F5 Nginx 缓冲区错误漏洞

F5 Nginx is a lightweight web server/reverse proxy server and email IMAP/POP3 proxy server from F5 Inc. distributed under the BSD-like protocol. njs is one of the scripting language components that supports extended NGINX functionality. A security vulnerability exists in F5 Nginx NJS version...

ImageMagick 7.1.1-0 DoS

The remote Windows host has a version of ImageMagick installed that is 7.1.1-0. It is, therefore, affected by a denial of service vulnerabilty where a specially created SVG file loads itself and causes a segmentation fault. This flaw allows a remote attacker to pass such a specially crafted SVG...

SUSE SLES15: ImageMagick / ImageMagick-config-7-SUSE / etc (SUSE-SU-2023:1756-1)

The remote SUSE Linux SLES15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:1756-1 advisory. - CVE-2023-1289: Fixed segmentation fault and possible DoS via specially crafted SVG. bsc1209141 Tenable has extracted the preceding...

SUSE-SU-2023:1756-1 Security update for ImageMagick

This update for ImageMagick fixes the following issues: - CVE-2023-1289: Fixed segmentation fault and possible DoS via specially crafted SVG. bsc1209141...

The vulnerability of the command-line interface of ArubaOS systems allows a hacker to gain unauthorized access to protected information.

The vulnerability of the command-line interface of ArubaOS systems is related to deficiencies in the segmentation of the controlled system area. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

Amazon Linux 2023 : ImageMagick, ImageMagick-c++, ImageMagick-c++-devel (ALAS2023-2023-150)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2023-150 advisory. A vulnerability was discovered in ImageMagick where a specially created SVG file loads itself and causes a segmentation fault. This flaw allows a remote attacker to pass a specially crafted SVG file tha...

CVE-2023-28625

modauthopenidc is an authentication and authorization module for the Apache 2.x HTTP server that implements the OpenID Connect Relying Party functionality. In versions 2.0.0 through 2.4.13.1, when OIDCStripCookies is set and a crafted cookie supplied, a NULL pointer dereference would occur,...

Null pointer dereference

modauthopenidc is an authentication and authorization module for the Apache 2.x HTTP server that implements the OpenID Connect Relying Party functionality. In versions 2.0.0 through 2.4.13.1, when OIDCStripCookies is set and a crafted cookie supplied, a NULL pointer dereference would occur,...

CVE-2023-28625

modauthopenidc is an authentication and authorization module for the Apache 2.x HTTP server that implements the OpenID Connect Relying Party functionality. In versions 2.0.0 through 2.4.13.1, when OIDCStripCookies is set and a crafted cookie supplied, a NULL pointer dereference would occur,...

SUSE-SU-2023:1734-1 Security update for ImageMagick

This update for ImageMagick fixes the following issues: - CVE-2023-1289: Fixed segmentation fault and possible DoS via specially crafted SVG. bsc1209141...

SUSE-SU-2023:1733-1 Security update for ImageMagick

This update for ImageMagick fixes the following issues: - CVE-2023-1289: Fixed segmentation fault and possible DoS via specially crafted SVG. bsc1209141...

CVE-2023-28625

modauthopenidc is an authentication and authorization module for the Apache 2.x HTTP server that implements the OpenID Connect Relying Party functionality. In versions 2.0.0 through 2.4.13.1, when OIDCStripCookies is set and a crafted cookie supplied, a NULL pointer dereference would occur,...

Denial Of Service (DoS)

TensorFlow is vulnerable to Denial Of Service DoS. The vulnerability exists due to the improper validation checks in the library, which leads to a segmentation fault with a null pointer dereference in ParallelConcat with XLA, allowing an attacker to cause an application crash when the given...

Denial Of Service (DoS)

ImageMagick is vulnerable to Denial Of Service DoS. The vulnerability exists in DrawPrimitive function of draw.c which allows an attacker to pass a specially crafted SVG file that leads to a segmentation fault leading to an application crash...

Denial Of Service (DoS)

tensorflow is vulnerable to Denial of Service DoS attacks. The vulnerability exists due to bincountop when XLA is enabled, which allows an attacker to cause a segmentation fault when given a parameter weights that is neither the same shape as parameter arr nor a length-0 tensor, causing the...

Denial Of Service (DoS)

tensorflow is vulnerable to Denial of Service DoS attacks. A malicious user is able to cause an integer overflow in gifio.cc leading to segmentation fault when opening multiframe gifs, causing the application to crash...

Denial Of Service (DoS)

tensorflow is vulnerable to Denial of Service DoS attacks. A malicious user is able to trigger a null pointer exception in the SummarizeArray function when the parameter summarize of tf.rawops.Print is zero, leading to a segmentation fault, causing the application to crash...

CVE-2023-26924

A vulnerability was found in LLVM. This security flaw leads to a segmentation fault in mlir::outlineSingleBlockRegion...

CBL Mariner 2.0 Security Update: fribidi (CVE-2022-25310)

The version of fribidi installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-25310 advisory. - A segmentation fault SEGV flaw was found in the Fribidi package and affects the fribidiremovebidimarks...

Mageia: Security Advisory (MGASA-2023-0023)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...