CVE-2024-42240

In the Linux kernel, the following vulnerability has been resolved: x86/bhi: Avoid warning in DB handler due to BHI mitigation When BHI mitigation is enabled, if SYSENTER is invoked with the TF flag set then entrySYSENTERcompat uses CLEARBRANCHHISTORY and calls the clearbhbloop before the TF flag...

CVE-2024-42240

In the Linux kernel, the following vulnerability has been resolved: x86/bhi: Avoid warning in DB handler due to BHI mitigation When BHI mitigation is enabled, if SYSENTER is invoked with the TF flag set then entrySYSENTERcompat uses CLEARBRANCHHISTORY and calls the clearbhbloop before the TF flag...

CVE-2024-42240 x86/bhi: Avoid warning in #DB handler due to BHI mitigation

In the Linux kernel, the following vulnerability has been resolved: x86/bhi: Avoid warning in DB handler due to BHI mitigation When BHI mitigation is enabled, if SYSENTER is invoked with the TF flag set then entrySYSENTERcompat uses CLEARBRANCHHISTORY and calls the clearbhbloop before the TF flag...

CVE-2024-42240 x86/bhi: Avoid warning in #DB handler due to BHI mitigation

In the Linux kernel, the following vulnerability has been resolved: x86/bhi: Avoid warning in DB handler due to BHI mitigation When BHI mitigation is enabled, if SYSENTER is invoked with the TF flag set then entrySYSENTERcompat uses CLEARBRANCHHISTORY and calls the clearbhbloop before the TF flag...

Keys to the Kingdom - Gaining access to the Physical Facility through Internal Access

This is a story of network segmentation and the impact that seemingly trivial misconfigurations can have for your organization. This is one of those occasions. This particular pen test asked for goals-based assessment focusing on post-compromise activities — an attempt by the client to discover h...

SUSE CVE-2024-7006

A null pointer dereference flaw was found in Libtiff via tifdirinfo.c. This issue may allow an attacker to trigger memory allocation failures through certain means, such as restricting the heap space size or injecting faults, causing a segmentation fault. This can cause an application crash,...

kernel: net: core: reject skb_copy(_expand) for fraglist GSO skbs

A flaw was found in the Linux kernel. When copying or expanding fragmented Generic Segmentation Offload GSO network packet buffers, the kernel improperly linearizes them, leaving the buffers in an invalid state. A local user can exploit this vulnerability to trigger a kernel crash during subseque...

Details Matter: Pentesting a single device to guarantee security

Rapid7’s penetration testing services regularly assess internal networks of various sizes. For this particular engagement, however, Rapid7 was tasked with performing a penetration test of just one device on an internal network. The device was being piloted for future deployment and the customer h...

ROS-20240806-16

Vulnerability in glXGetDrawableScreen neutral dispatch layer function for OpenGL API calls libglvnd is related to a segmentation violation. Exploitation of the vulnerability could allow an attacker, acting remotely, to cause a denial of service...

CVE-2024-41200

A segmentation fault in KMPlayer v4.2.2.65 allows attackers to cause a Denial of Service DoS via a crafted AVI file...

CVE-2024-41200

A segmentation fault in KMPlayer v4.2.2.65 allows attackers to cause a Denial of Service DoS via a crafted AVI file...

CVE-2024-41200: Undefined Security Weakness

A segmentation fault in KMPlayer v4.2.2.65 allows attackers to cause a Denial of Service DoS via a crafted AVI file...

PT-2024-29307 · Pandoratv · Mplayer

Name of the Vulnerable Software and Affected Versions: KMPlayer version 4.2.2.65 Description: A segmentation fault in KMPlayer allows attackers to cause a Denial of Service DoS via a crafted AVI file. This issue may lead to system compromise. Recommendations: Update KMPlayer to the latest version...

CVE-2024-41200

A segmentation fault in KMPlayer v4.2.2.65 allows an attacker to trigger a Denial of Service (DoS) by providing a crafted AVI file . While the vulnerability may lead to system compromise, the primary impact is the disruption of service. Remediation involves updating KMPlayer to the latest version...

PT-2024-40831 · Git +1 · Lwan

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash caused by a segmentation fault on an unknown address. The crash occurs in the lwan request get cookie function, which is...

Segmentation Fault

tensorflow is vulnerable to Segmentation Fault. The vulnerability is caused due to a defect in a function arrayops.upperbound when not given a rank 2 tensor. It leads to Denial Of Service DOS...

TensorFlow input validation error vulnerability

TensorFlow is a suite of end-to-end open source platforms for machine learning open-sourced by TensorFlow. An input validation error vulnerability exists in TensorFlow versions prior to 2.13.0, which stems from arrayops.upperbound causing a segmentation error when a 2nd order tensor is not...

kernel: net: core: reject skb_copy(_expand) for fraglist GSO skbs

A flaw was found in the Linux kernel. When copying or expanding fragmented Generic Segmentation Offload GSO network packet buffers, the kernel improperly linearizes them, leaving the buffers in an invalid state. A local user can exploit this vulnerability to trigger a kernel crash during subseque...

SUSE: Security Advisory (SUSE-SU-2024:2607-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

llamacpp:fuzz_json_to_grammar: Segv on unknown address in SchemaConverter::_visit_pattern

Detailed Report: https://oss-fuzz.com/testcase?key=6175984324247552 Project: llamacpp Fuzzing Engine: afl Fuzz Target: fuzzjsontogrammar Job Type: aflasanllamacpp Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: SchemaConverter::visitpattern...