12107 matches found
Debian dla-3114 : libmariadb-dev - security update
The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3114 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3114-2 [email protected] https://www.debian.org/lts/security/...
Google TensorFlow 输入验证错误漏洞
Google TensorFlow is a suite of end-to-end open source platforms for machine learning from Google, Inc. in the United States. Google TensorFlow suffers from an input validation error vulnerability that stems from a segmentation error that can be used to trigger a denial-of-service attack if...
CVE-2022-38890
Nginx NJS v0.7.7 was discovered to contain a segmentation violation via njsutf8next at src/njsutf8.h...
Code injection
Nginx NJS v0.7.7 was discovered to contain a segmentation violation via njsutf8next at src/njsutf8.h...
CVE-2022-38890
Nginx NJS v0.7.7 was discovered to contain a segmentation violation via njsutf8next at src/njsutf8.h...
CVE-2022-38890
Nginx NJS v0.7.7 was discovered to contain a segmentation violation via njsutf8next at src/njsutf8.h...
CVE-2022-38890
CVE-2022-38890 affects Nginx NJS 0.7.7. A segmentation violation is triggered by the njs_utf8_next function in src/njs_utf8.h. Public sources consistently describe the vulnerability as a segmentation fault in NJS, with NVD citing a CVSS v3.1 base score of 5.5 (Medium) and local attack vector, req...
CVE-2022-38890
Nginx NJS v0.7.7 was discovered to contain a segmentation violation via njsutf8next at src/njsutf8.h...
PT-2022-37280 · Sass · Sass
Name of the Vulnerable Software and Affected Versions: Sass affected versions not specified Description: The issue is related to a crash in the Sass software, specifically a segmentation fault on an unknown address. The crash occurs in the Sass::unifyComplex function, which is called by...
Oracle Linux 8 : mariadb:10.3 (ELSA-2022-6443)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-6443 advisory. galera 25.3.35-1 - Rebase to 25.3.35 mariadb 3:10.3.35-1 - Rebase to 10.3.35 3:10.3.34-1 - Rebase to 10.3.34 Tenable has extracted the preceding...
GPAC 安全漏洞
GPAC is an open source multimedia framework. A security vulnerability exists in versions prior to GPAC 2.1.0-DEV that stems from a segmentation error in SFSExpression...
Nginx 缓冲区错误漏洞
Nginx is a lightweight web server/reverse proxy server and email IMAP/POP3 proxy server from Nginx, Inc. in the United States. njs is one of the scripting language components that supports extended NGINX functionality. A security vulnerability exists in Nginx NJS version v0.7.7, which stems from ...
PT-2022-24613 · Nginx · Nginx Njs
Name of the Vulnerable Software and Affected Versions: Nginx NJS version 0.7.7 Description: A segmentation violation was discovered in Nginx NJS via the njs utf8 next function at src/njs utf8.h. Recommendations: For Nginx NJS version 0.7.7, at the moment, there is no information about a newer...
LIEF contains a segmentation violation
LIEF commit 365a16a was discovered to contain a segmentation violation via the component CoreFile.tcc:69. A patch is available at commit ca938740264f1fcb18f91cba8e4039c518ecb75b...
GHSA-X2XX-JW5M-5J86 LIEF contains segmentation violation
LIEF commit 5d1d643 was discovered to contain a segmentation violation via the function LIEF::MachO::SegmentCommand::fileoffset at /MachO/SegmentCommand.cpp. Commit 7acf0bc4224081d4f425fcc8b2e361b95291d878 contains a patch...
GHSA-2P5H-HPJ4-FXGG LIEF contains a segmentation violation
LIEF commit 365a16a was discovered to contain a segmentation violation via the component CoreFile.tcc:69. A patch is available at commit ca938740264f1fcb18f91cba8e4039c518ecb75b...
LIEF contains segmentation violation
LIEF commit 5d1d643 was discovered to contain a segmentation violation via the function LIEF::MachO::SegmentCommand::fileoffset at /MachO/SegmentCommand.cpp. Commit 7acf0bc4224081d4f425fcc8b2e361b95291d878 contains a patch...
PT-2022-37278 · Git +1 · Cyclonedds
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A crash occurred due to a segmentation fault on an unknown address. The crash state includes ddsi config init and fuzz config init.c, indicating the...
Oracle Linux 6 : rsyslog / rsyslog7 (ELSA-2022-9783)
The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-9783 advisory. - Resolves CVE-2022-24903 Orabug: 34226447 rsyslog7 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note...