libglvnd security vulnerability

libglvnd is a vendor-neutral scheduling layer of the glvnd open source for arbitrating OpenGL API calls between multiple vendors. A security vulnerability exists in libglvnd, which stems from the discovery of a segmentation conflict vulnerability contained in the glXGetDrawableScreen function via...

CVE-2023-45924

libglxproto.c in OpenGL libglvnd bb06db5a was discovered to contain a segmentation violation via the function glXGetDrawableScreen. NOTE: this is disputed because there are no common situations in which users require uninterrupted operation with an attacker-controller server...

CVE-2023-45929: Buffer Copy without Checking Size of Input

S-Lang 2.3.2 was discovered to contain a segmentation fault via the function fixuptgetstr...

CVE-2023-45924

The libglxproto.c component in the OpenGL libglvnd library (bb06db5a) contains a segmentation violation triggered via the glXGetDrawableScreen() function. This vulnerability has been identified in various Linux distributions, including Amazon Linux 2 and Amazon Linux 2023 . While the flaw is docu...

PT-2024-13311 · S-Lang +1 · S-Lang +1

Name of the Vulnerable Software and Affected Versions: S-Lang version 2.3.2 Description: A segmentation fault was discovered in S-Lang via the function fixup tgetstr. Recommendations: For S-Lang version 2.3.2, consider disabling the fixup tgetstr function as a temporary workaround until a patch i...

PT-2024-13304

Name of the Vulnerable Software and Affected Versions Mesa version 23.0.4 Description A segmentation violation was discovered in glx pbuffer.c when calling glXGetDrawableAttribute. This issue is disputed as there are no common situations where users require uninterrupted operation with an...

PT-2024-13306 · Libglvnd +2 · Libglvnd +2

Name of the Vulnerable Software and Affected Versions: OpenGL libglvnd version bb06db5a Description: A segmentation violation was discovered in the libglxproto.c file of OpenGL libglvnd via the glXGetDrawableScreen function. This issue is disputed as there are no common situations where users...

UBUNTU-CVE-2024-0901

Remotely executed SEGV and out of bounds read allows malicious packet sender to crash or cause an out of bounds read via sending a malformed packet with the correct length...

PT-2024-10424

Name of the Vulnerable Software and Affected Versions cJSON version 1.7.17 Description The issue is related to a segmentation violation that can be triggered through the second parameter of the cJSON SetValuestring function at cJSON.c. This can lead to a denial of service. The vulnerability is...

PT-2024-15905

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions. Description Remotely executed SEGV and out of bounds read allows a malicious packet sender to crash or cause an out of bounds read via sending a malformed packet with...

samba:fuzz_ndr_spoolss_TYPE_OUT: Segv on unknown address in ndr_print_and_forget

Detailed Report: https://oss-fuzz.com/testcase?key=5465351317946368 Project: samba Fuzzing Engine: libFuzzer Fuzz Target: fuzzndrspoolssTYPEOUT Job Type: libfuzzerasansamba Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: ndrprintandforget ndrprintstring...

K000138977: ncurses vulnerability CVE-2022-29458

Security Advisory Description ncurses 6.3 before patch 20220416 has an out-of-bounds read and segmentation violation in convertstrings in tinfo/readentry.c in the terminfo library. CVE-2022-29458 Impact There is no impact; F5 products are not affected by this vulnerability. Security Advisory Stat...

Huawei EulerOS: Security Advisory for ncurses (EulerOS-SA-2024-1474)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization 2.9.0 : ncurses (EulerOS-SA-2024-1474)

According to the versions of the ncurses packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - NCurse v6.4-20230418 was discovered to contain a segmentation fault via the component ncwrapentry. CVE-2023-50495 Note that...

EulerOS Virtualization 2.9.1 : ncurses (EulerOS-SA-2024-1459)

According to the versions of the ncurses packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - NCurse v6.4-20230418 was discovered to contain a segmentation fault via the component ncwrapentry. CVE-2023-50495 Note that...

Buffer Overflow

giflib is vulnerable to Buffer Overflow vulnerability. The vulnerability is due to a flaw in the getarg.c component, leading to a segmentation fault...

glslang:compile_fuzzer: Segv on unknown address in glslang::TInfoSinkBase::location

Project: https://github.com/khronosgroup/glslang.git Detailed Report: https://oss-fuzz.com/testcase?key=5490109455597568 Project: glslang Fuzzing Engine: libFuzzer Fuzz Target: compilefuzzer Job Type: libfuzzerasanglslang Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash...

Moderate: Red Hat Security Advisory: redhat-ds:11 security, bug fix, and enhancement update

An update for the redhat-ds:11 module is now available for Red Hat Directory Server 11.7 for RHEL 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...

Amazon Linux AMI : ImageMagick (ALAS-2024-1926)

The version of ImageMagick installed on the remote host is prior to 6.9.10.68-3.22. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2024-1926 advisory. Integer overflow in MagickCore/profile.c in ImageMagick before 7.0.2-1 allows remote attackers to cause a denial...

RHEL 8 : gmp update (Moderate) (RHSA-2024:1412)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:1412 advisory. The gmp packages contain GNU MP, a library for arbitrary precision arithmetics, signed integers operations, rational numbers, and floating point...