golang: encoding/xml: stack exhaustion in Decoder.Skip

A flaw was found in golang encoding/xml. When calling Decoder, Skip while parsing a deeply nested XML document, a panic can occur due to stack exhaustion and allows an attacker to impact system availability...

CVE-2022-31183

fs2 is a compositional, streaming I/O library for Scala. When establishing a server-mode "TLSSocket" using "fs2-io" on Node.js, the parameter "requestCert = true" is ignored, peer certificate verification is skipped, and the connection proceeds. The vulnerability is limited to: 1. "fs2-io" runnin...

golang: encoding/xml: stack exhaustion in Decoder.Skip

A flaw was found in golang encoding/xml. When calling Decoder, Skip while parsing a deeply nested XML document, a panic can occur due to stack exhaustion and allows an attacker to impact system availability...

golang: encoding/xml: stack exhaustion in Decoder.Skip

A flaw was found in golang encoding/xml. When calling Decoder, Skip while parsing a deeply nested XML document, a panic can occur due to stack exhaustion and allows an attacker to impact system availability...

Uncontrolled Recursion

Overview std/encoding/xml is a Go standard library package std/encoding/xml Affected versions of this package are vulnerable to Uncontrolled Recursion. Go Vulnerability Report: Calling Decoder.Skip when parsing a deeply nested XML document can cause a panic due to stack exhaustion. Remediation...

CVE-2022-31156 Gradle's dependency verification can ignore checksum verification when signature verification cannot be performed

Gradle is a build tool. Dependency verification is a security feature in Gradle Build Tool that was introduced to allow validation of external dependencies either through their checksum or cryptographic signatures. In versions 6.2 through 7.4.2, there are some cases in which Gradle may skip that...

Google Android 缓冲区错误漏洞

Google Android is a Linux-based open source operating system from Google, Inc. Google Android is vulnerable to an information disclosure vulnerability caused by a faulty boundary check in ATSKIPREST in btahfclientAT.cc, which could be exploited by an attacker to to obtain sensitive information...

Malicious code in skip-reason-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4a30343b31f58eb174f1fed869a1b744f9f733741eb22676357e09395c169212 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6150 Malicious code in skip-reason-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4a30343b31f58eb174f1fed869a1b744f9f733741eb22676357e09395c169212 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

The vulnerability of the skip_range() function implementation in the Vim text editor allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the skiprange function in the Vim text editor is related to the use of an invalid pointer with the “V:” parameter in the Ex mode. Exploiting this vulnerability could allow a attacker to execute arbitrary code or cause a service failure using a specially created file...

PT-2022-2728

Name of the Vulnerable Software and Affected Versions vim versions prior to 8.2.4968 Description The issue is related to a heap-based buffer overflow in the skip string function of the Vim text editor. This can be exploited by an attacker to cause a denial of service or execute arbitrary code by...

GPAC 代码问题漏洞

GPAC is an open source multimedia framework. A code issue vulnerability exists in GPAC version 2.1-DEV-rev87-g053aae8-master, which stems from a null pointer dereference vulnerability due to improper handling of the return value of GFSKIPBOX in the application gfisomparsemovieboxesinternal. An...

PT-2022-29680

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.20 Description The issue is related to the initialization of skip unmap in mt76 dma rx fill. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions pri...

PT-2022-30005

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.34 Description The issue is related to the initialization of skip unmap in mt76 dma rx fill. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions pri...

PT-2022-38009

Уязвимость функции dwc3 gadget ep skip trbs модуля drivers/usb/dwc3/gadget.c драйвера поддержки устройств шины USB ядра операционной системы Linux связана с переполнением буфера на основе стека. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

DEBIAN-CVE-2022-1381

global heap buffer overflow in skiprange in GitHub repository vim/vim prior to 8.2.4763. This vulnerability is capable of crashing software, Bypass Protection Mechanism, Modify Memory, and possible remote execution...

AZL-9487 CVE-2022-1381 affecting package vim for versions less than 8.2.4925-1

global heap buffer overflow in skiprange in GitHub repository vim/vim prior to 8.2.4763. This vulnerability is capable of crashing software, Bypass Protection Mechanism, Modify Memory, and possible remote execution...

ALPINE-CVE-2022-1381

global heap buffer overflow in skiprange in GitHub repository vim/vim prior to 8.2.4763. This vulnerability is capable of crashing software, Bypass Protection Mechanism, Modify Memory, and possible remote execution...

CVE-2022-1381

global heap buffer overflow in skiprange in GitHub repository vim/vim prior to 8.2.4763. This vulnerability is capable of crashing software, Bypass Protection Mechanism, Modify Memory, and possible remote execution...

vim 缓冲区错误漏洞

vim is a UNIX-based editor. vim versions prior to 8.2.4763 contain a buffer overflow vulnerability that stems from a failure to properly validate data boundaries when performing operations on memory in the software skiprange. An attacker could exploit this vulnerability to cause a software crash,...