Denial Of Service (DoS)

fis-gtm is vulnerable to denial of service. The vulnerability exists due to an integer underflow of the size of calls to memset in opfnj3 in srport/opfnj3.c which allows an attacker to cause a segmentation fault and crash the application using crafted input...

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service DoS attacks. A segmentation fault in RaggedBincount could be triggered via an empty input tensor through splits, which allows remote attackers to cause denial of service conditions in the system...

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service. The vulnerability exists in the Compute function of bincountop.cc When the SparseBincount is given inputs for indices, values, and denseshape parameters, allowing an attacker to cause an application crash through the segmentation fault...

PT-2022-22546 · Otfcc +1 · Otfcc +1

Name of the Vulnerable Software and Affected Versions: OTFCC commit 617837b Description: A segmentation violation was discovered in OTFCC commit 617837b via the "/release-x64/otfccdump+0x65f724" endpoint. This issue affects the specified commit. Recommendations: For OTFCC commit 617837b, consider...

CVE-2022-37032

An out-of-bounds read in the BGP daemon of FRRouting FRR before 8.4 may lead to a segmentation fault and denial of service. This occurs in bgpcapabilitymsgparse in bgpd/bgppacket.c...

CVE-2022-37032

An out-of-bounds read in the BGP daemon of FRRouting FRR before 8.4 may lead to a segmentation fault and denial of service. This occurs in bgpcapabilitymsgparse in bgpd/bgppacket.c...

CVE-2022-37032

CVE-2022-37032 : FRRouting (FRR) before 8.4 has an out-of-bounds read in the BGP daemon, specifically in bgp_capability_msg_parse (bgpd/bgp_packet.c), which may trigger a segmentation fault and DoS. Affected product: FRR’s BGP daemon; impact is denial of service due to memory access. Exploitation...

CVE-2022-35965 Segfault in `LowerBound` and `UpperBound` in TensorFlow

TensorFlow is an open source platform for machine learning. If LowerBound or UpperBound is given an emptysortedinputs input, it results in a nullptr dereference, leading to a segfault that can be used to trigger a denial of service attack. We have patched the issue in GitHub commit...

CVE-2022-39063

When Open5GS UPF receives a PFCP Session Establishment Request, it stores related values for building the PFCP Session Establishment Response. Once UPF receives a request, it gets the fteidlen from incoming message, and then uses it to copy data from incoming message to struct fteid without...

CVE-2022-39063

When Open5GS UPF receives a PFCP Session Establishment Request, it stores related values for building the PFCP Session Establishment Response. Once UPF receives a request, it gets the fteidlen from incoming message, and then uses it to copy data from incoming message to struct fteid without...

Server side request forgery (ssrf)

When Open5GS UPF receives a PFCP Session Establishment Request, it stores related values for building the PFCP Session Establishment Response. Once UPF receives a request, it gets the fteidlen from incoming message, and then uses it to copy data from incoming message to struct fteid without...

CVE-2022-39063

When Open5GS UPF receives a PFCP Session Establishment Request, it stores related values for building the PFCP Session Establishment Response. Once UPF receives a request, it gets the fteidlen from incoming message, and then uses it to copy data from incoming message to struct fteid without...

CVE-2022-39063

When Open5GS UPF receives a PFCP Session Establishment Request, it stores related values for building the PFCP Session Establishment Response. Once UPF receives a request, it gets the fteidlen from incoming message, and then uses it to copy data from incoming message to struct fteid without...

OESA-2022-1923 fribidi security update

A library to handle bidirectional scripts for example Hebrew, Arabic, so that the display is done in the proper way; while the text data itself is always written in logical order and display in a different direction . Security Fixes: A stack-based buffer overflow flaw was found in the Fribidi...

CVE-2022-35019

A segmentation fault was found in advancecomp in the mngreaddelta function of the mng.c file. The flaw occurs due to invalid WRITE memory access. This flaw allows an attacker to cause a crash by tricking a user into opening a malformed file, leading to a denial of service attack...

CVE-2022-35018

A segmentation fault was found in advancecomp in the colequal function of the mngex.cc file. The flaw occurs due to invalid READ memory access. This flaw allows an attacker to cause a crash by tricking a user into opening a malformed file, leading to a denial of service attack...

CVE-2022-35014

A segmentation fault was found in advancecomp caused by invalid READ memory access. This flaw allows an attacker to cause a crash by tricking a user into opening a malformed file, leading to a denial of service attack...

Google TensorFlow 输入验证错误漏洞

Google TensorFlow is a suite of end-to-end open source platforms for machine learning from Google Inc. in the United States. Google TensorFlow suffers from an input validation error vulnerability that stems from a segmentation error in the converter and crashes the Python process when using a...

Google TensorFlow 输入验证错误漏洞

Google TensorFlow is a suite of end-to-end open source platforms for machine learning from Google, Inc. in the United States. Google TensorFlow suffers from an input validation error vulnerability that stems from a segmentation error that can be used to trigger a denial-of-service attack if...

Google TensorFlow 输入验证错误漏洞

Google TensorFlow is an end-to-end open source platform for machine learning from Google, Inc. An input validation error vulnerability exists in Google TensorFlow, which stems from a segmentation error that occurs if QuantizedAdd is given a tensor of non-zero rank mininput or maxinput. An attacke...