EulerOS 2.0 SP9 : sqlite (EulerOS-SA-2021-2722)

According to the versions of the sqlite package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - DISPUTED A segmentation fault can occur in the sqlite3.exe command-line component of SQLite 3.36.0 via the idxGetTableInfo function when there is...

Crash in `tf.math.segment_*` operations

Impact The implementation of tf.math.segment operations results in a CHECK-fail related abort and denial of service if a segment id in segmentids is large. python import tensorflow as tf tf.math.segmentmaxdata=np.ones1,10,1, segmentids=1676240524292489355 tf.math.segmentmindata=np.ones1,10,1,...

Segfault while copying constant resource tensor

Impact During TensorFlow's Grappler optimizer phase, constant folding might attempt to deep copy a resource tensor. This results in a segfault, as these tensors are supposed to not change. Patches We have patched the issue in GitHub commit 7731e8dfbe4a56773be5dc94d631611211156659. The fix will be...

lua: segmentation fault in getlocal and setlocal functions in ldebug.c

ldebug.c in Lua 5.4.0 allows a negation overflow and segmentation fault in getlocal and setlocal, as demonstrated by getlocal3,2^31...

Low: Red Hat Security Advisory: lua security update

An update for lua is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE lin...

ALSA-2021:4510 Low: lua security update

The lua packages provide support for Lua, a powerful light-weight programming language designed for extending applications. Lua is also frequently used as a general-purpose, stand-alone language. Security Fixes: lua: segmentation fault in getlocal and setlocal functions in ldebug.c CVE-2020-24370...

lua security update

An update is available for lua. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The lua packages provide support for Lua, a powerful light-weight programming...

Low: lua security update

The lua packages provide support for Lua, a powerful light-weight programming language designed for extending applications. Lua is also frequently used as a general-purpose, stand-alone language. Security Fixes: lua: segmentation fault in getlocal and setlocal functions in ldebug.c CVE-2020-24370...

RLSA-2021:4510 Low: lua security update

The lua packages provide support for Lua, a powerful light-weight programming language designed for extending applications. Lua is also frequently used as a general-purpose, stand-alone language. Security Fixes: lua: segmentation fault in getlocal and setlocal functions in ldebug.c CVE-2020-24370...

OSV-2021-1553 Segv on unknown address in bfd_getl16

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40809 Crash type: Segv on unknown address Crash state: bfdgetl16 bfdmipselfrelocunshuffle bfdmipself32gprel16reloc...

Samba输入验证错误漏洞

Samba is the standard Windows interoperability suite for Linux and Unix. samba is vulnerable to an input validation error, which stems from a flaw found in the way samba implements DCE/RPC. If a client of the Samba server sends a very large DCE/RPC request and chooses to segment it, an attacker...

CVE-2021-42074

An issue was discovered in Barrier before 2.3.4. An unauthenticated attacker can cause a segmentation fault in the barriers component aka the server-side implementation of Barrier by quickly opening and closing TCP connections while sending a Hello message for each TCP session...

CVE-2021-42074

An issue was discovered in Barrier before 2.3.4. An unauthenticated attacker can cause a segmentation fault in the barriers component aka the server-side implementation of Barrier by quickly opening and closing TCP connections while sending a Hello message for each TCP session...

CVE-2021-42074

An issue was discovered in Barrier before 2.3.4. An unauthenticated attacker can cause a segmentation fault in the barriers component aka the server-side implementation of Barrier by quickly opening and closing TCP connections while sending a Hello message for each TCP session...

CVE-2021-42074

An issue was discovered in Barrier before 2.3.4. An unauthenticated attacker can cause a segmentation fault in the barriers component aka the server-side implementation of Barrier by quickly opening and closing TCP connections while sending a Hello message for each TCP session...

CVE-2021-42074

The CVE applies to Barrier before 2.3.4. Affected component: the server-side Barrier implementation. The issue allows an unauthenticated attacker to cause a segmentation fault by rapidly opening and closing TCP connections while sending a Hello message for each session, exploiting how Hello messa...

Barrier 资源管理错误漏洞

Barrier is a software that mimics the functionality of the Kvm switcher. A security vulnerability exists in Barrier, which stems from the fact that prior to 2.3.4 Barrier sent Hello messages for each TCP session simultaneously, which could be used by an attacker to cause a segmentation error in t...

OPENSUSE-SU-2021:1458-1 Security update for transfig

This update for transfig fixes the following issues: Update to fig2dev version 3.2.8 Patchlevel 8b Aug 2021 - bsc1190618, CVE-2020-21529: stack buffer overflow in the bezierspline function in genepic.c. - bsc1190615, CVE-2020-21530: segmentation fault in the readobjects function in read.c. -...

Security update for transfig (important)

openSUSE Security Update: Security update for transfig Announcement ID: openSUSE-SU-2021:1458-1 Rating: important References: 1189325 1189343 1189345 1189346 1190607 1190611 1190612 1190615 1190616 1190617 1190618 1192019 Cross-References: CVE-2020-21529 CVE-2020-21530 CVE-2020-21531 CVE-2020-215...

CVE-2021-41222

TensorFlow is an open source platform for machine learning. In affected versions the implementation of SplitV can trigger a segfault is an attacker supplies negative arguments. This occurs whenever sizesplits contains more than one value and at least one value is negative. The fix will be include...