python-cryptography: NULL-dereference when loading PKCS7 certificates

A null-pointer dereference vulnerability was found in python-cryptography during the loading of PKCS7 certificates. Invoking "loadpempkcs7certificates" or "loadderpkcs7certificates" can trigger this issue and lead to subsequent segmentation fault and result in a Denial of Service DoS for any...

tcpslice: use-after-free in extract_slice()

A heap use-after-free flaw was found in tcpslices' extractslice. This flaw allows an attacker with local network access to pass a specially crafted 'pcap' file to tcpslice, causing segmentation fault. This vulnerability halts or crashes the application, leading to a denial of service...

kernel: objtool: Fix SEGFAULT

A NULL pointer dereference was found in objtool, a build-time tool used during Linux kernel compilation. When findinsn returns NULL on failure, the code proceeds to dereference the NULL pointer, causing objtool to crash with a segmentation fault during kernel build operations...

CVE-2024-34043

O-RAN RICAPP kpimon-go I-Release has a segmentation violation via a certain E2AP-PDU message...

CVE-2024-34043

O-RAN RICAPP kpimon-go I-Release has a segmentation violation via a certain E2AP-PDU message...

PT-2024-25470

Name of the Vulnerable Software and Affected Versions lunasvg version 2.3.9 Description The issue is related to a segmentation violation in the component composition solid source. Recommendations For lunasvg version 2.3.9, at the moment, there is no information about a newer version that contains...

PT-2024-25471 · Lunasvg · Lunasvg

Name of the Vulnerable Software and Affected Versions: lunasvg version 2.3.9 Description: The issue is related to a segmentation violation in the component composition solid source over. Recommendations: For lunasvg version 2.3.9, at the moment, there is no information about a newer version that...

PT-2024-40733 · Pcpp · Pcpp

Name of the Vulnerable Software and Affected Versions: pcpp affected versions not specified Description: The issue is related to a crash in the pcpp library, specifically in the pcpp::IPv6Layer destructor. The crash occurs due to a segmentation fault on an unknown address. Technical details about...

Moderate: libtiff security update

The libtiff packages contain a library of functions for manipulating Tagged Image File Format TIFF files. Security Fixes: libtiff: infinite loop via a crafted TIFF file CVE-2022-40090 libtiff: segmentation fault in Fax3Encode in libtiff/tiffax3.c CVE-2023-3618 libtiff: integer overflow in tiffcp....

RHEL 9 : libtiff (RHSA-2024:2289)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:2289 advisory. The libtiff packages contain a library of functions for manipulating Tagged Image File Format TIFF files. Security Fixes: libtiff: infinite...

CVE-2024-34043

The O-RAN RICAPP kpimon-go I-Release software is susceptible to a segmentation violation triggered by a specific E2AP-PDU message . This vulnerability allows for a potential crash or instability within the RIC application. While the CVSS 3.1 score indicates a Medium severity (5.3) with Low privil...

CVE-2024-34043

O-RAN RICAPP kpimon-go I-Release has a segmentation violation via a certain E2AP-PDU message...

PT-2024-25660 · O Ran · O-Ran Ricapp Kpimon-Go

Name of the Vulnerable Software and Affected Versions: O-RAN RICAPP kpimon-go I-Release affected versions not specified Description: The issue is related to a segmentation violation that occurs via a certain E2AP-PDU message. Recommendations: At the moment, there is no information about a newer...

CVE-2024-34043: Undefined Security Weakness

O-RAN RICAPP kpimon-go I-Release has a segmentation violation via a certain E2AP-PDU message...

O-RAN RIC security vulnerabilities

O-RAN RIC is a RIC application from O-RAN. A security vulnerability exists in O-RAN RIC that stems from the presence of a segmentation violation...

CVE-2024-34043

O-RAN RICAPP kpimon-go I-Release has a segmentation violation via a certain E2AP-PDU message...

Fedora 37 : jpegoptim (2023-d9c91f39a5)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-d9c91f39a5 advisory. v1.5.1 - fix logging to stdout when --stdout is used thanks to Eta - update --treshold option accept decimal numbers as parameter - fix crashes when processi...

Fedora 36 : advancecomp (2023-e8c294f93d)

The remote Fedora 36 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-e8c294f93d advisory. Update to 2.5 close RHBZ2162990; fix RHBZ2161641: Fix segmentation fault on invalid MNG size Tenable has extracted the preceding description block directly...

Fedora 40 : xorg-x11-server-Xwayland (2024-01a9916e9e)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-01a9916e9e advisory. xwayland 23.2.6 - CVE fix for CVE-2024-31080, CVE-2024-31081, CVE-2024-31083 Tenable has extracted the preceding description block directly from the...

Fedora 40 : vips (2024-791f8d9804)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-791f8d9804 advisory. Automatic update for vips-8.15.1-1.fc40. Changelog Sat Jan 20 2024 Kleis Auke Wolthuizen - 8.15.1-1 - Update to 8.15.1 Resolves: rhbz2098477 Resolves:...