498 matches found
Security Bulletin: IBM Workload Scheduler potentially affected by a vulnerability found in Json-smart library (CVE-2023-1370)
Summary IBM Workload Scheduler is potentially affected by a vulnerability found in Json-smart library that can cause a stack exhaustion stack overflow and software crash. Specifically, the following plugins can suffer from this issue: Azure Storage Job Executor, Azure Resource Manager Job Executo...
PT-2023-35775 · Git +1 · Binutils
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-double-free crash. The crash state includes functions such as cache bclose and bfd close all done, and it is associated wi...
OSV-2023-310 UNKNOWN READ in memdup_suffix0
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57937 Crash type: UNKNOWN READ Crash state: memdupsuffix0 fuzz-efi-string.c centipede::RunOneInput...
PT-2023-35734 · Git +1 · Libxslt
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the following functions: xmlSwitchEncoding,...
CVE-2023-1370
Json-smart is a performance focused, JSON processor lib. When reaching a ‘‘ or ‘‘ character in the JSON input, the code parses an array or an object respectively. It was discovered that the code does not have any limit to the nesting of such arrays or objects. Since the parsing of nested arrays a...
CVE-2023-1370
Json-smart is a performance focused, JSON processor lib. When reaching a ‘‘ or ‘‘ character in the JSON input, the code parses an array or an object respectively. It was discovered that the code does not have any limit to the nesting of such arrays or objects. Since the parsing of nested arrays a...
Stack overflow
Json-smart is a performance focused, JSON processor lib. When reaching a ‘‘ or ‘‘ character in the JSON input, the code parses an array or an object respectively. It was discovered that the code does not have any limit to the nesting of such arrays or objects. Since the parsing of nested arrays a...
PT-2023-35706 · Git +1 · Libxml2
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash caused by a global buffer overflow read. The crash occurs in the following functions: xmlParseQName, xmlParseStartTag2, a...
PT-2023-35703 · Git +1 · Mruby
Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: A crash occurred due to an unknown read issue, as reported by OSS-Fuzz. The crash state includes mrb exc get id, mrb no method error, and mrb method missing. No information is available...
CVE-2023-1370
Json-smart is a performance focused, JSON processor lib. When reaching a ‘‘ or ‘‘ character in the JSON input, the code parses an array or an object respectively. It was discovered that the code does not have any limit to the nesting of such arrays or objects. Since the parsing of nested arrays a...
Denial Of Service (DoS)
openmage/magento-lts is vulnerable to Denial Of Service DoS. The vulnerability exists in the filter function of MaliciousCode.php, allowing an attacker to cause an application crash through an infinite loop by providing malicious input...
Vim has a binary vulnerability (CNVD-2023-17836)
Vim is a cross-platform text editor. Vim suffers from a binary vulnerability that can be exploited by attackers to cause software crashes, memory modification, and remote execution...
CVE-2023-0049
A flaw was found in vim, which is vulnerable to an out-of-bounds read in the buildstlstrhl function. This flaw allows a specially crafted file to cause information disclosure, data integrity corruption, or crash the software. Mitigation Do not run vim with -s scriptin on untrusted scripts...
Denial Of Service (DoS)
radare2 is vulnerable to Denial Of Service DoS. The vulnerability exists in the iobank.c and newrbtree.c due lack of validation of user inputs which allows an attacker to cause an application crash...
OSV-2022-1195 Memcpy-param-overlap in repeat
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53626 Crash type: Memcpy-param-overlap Crash state: repeat repeat pere...
Denial Of Service (DoS)
xen is vulnerable to denial of service. The vulnerability exists because node transactions are not properly handled which allows an attacker to cause an application crash by creating arbitrary number of nodes...
CVE-2022-37290
GNOME Nautilus 42.2 allows a NULL pointer dereference and getbasename application crash via a pasted ZIP archive...
GHSA-59HJ-62F5-FGMC free5GC vulnerable to malformed NGAP message crashing the AMF and NGAP decoders
In free5GC 3.2.1, a malformed NGAP message can crash the AMF and NGAP decoders via an index-out-of-range panic in aper.GetBitString...
Denial Of Service (DoS)
golang.org/x/text is vulnerable to denial of service. The vulnerability exists in the ParseAcceptLanguage function of parse.go, allowing an attacker to cause an application crash through the maliciously crafted Accept-Language header...
OTFCC 缓冲区错误漏洞
OTFCC is a C library and utility open sourced by Caryll. It is used to parse and write OpenType font files.OTFCC 0.10.4 and earlier versions have a buffer overflow vulnerability that stems from /release-x64/otfccdump 0x6b0d63 a boundary error when processing untrusted input, which can be exploite...