frr: crash from specially crafted MP_UNREACH_NLRI-containing BGP UPDATE message

A flaw was found in frr. A crash can occur when processing a crafted BGP UPDATE message with a MPUNREACHNLRI attribute and additional NLRI data that lacks mandatory path attributes...

PYSEC-2024-106

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An out-of-bounds read was found in Exiv2 version v0.28.1. The vulnerable function, QuickTimeVideo::NikonTagsDecoder, was new in v0.28.0, so Exiv2 versions before v0.28 are no...

RHCOS 4 : OpenShift Container Platform 4.10.61 (RHSA-2023:3362)

The remote Red Hat Enterprise Linux CoreOS 4 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2023:3362 advisory. - json-smart: Uncontrolled Resource Consumption vulnerability in json-smart Resource Exhaustion CVE-2023-1370 Note that Nessus has not tested...

PT-2023-35674 · Git +1 · Libxml2

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-use-after-free READ 8 crash. The crash state involves the functions xmlStaticCopyNode, xmlDocCopyNode, and...

PT-2023-35587 · Git +1 · Lcms

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read crash. Technical details include a crash state involving WriteCLUT, cmsGetPostScriptColorResource, an...

Denial Of Service (DoS)

github.com/mattermost/mattermost-plugin-calls is vulnerable to Denial Of Service. The vulnerability due to function isMobilePostGA in utils.go there is no check for the length of fields after it splits the User-Agent string. This allows an attacker to send a request without a User-Agent header,...

CVE-2023-5724

Drivers are not always robust to extremely large draw calls and in some cases this scenario could have led to a crash. This vulnerability affects Firefox 119, Firefox ESR 115.4, and Thunderbird 115.4.1...

Denial Of Service (DoS)

mozilla-ssl-config-generator is vulnerable to Denial Of Service DoS. The vulnerability exists due to the use of long exponents that arguably make certain calculations unnecessarily expensive causing an application crash...

PT-2023-36028 · Git +1 · File

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type identified as Heap-double-free. The crash state involves functions such as regcomp, file regcomp, and load 1. No...

PT-2023-36018 · Assimp · Assimp

Name of the Vulnerable Software and Affected Versions: Assimp affected versions not specified Description: A heap buffer overflow read issue has been identified. The crash occurs in the Assimp::MD5::MD5MeshParser::MD5MeshParser function, which is called by Assimp::MD5Importer::LoadMD5MeshFile and...

Store Front Server Group Server is not reachable. Configuration settings might be out of date.

When observing the Server Group in the StoreFront management console, for each Server Member server the notification "Server is not reachable. Configuration settings might be out of date." is displayed with a red exclamation point icon. When initiating propagation theStoreFront management console...

OSV-2023-739 UNKNOWN READ in OT::glyph_variations_t::create_from_glyphs_var_data

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61724 Crash type: UNKNOWN READ Crash state: OT::glyphvariationst::createfromglyphsvardata OT::gvar::decompileglyphvariations OT::gvar::instantiate...

Low: gawk

Issue Overview: A heap out-of-bounds read flaw was found in builtin.c in the gawk package which may result in a crash of the software. CVE-2023-4156 Affected Packages: gawk Issue Correction: Run dnf update gawk --releasever 2023.1.20230825 or dnf update --advisory ALAS2023-2023-292 --releasever...

PT-2023-35885 · Git +1 · Clamav

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type known as Memcpy-param-overlap. The crash state involves several functions, including repeat, p ere, and cli regcomp...

SUSE-SU-2023:2562-1 Security update for bluez

This update for bluez fixes the following issues: - CVE-2023-27349: Fixed crash while handling unsupported events bsc1210398...

OSV-2023-501 UNKNOWN READ in _dwarf_exec_frame_instr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59950 Crash type: UNKNOWN READ Crash state: dwarfexecframeinstr dwarfgetfdeinfoforapcrow dwarfgetfdeinfoforallregs3...

PT-2023-35819 · Wabt · Wabt

Name of the Vulnerable Software and Affected Versions: wabt affected versions not specified Description: The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the wabt::BinaryReaderObjdump module, specifically in the functions PrintInitExpr, EndInitExpr,...

PT-2023-35812 · Hdf5 · Hdf5

Name of the Vulnerable Software and Affected Versions: HDF5 affected versions not specified Description: A heap buffer overflow issue has been identified, which can cause a crash. The crash occurs due to a write operation in the heap buffer. Technical details about the issue include the involveme...

CVE-2023-1370

A flaw was found in the json-smart package. This security flaw occurs when reaching a ‘‘ or ‘‘ character in the JSON input, and the code parses an array or an object, respectively. The 3PP does not have any limit to the nesting of such arrays or objects. Since nested arrays and objects are parsed...

Buffer Underflow

libzstd.so is vulnerable to Buffer Underflow. The vulnerability is due to not validating the character arguments dir1 and dir2 passed to mallocAndJoin2Dir function in util.c file . This can result in buffer underflow error when an empty string is passed to the dir1 argument causing application to...