HDF Group HDF5 安全漏洞

HDF Group HDF5 is a suite of tools for managing and storing different types of data from the American company HDF Group. The product supports managing, manipulating, viewing and analyzing data and generating files in portable formats. A security vulnerability exists in HDF5 Library version 1.14.3...

CVE-2024-32614

HDF5 Library through 1.14.3 has a SEGV in H5VMmemcpyvv in H5VM.c...

CVE-2024-32610

HDF5 Library through 1.14.3 has a SEGV in H5Tclosereal in H5T.c, resulting in a corrupted instruction pointer...

CVE-2024-32672

CVE-2024-32672 describes a segmentation fault in Samsung Open Source Escargot JavaScript engine (Escargot 4.0.0) that can be triggered by crafted input to cause a denial of service. Connected sources confirm the affected product and version (Escargot 4.0.0) and the underlying issue is a segmentat...

CVE-2024-32672

A Segmentation Fault issue discovered in Samsung Open Source Escargot JavaScript engine allows remote attackers to cause a denial of service via crafted input. This issue affects Escargot: 4.0.0...

CVE-2024-32672

A Segmentation Fault issue discovered in Samsung Open Source Escargot JavaScript engine allows remote attackers to cause a denial of service via crafted input. This issue affects Escargot: 4.0.0...

PT-2024-24757 · Samsung · Escargot

Name of the Vulnerable Software and Affected Versions: Escargot version 4.0.0 Description: A Segmentation Fault issue in the Samsung Open Source Escargot JavaScript engine allows remote attackers to cause a denial of service via crafted input. Recommendations: For Escargot version 4.0.0, at the...

PT-2024-6207 · Unknown +4 · Hdf5 Library +4

Name of the Vulnerable Software and Affected Versions: HDF5 Library versions 1.14.3 and earlier Description: The issue is related to a corrupted instruction pointer due to a SEGV in the H5T close real function in the H5T.c file. This is caused by a buffer overflow in memory, which can lead to a...

CVE-2024-33783

MP-SPDZ v0.3.8 was discovered to contain a segmentation violation via the function osuCrypto::SilentMultiPprfReceiver::expand in /Tools/SilentPprf.cpp. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted message...

How Effectively Are You Deploying Segmentation to Mitigate Cyberattack Risks?

...

Advisory ROSA-SA-2024-2414

software: upx 4.2.1 OS: ROSA-CHROME packageevrstring: upx-4.2.1-1 CVE-ID: CVE-2023-23456 BDU-ID: None CVE-Crit: MEDIUM CVE-DESC.: A heap buffer overflow problem was discovered in UPX in PackTmt::pack in the file ptmt.cpp. This thread allows an attacker to cause a denial of service interrupt using...

SUSE CVE-2024-34508

dcmnet in DCMTK before 3.6.9 has a segmentation fault via an invalid DIMSE message...

SUSE CVE-2024-34509

dcmdata in DCMTK before 3.6.9 has a segmentation fault via an invalid DIMSE message...

Ubuntu 18.04 LTS / 20.04 LTS : Linux kernel vulnerabilities (USN-6767-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6767-1 advisory. Chenyuan Yang discovered that the RDS Protocol implementation in the Linux kernel contained an out-of- bounds read vulnerability. An attacker...

CVE-2024-33783

MP-SPDZ v0.3.8 contains a segmentation violation in osuCrypto::SilentMultiPprfReceiver::expand (SilentPprf.cpp), enabling a Denial of Service via a crafted message. Impact: DoS. Affected component: SilentMultiPprfReceiver::expand in MP-SPDZ 0.3.8. Mitigation/workaround: PT-2024-25478 recommends d...

CVE-2024-33783

MP-SPDZ v0.3.8 was discovered to contain a segmentation violation via the function osuCrypto::SilentMultiPprfReceiver::expand in /Tools/SilentPprf.cpp. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted message...

CVE-2024-33780

MP-SPDZ v0.3.8 was discovered to contain a segmentation violation via the function osuCrypto::copyOut at /Tools/SilentPprf.cpp. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted message...

PT-2024-25475 · Mp-Spdz · Mp-Spdz

Name of the Vulnerable Software and Affected Versions: MP-SPDZ version 0.3.8 Description: The issue is related to a segmentation violation via the function osuCrypto::copyOut at /Tools/SilentPprf.cpp. This allows attackers to cause a Denial of Service DoS via a crafted message. Recommendations: F...

CVE-2024-33783

MP-SPDZ v0.3.8 was discovered to contain a segmentation violation via the function osuCrypto::SilentMultiPprfReceiver::expand in /Tools/SilentPprf.cpp. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted message...

CVE-2024-33783

MP-SPDZ v0.3.8 was discovered to contain a segmentation violation via the function osuCrypto::SilentMultiPprfReceiver::expand in /Tools/SilentPprf.cpp. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted message...