PT-2024-31281 · Open Robotics · Ros2

Name of the Vulnerable Software and Affected Versions: Open Robotics Robotic Operating System 2 ROS2 navigation2 version humble Description: A segmentation violation was discovered in the component theta star::ThetaStar::isUnsafeToPlan. This issue affects the navigation2 package in ROS2...

CVE-2024-44852

CVE-2024-44852 affects Open Robotics ROS2 navigation2 ( Humble ). The vulnerability is a segmentation violation in theta_star::ThetaStar::isUnsafeToPlan(), as described in multiple sources (NVD/Red Hat/CNNVD/CVELIST). CVSS vectors indicate network attack, low complexity with no privileges or user...

CVE-2024-44852

Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble was discovered to contain a segmentation violation via the component thetastar::ThetaStar::isUnsafeToPlan...

Nav2 安全漏洞

Nav2 is the ROS community's navigation framework and system for ROS2. A security vulnerability exists in Nav2 that stems from the component thetastar::ThetaStar::isUnsafeToPlan containing a segmentation violation...

CVE-2024-54130

CVE-2024-54130 affects NASA’s ION-DTN BPv7 (BPv7) where receiving a bundle with Destination EID dtn:none on version 4.1.3 triggers a segmentation fault, causing the node to become unresponsive to incoming bundles and resulting in a Denial of Service (DoS). The issue is documented as fixed in vers...

CVE-2024-54130 Segmentation Fault in `forwardBundle` Function of ION-DTN BPv7 When Destination EID is `dtn:none` (public)

The NASA’s Interplanetary Overlay Network ION is an implementation of Delay/Disruption Tolerant Networking DTN. A segmentation fault occurs with ION-DTN BPv7 software version 4.1.3 when a bundle with a Destination Endpoint ID EID set to dtn:none is received. This causes the node to become...

CVE-2024-54130 Segmentation Fault in `forwardBundle` Function of ION-DTN BPv7 When Destination EID is `dtn:none` (public)

The NASA’s Interplanetary Overlay Network ION is an implementation of Delay/Disruption Tolerant Networking DTN. A segmentation fault occurs with ION-DTN BPv7 software version 4.1.3 when a bundle with a Destination Endpoint ID EID set to dtn:none is received. This causes the node to become...

CVE-2024-54130 Segmentation Fault in `forwardBundle` Function of ION-DTN BPv7 When Destination EID is `dtn:none` (public)

The NASA’s Interplanetary Overlay Network ION is an implementation of Delay/Disruption Tolerant Networking DTN. A segmentation fault occurs with ION-DTN BPv7 software version 4.1.3 when a bundle with a Destination Endpoint ID EID set to dtn:none is received. This causes the node to become...

NASA Interplanetary Overlay Network 安全漏洞

NASA Interplanetary Overlay Network is a NASA implementation of a Delay/Disruption Tolerant Network DTN. A security vulnerability exists in NASA Interplanetary Overlay Network BPv7 version 4.1.3, which originates from a segmentation error that occurs when a packet is received with the destination...

Advisory ROSA-SA-2024-2537

Software: openjpeg2 2.4.0 OS: ROSA-CHROME packageevrstring: openjpeg2-2.4.0-3 CVE-ID: CVE-2022-1122 BDU-ID: None CVE-Crit: MEDIUM CVE-DESC.: The opj2decompress program in openjpeg2 has discovered a flaw in the way it handles an input directory with a large number of files. When the program fails ...

Mageia: Security Advisory (MGASA-2024-0375)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MGASA-2024-0375 Updated php packages fix security vulnerabilities

Some heap errors, segmentation faults and security vulnerabilities have been found and corrected. It is advised to install this update...

Updated php packages fix security vulnerabilities

Some heap errors, segmentation faults and security vulnerabilities have been found and corrected. It is advised to install this update...

CVE-2024-11705

A flaw was found in Mozilla. The Mozilla Foundation's Security Advisory describes the following issue: NSCDeriveKey inadvertently assumed that the phKey parameter is always non-NULL. When it was passed as NULL, a segmentation fault SEGV occurred, leading to crashes. This behavior conflicted with...

CVE-2024-11705

NSCDeriveKey inadvertently assumed that the phKey parameter is always non-NULL. When it was passed as NULL, a segmentation fault SEGV occurred, leading to crashes. This behavior conflicted with the PKCS11 v3.0 specification, which allows phKey to be NULL for certain mechanisms. This vulnerability...

CVE-2024-11705

NSCDeriveKey inadvertently assumed that the phKey parameter is always non-NULL. When it was passed as NULL, a segmentation fault SEGV occurred, leading to crashes. This behavior conflicted with the PKCS11 v3.0 specification, which allows phKey to be NULL for certain mechanisms. This vulnerability...

CVE-2024-11705

NSCDeriveKey inadvertently assumed that the phKey parameter is always non-NULL. When it was passed as NULL, a segmentation fault SEGV occurred, leading to crashes. This behavior conflicted with the PKCS11 v3.0 specification, which allows phKey to be NULL for certain mechanisms. This vulnerability...

CVE-2024-11705

NSCDeriveKey inadvertently assumed that the phKey parameter is always non-NULL. When it was passed as NULL, a segmentation fault SEGV occurred, leading to crashes. This behavior conflicted with the PKCS11 v3.0 specification, which allows phKey to be NULL for certain mechanisms. This vulnerability...

CVE-2024-11705

The CVE-2024-11705 issue is due to NSC_DeriveKey assuming phKey is non-NULL; passing NULL leads to a segmentation fault (crash). Affected products reported across sources include Firefox and Thunderbird prior to version 133. The vulnerability description and linked advisories indicate this NULL d...

CVE-2024-11705

NSCDeriveKey inadvertently assumed that the phKey parameter is always non-NULL. When it was passed as NULL, a segmentation fault SEGV occurred, leading to crashes. This behavior conflicted with the PKCS11 v3.0 specification, which allows phKey to be NULL for certain mechanisms. This vulnerability...