil package that can cause a segmentation violation. Applications that use functions from the chartutil package in the Helm SDK can have a Denial of Service attack when they use this package and it...

Helm vulnerable to denial of service through through repository index file

Fuzz testing, by Ada Logics and sponsored by the CNCF, identified input to functions in the repo package that can cause a segmentation violation. Applications that use functions from the repo package in the Helm SDK can have a Denial of Service attack when they use this package and it panics...

GHSA-53C4-HHMH-VW5Q Helm vulnerable to denial of service through through repository index file

Fuzz testing, by Ada Logics and sponsored by the CNCF, identified input to functions in the repo package that can cause a segmentation violation. Applications that use functions from the repo package in the Helm SDK can have a Denial of Service attack when they use this package and it panics...

Helm vulnerable to denial of service through schema file

Fuzz testing, by Ada Logics and sponsored by the CNCF, identified input to functions in the chartutil package that can cause a segmentation violation. Applications that use functions from the chartutil package in the Helm SDK can have a Denial of Service attack when they use this package and it...

Helm vulnerable to denial of service through through repository index file

Fuzz testing, by Ada Logics and sponsored by the CNCF, identified input to functions in the repo package that can cause a segmentation violation. Applications that use functions from the repo package in the Helm SDK can have a Denial of Service attack when they use this package and it panics...

Amazon Linux 2022 : ncurses (ALAS2022-2022-217)

The version of ncurses installed on the remote host is prior to 6.2-4.20200222. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2022-2022-217 advisory. - An issue was discovered in ncurses through v6.2-1. nccaptoinfo in captoinfo.c has a heap-based buffer overflow...

Amazon Linux 2022 : freetype (ALAS2022-2022-238)

The version of freetype installed on the remote host is prior to 2.12.1-3. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2022-2022-238 advisory. - FreeType commit 1e2eb65048f75c64b68708efed6ce904c31f3b2f was discovered to contain a heap buffer overflow via the...

Amazon Linux 2 : ncurses (ALAS-2022-1893)

The version of ncurses installed on the remote host is prior to 6.0-8.20170212. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2022-1893 advisory. The ncurses package tic is susceptible to a heap overflow on crafted input. When the terminfo entry- description...