12128 matches found
CVE-2022-32745
A flaw was found in Samba. Samba AD users can cause the server to access uninitialized data with an LDAP add or modify the request, usually resulting in a segmentation fault...
The vulnerability of the Display Key Combination Fast Access swhkd implementation in the Wayland display server protocol is related to deficiencies in the system’s controlled area segmentation. This allows a malicious actor to trigger a service failure.
The vulnerability of the Display Key Combination Fast Access swhkd in the Wayland display server protocol is related to deficiencies in the system’s controlled area separation mechanisms. Exploiting this vulnerability can allow attackers to cause service failures...
PT-2022-5112 · Assimp +2 · Assimp +2
Name of the Vulnerable Software and Affected Versions: Open Asset Import Library Assimp versions prior to the version containing the fix for the segmentation violation in Assimp::XFileImporter::CreateMeshes Description: The issue is related to a segmentation violation in the...
Null Pointer Dereference Caused Segmentation Fault
Description Null pointer dereference caused segmentation fault. This can cause Denial-of -service attack. version smlijun@ubuntu:/gpacasan/bin/gcc$ ./MP4Box -version MP4Box - GPAC version 2.1-DEV-rev243-gf87b12b32-master c 2000-2022 Telecom Paris distributed under LGPL v2.1+ - http://gpac.io Plea...
Safety issues in `pkcs11`
Impact The interface of pkcs11 is subject to a number of safety issues, mainly related to handling of raw pointers. Despite presenting a safe interface, many of the functions and methods that rely on inputs which contain pointers attributes and mechanisms in particular can lead to segmentation...
RUSTSEC-2022-0034 Safety issues in `pkcs11`
Impact The interface of pkcs11 is subject to a number of safety issues, mainly related to handling of raw pointers. Despite presenting a safe interface, many of the functions and methods that rely on inputs which contain pointers attributes and mechanisms in particular can lead to segmentation...
EulerOS Virtualization 3.0.2.0 : gmp (EulerOS-SA-2022-1683)
According to the versions of the gmp packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : GNU Multiple Precision Arithmetic Library GMP through 6.2.1 has an mpz/inpraw.c integer overflow and resultant buffer overflow via...
The vulnerability of the Display Key Combination Fast Access swhkd implementation in the Wayland server display protocol is related to deficiencies in the system’s controlled area segmentation. This allows a intruder to gain unauthorized access to protected information.
The vulnerability of the Display Key Combination Fast Access SWHKD in the Wayland display server protocol is related to deficiencies in the system’s controlled area segmentation when processing files with the -c parameter. Exploiting this vulnerability can allow an intruder to gain unauthorized...
Medium: 389-ds-base
Issue Overview: A double free was found in the way 389-ds-base handles virtual attributes context in persistent searches. An attacker could send a series of search requests, forcing the server to behave unexpectedly, and crash. CVE-2021-4091 A vulnerability was found in the 389 Directory Server...
Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS : FreeType vulnerabilities (USN-5528-1)
The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5528-1 advisory. It was discovered that FreeType did not correctly handle certain malformed font files. If a user were tricked into using a...
389-ds-base: sending crafted message could result in DoS
A vulnerability was found in the 389 Directory Server that allows an unauthenticated attacker with network access to the LDAP port to cause a denial of service. The denial of service is triggered by a single message sent over a TCP connection. No bind or other authentication is required. This...
AZL-10317 CVE-2022-2476 affecting package wavpack for versions less than 5.6.0-1
A null pointer dereference bug was found in wavpack-5.4.0 The results from the ASAN log: AddressSanitizer:DEADLYSIGNAL ===================================================================84257==ERROR: AddressSanitizer: SEGV on unknown address 0x000000000000 pc 0x561b47a970c6 bp 0x7fff13952fb0 sp...
DEBIAN-CVE-2022-1922
DOS / potential heap overwrite in mkv demuxing using zlib decompression. Integer overflow in matroskademux element in gstmatroskadecompressdata function which causes a segfault, or could cause a heap overwrite, depending on libc and OS. Depending on the libc used, and the underlying OS...
UBUNTU-CVE-2022-2476
A null pointer dereference bug was found in wavpack-5.4.0 The results from the ASAN log: AddressSanitizer:DEADLYSIGNAL ===================================================================84257==ERROR: AddressSanitizer: SEGV on unknown address 0x000000000000 pc 0x561b47a970c6 bp 0x7fff13952fb0 sp...
Silicon Graphics LibTIFF 安全漏洞
Silicon Graphics LibTIFF is a library for reading and writing TIFF Tagged Image File Format files from Silicon Graphics, USA. The library contains some command line tools for processing TIFF files. A security vulnerability exists in Silicon Graphics LibTIFF that stems from the possibility that...
GStreamer 输入验证错误漏洞
GStreamer is a set of frameworks for processing streaming media. An input validation error vulnerability exists in GStreamer version 1.16.2, which stems from an integer overflow in the matroskademux element of the gstmatroskadecompressdata function, which results in a segmentation error that can ...
CVE-2022-2476
A null pointer dereference bug was found in wavpack-5.4.0 The results from the ASAN log: AddressSanitizer:DEADLYSIGNAL ===================================================================84257==ERROR: AddressSanitizer: SEGV on unknown address 0x000000000000 pc 0x561b47a970c6 bp 0x7fff13952fb0 sp...
CVE-2022-34032
Nginx NJS v0.7.5 was discovered to contain a segmentation violation in the function njsvalueownenumerate at src/njsvalue.c...
