12135 matches found
CVE-2022-29779
Nginx NJS v0.7.2 was discovered to contain a segmentation violation in the function njsvalueownenumerate at src/njsvalue.c...
CVE-2022-29779
CVE-2022-29779 affects Nginx NJS v0.7.2. The issue is a segmentation violation in the function njs_value_own_enumerate located in src/njs_value.c . This vulnerability can cause a denial of service. No exploitation details or fixes are provided in the available documents; remediation/fix status is...
Denial Of Service (DoS)
MariaDB is vulnerable to denial of service. The vulnerability exists due to a segmentation fault via the component Itemfield::usedtables/updatedependmapfororder...
Denial Of Service (DoS)
mariadb is vulnerable to denial of service. An attacker can crash the application through the segmentation fault in the sqlclass.cc...
SUSE SLES12 Security Update : fribidi (SUSE-SU-2022:1845-1)
The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:1845-1 advisory. - A stack-based buffer overflow flaw was found in the Fribidi package. This flaw allows an attacker to pass a specially crafted fil...
SUSE SLED15 / SLES15 Security Update : fribidi (SUSE-SU-2022:1844-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:1844-1 advisory. - A stack-based buffer overflow flaw was found in the Fribidi package. This flaw allows an attacker to pass a...
Out of Bounds Read in string_scan_range
Description When providing crafted input, an attacker can cause rread32 within stringscanrange to do an out of bounds read. This causes a segmentation fault, but could also potentially enable information disclosure. What's interesting is there is already a comment stating "may oobread" near this...
Null pointer dereference at chafa-pixops.c:95
Description Null pointer dereference in hpjansson/chafa at chafa-pixops.c:95. Build export CFLAGS="-g -O0 -lpthread -fsanitize=address" export CXXFLAGS="-g -O0 -lpthread -fsanitize=address" export LDFLAGS="-fsanitize=address" ./autogen.sh ./configure --disable-shared make POC ./chafa POC POC ASAN...
Null pointer dereference in index.c
Description Null pointer dereference in bfabiszewski/libmobi at index.c:1076. Build export CFLAGS="-g -O0 -lpthread -fsanitize=address" export CXXFLAGS="-g -O0 -lpthread -fsanitize=address" export LDFLAGS="-fsanitize=address" ./autogen.sh ./configure --disable-shared make POC ./mobitool -e -o...
Denial Of Service (DoS)
mariadb is vulnerable to Denial Of Service DoS. An attacker can crash the application through the segmentation fault in sqlwindow.cc...
Denial Of Service (DoS)
mariadb is vulnerable to Denial Of Service DoS. An attacker can crash the application through the segmentation fault in itemsubselect.cc...
Denial Of Service (DoS)
mariadb is vulnerable to denial of service. The vulnerability exists in sql/fieldconv.cc due to a segmentation fault via the component which allows an attacker to cause an application crash...
Denial Of Service (DoS)
mariadb is vulnerable to denial of service. The vulnerability exists in sql/itemcmpfunc.cc because it contains a segmentation fault via the component which allows an attacker to cause an application crash...
Denial Of Service (DoS)
mariadb is vulnerable to Denial Of Service DoS. The vulnerability exists in /itemfunc.cc due to a segmentation fault which allows an attacker to crash the application via malicious input...
Open Automation Software Platform Engine cleartext transmission of sensitive information vulnerability
Summary A cleartext transmission of sensitive information vulnerability exists in the OAS Engine configuration communications functionality of Open Automation Software OAS Platform V16.00.0112. A targeted network sniffing attack can lead to a disclosure of sensitive information. An attacker can...
Segfault and OOB write due to incomplete validation in `EditDistance` in TensorFlow
Impact The implementation of tf.rawops.EditDistance has incomplete validation. Users can pass negative values to cause a segmentation fault based denial of service: python import tensorflow as tf hypothesisindices = tf.constant-1250999896764, shape=3, 3, dtype=tf.int64 hypothesisvalues =...
GHSA-2R2F-G8MW-9GVR Segfault and OOB write due to incomplete validation in `EditDistance` in TensorFlow
Impact The implementation of tf.rawops.EditDistance has incomplete validation. Users can pass negative values to cause a segmentation fault based denial of service: python import tensorflow as tf hypothesisindices = tf.constant-1250999896764, shape=3, 3, dtype=tf.int64 hypothesisvalues =...
CVE-2021-42614
A use after free in infowidthinternal in bkinfo.c in Halibut 1.2 allows an attacker to cause a segmentation fault or possibly have unspecified other impact via a crafted text document...