12516 matches found
Linux SCTP DoS
The vulnerability of the sctpmakestrresetreq function net/sctp/smmakechunk.c in the Linux kernel is related to the lack of a mechanism for data type conversion. Exploiting this vulnerability allows an attacker to cause service failures...
DEBIAN-CVE-2022-2526
A use-after-free vulnerability was found in systemd. This issue occurs due to the onstreamio function and dnsstreamcomplete function in 'resolved-dns-stream.c' not incrementing the reference counting for the DnsStream object. Therefore, other functions and callbacks called can dereference the...
CVE-2022-2526
A use-after-free vulnerability was found in systemd. This issue occurs due to the onstreamio function and dnsstreamcomplete function in 'resolved-dns-stream.c' not incrementing the reference counting for the DnsStream object. Therefore, other functions and callbacks called can dereference the...
CVE-2022-2526
A use-after-free vulnerability was found in systemd. This issue occurs due to the onstreamio function and dnsstreamcomplete function in 'resolved-dns-stream.c' not incrementing the reference counting for the DnsStream object. Therefore, other functions and callbacks called can dereference the...
CVE-2022-2526
A use-after-free vulnerability was found in systemd. This issue occurs due to the onstreamio function and dnsstreamcomplete function in 'resolved-dns-stream.c' not incrementing the reference counting for the DnsStream object. Therefore, other functions and callbacks called can dereference the...
Security Bulletin: Vulnerability in RC4 stream cipher affects IBM HTTP Server and Caching Proxy (CVE-2015-2808)
Summary The RC4 "Bar Mitzvah" SSL/TLS may affect some configurations of the IBM HTTP Server and some configurations of the IBM Caching Proxy for WebSphere Application Server. Vulnerability Details CVEID: CVE-2015-2808 DESCRIPTION: The RC4 algorithm, as used in the TLS protocol and SSL protocol,...
CVE-2022-38176
An issue was discovered in YSoft SAFEQ 6 before 6.0.72. Incorrect privileges were configured as part of the installer package for the Client V3 services, allowing for local user privilege escalation by overwriting the executable file via an alternative data stream. NOTE: this is not the same as...
CVE-2022-38176
YSoft SAFEQ 6 before 6.0.72 contains an installer privilege issue for the Client V3 services. The root cause is incorrect privileges configured in the installer package, enabling local privilege escalation by overwriting the executable via an alternate data stream. Impact is local, with high conf...
CVE-2022-38176
An issue was discovered in YSoft SAFEQ 6 before 6.0.72. Incorrect privileges were configured as part of the installer package for the Client V3 services, allowing for local user privilege escalation by overwriting the executable file via an alternative data stream. NOTE: this is not the same as...
arrow-java:FuzzIpcStream: Security exception in java.base/java.nio.Bits.reserveMemory
Detailed Report: https://oss-fuzz.com/testcase?key=4847330683125760 Project: arrow-java Fuzzing Engine: libFuzzer Fuzz Target: FuzzIpcStream Job Type: libfuzzerasanarrow-java Platform Id: linux Crash Type: Security exception Crash Address: Crash State: java.base/java.nio.Bits.reserveMemory...
CVE-2022-38176: Undefined Security Weakness
An issue was discovered in YSoft SAFEQ 6 before 6.0.72. Incorrect privileges were configured as part of the installer package for the Client V3 services, allowing for local user privilege escalation by overwriting the executable file via an alternative data stream. NOTE: this is not the same as...
In MariaDB before 10.9.2 compress_write in extra/mariabackup/ds_compress.cc does not release data_mutex upon a stream write failure which allows local users to trigger a deadlock.
...
PT-2022-37755
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50898 Crash type: UNKNOWN READ Crash state: stream finalize i free object cos write stream alloc...
com.lightbend.akka:akka-stream-alpakka-geode_2.11 (2.0.2), com.lightbend.akka:akka-stream-alpakka-geode_2.12 (>=2.0.2, <=3.0.4) +41 more potentially affected by CVE-2022-37021 via org.apache.geode:geode-core (>=1.13.0, <=1.13.4)
org.apache.geode:geode-core MAVEN version =1.13.0, =2.0.2, =2.0.2, =1.13.0, =1.13.0, =1.13.0, =1.13.0, =1.13.0, =1.13.0, =1.13.0, =1.13.2, =1.13.2, =1.13.2, =1.13.0, =1.13.0, =1.13.4 and more Source cves: CVE-2022-37021 Source advisory: OSV:GHSA-Q4Q3-R45F-7GWG...
xstream:XmlFuzzer: Security exception in com.ctc.wstx.dtd.FullDTDReader.readContentSpec
Project: https://github.com/x-stream/xstream.git Detailed Report: https://oss-fuzz.com/testcase?key=5060517357551616 Project: xstream Fuzzing Engine: libFuzzer Fuzz Target: XmlFuzzer Job Type: libfuzzerasanxstream Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...
com.lightbend.akka:akka-stream-alpakka-geode_2.11 (2.0.2), com.lightbend.akka:akka-stream-alpakka-geode_2.12 (>=2.0.2, <=3.0.4) +41 more potentially affected by CVE-2022-37021 via org.apache.geode:geode-core (>=1.13.0, <=1.13.4)
org.apache.geode:geode-core MAVEN version =1.13.0, =2.0.2, =2.0.2, =1.13.0, =1.13.0, =1.13.0, =1.13.0, =1.13.0, =1.13.0, =1.13.0, =1.13.2, =1.13.2, =1.13.2, =1.13.0, =1.13.0, =1.13.4 and more Source cves: CVE-2022-37021 Source advisory: MEND:CVE-2022-37021...
DEBIAN-CVE-2022-24106
In Xpdf prior to 4.04, the DCT JPEG decoder was incorrectly allowing the 'interleaved' flag to be changed after the first scan of the image, leading to an unknown integer-related vulnerability in Stream.cc...
CVE-2022-24107
Xpdf prior to 4.04 lacked an integer overflow check in JPXStream.cc...
UBUNTU-CVE-2022-24106
In Xpdf prior to 4.04, the DCT JPEG decoder was incorrectly allowing the 'interleaved' flag to be changed after the first scan of the image, leading to an unknown integer-related vulnerability in Stream.cc...
Google Chrome Resource Management Error Vulnerability
Google Chrome is a web browser from Google, Inc. in the United States. Google Chrome has a security vulnerability that originates from reuse after release in the login stream...