Amazon Linux AMI : samba (ALAS-2022-1642)

The version of samba installed on the remote host is prior to 4.10.16-20.62. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2022-1642 advisory. It was found that the Kerberos Key Distribution Center KDC delegation feature, Service for User S4U, did not sufficient...

Amazon Linux 2022 : e2fsprogs (ALAS2022-2022-228)

The version of e2fsprogs installed on the remote host is prior to 1.46.5-2. It is, therefore, affected by a vulnerability as referenced in the ALAS2022-2022-228 advisory. - An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possib...

Amazon Linux 2022 : ncurses (ALAS2022-2022-217)

The version of ncurses installed on the remote host is prior to 6.2-4.20200222. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2022-2022-217 advisory. - An issue was discovered in ncurses through v6.2-1. nccaptoinfo in captoinfo.c has a heap-based buffer overflow...

Amazon Linux 2022 : freetype (ALAS2022-2022-238)

The version of freetype installed on the remote host is prior to 2.12.1-3. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2022-2022-238 advisory. - FreeType commit 1e2eb65048f75c64b68708efed6ce904c31f3b2f was discovered to contain a heap buffer overflow via the...

PT-2022-36433 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.225 Description: A potential issue exists in the Linux Kernel, specifically related to the gso Generic Segmentation Offload functionality, where a panic can occur when dealing with a frag list that contains...

PT-2022-36028 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.9 Description: A potential issue exists in the Linux Kernel, specifically in the ti: am65-cpsw module, which may cause a segmentation fault at module unload. The actual impact and attack plausibility have n...

Amazon Linux 2 : openjpeg2 (ALAS-2022-1894)

The version of openjpeg2 installed on the remote host is prior to 2.4.0-5. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2022-1894 advisory. A flaw was found in the opj2decompress program in openjpeg2 in the way it handles an input directory with a large number of files...

Amazon Linux 2 : ncurses (ALAS-2022-1893)

The version of ncurses installed on the remote host is prior to 6.0-8.20170212. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2022-1893 advisory. The ncurses package tic is susceptible to a heap overflow on crafted input. When the terminfo entry- description...

Medium: ncurses

Issue Overview: The ncurses package tic is susceptible to a heap overflow on crafted input. When the terminfo entry-description compiler processes input, proper bounds checking was not enforced leading to this software flaw. The highest threat from this vulnerability is system availability...

Medium: e2fsprogs

Issue Overview: An out-of-bounds read/write vulnerability was found in e2fsprogs. This issue leads to a segmentation fault and possibly arbitrary code execution via a specially crafted filesystem. CVE-2022-1304 Affected Packages: e2fsprogs Note: This advisory is applicable to Amazon Linux 2 AL2...

Low: openjpeg2

Issue Overview: A flaw was found in the opj2decompress program in openjpeg2 in the way it handles an input directory with a large number of files. When it fails to allocate a buffer to store the filenames of the input directory, it calls free on an uninitialized pointer, leading to a segmentation...

Seg fault in `ndarray_tensor_bridge` due to zero and large inputs in Tensorflow

...

Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in TensorFlow

Summary IBM Watson Discovery for IBM Cloud Pak for Data contains a vulnerable version of TensorFlow. Vulnerability Details CVEID:CVE-2022-35959 DESCRIPTION: TensorFlow is vulnerable to a denial of service, caused by improper validation of user-supplied input by the implementation of...

CVE-2022-46149

CVE-2022-46149 affects Cap'n Proto and its Rust crate. The vulnerability is an out-of-bounds read caused by logic errors when handling a list-of-pointer type, which can lead to a remote segfault and, with additional actions, memory exfiltration. The issue is present in inlined code and requires r...

The vulnerability of the Mixed Reality Developer Tools component for Windows operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Mixed Reality Developer Tools component for Windows operating systems is related to deficiencies in the system’s controlled area segmentation. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

An issue was discovered in libxml2 before 2.10.3. When parsing a multi-gigabyte XML document with the XML_PARSE_HUGE parser option enabled several integer counters can overflow. This results in an attempt to access an array at a negative 2GB offset typically leading to a segmentation fault.

...

Debian: Security Advisory (DLA-3211-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Denial Of Service (DoS)

advancecomp is vulnerable to denial of service. The vulnerability exists due to a segmentation fault which allows an attacker to cause an application crash...

Denial Of Service (DoS)

advancecomp is vulnerable to denial of service. The vulnerability exists due to a segmentation fault which allows an attacker to cause an application crash...

Denial Of Service (DoS)

advancecomp is vulnerable to denial of service. The vulnerability exists due to a segmentation fault which allows an attacker to cause an application crash...