Lucene search
K

147 matches found

Positive Technologies
Positive Technologies
added 2022/11/14 12:0 a.m.2 views

PT-2022-35035 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to 6.0.3 Description: The issue is related to the compiletime strlen function under UBSAN BOUNDS LOCAL. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

7.2AI score
Exploits0References1
Positive Technologies
Positive Technologies
added 2022/09/07 12:0 a.m.2 views

PT-2025-53144

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains an issue related to the compiletime strlen function when used with CONFIG FORTIFY=y and CONFIG UBSAN LOCAL BOUNDS=y. The issue arises from how builtin object si...

4.6CVSS6.3AI score0.00027EPSS
Exploits0References20
ATTACKERKB
ATTACKERKB
added 2022/08/16 9:15 p.m.1 views

CVE-2022-36143

SWFMill commit 53d7690 was discovered to contain a heap-buffer overflow via interceptorstrlen.part at /sanitizercommon/sanitizercommoninterceptors.inc...

7.8CVSS5.8AI score0.00054EPSS
Exploits1References2
OSV
OSV
added 2022/08/16 9:15 p.m.2 views

DEBIAN-CVE-2022-36143

SWFMill commit 53d7690 was discovered to contain a heap-buffer overflow via interceptorstrlen.part at /sanitizercommon/sanitizercommoninterceptors.inc...

7.8CVSS7.5AI score0.00054EPSS
Exploits1References1
UbuntuCve
UbuntuCve
added 2022/08/16 9:15 p.m.33 views

CVE-2022-36143

SWFMill commit 53d7690 was discovered to contain a heap-buffer overflow via interceptorstrlen.part at /sanitizercommon/sanitizercommoninterceptors.inc...

7.8CVSS7.1AI score0.00054EPSS
Exploits1References2
Cvelist
Cvelist
added 2022/08/16 8:13 p.m.13 views

CVE-2022-36143

SWFMill commit 53d7690 was discovered to contain a heap-buffer overflow via interceptorstrlen.part at /sanitizercommon/sanitizercommoninterceptors.inc...

8AI score0.00054EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2022/05/24 12:0 a.m.2 views

PT-2025-32441

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A flaw exists in the Bluetooth implementation of the Linux kernel where the strlen function is used with hdev-dev name,short name which are not guaranteed to be NULL terminated. This...

6CVSS7.3AI score0.0008EPSS
Exploits0
OSV
OSV
added 2022/05/16 2:15 p.m.2 views

CVE-2022-29017

Bento4 v1.6.0.0 was discovered to contain a segmentation fault via the component /x8664/multiarch/strlen-avx2.S...

5.5CVSS5.8AI score
Exploits0References1
NVD
NVD
added 2022/05/16 2:15 p.m.8 views

CVE-2022-29017

Bento4 v1.6.0.0 was discovered to contain a segmentation fault via the component /x8664/multiarch/strlen-avx2.S...

5.5CVSS0.00138EPSS
Exploits1References1
ATTACKERKB
ATTACKERKB
added 2022/05/16 2:15 p.m.1 views

CVE-2022-29017

Bento4 v1.6.0.0 was discovered to contain a segmentation fault via the component /x8664/multiarch/strlen-avx2.S...

5.5CVSS6AI score0.00138EPSS
Exploits1References2
OSV
OSV
added 2022/05/16 2:15 p.m.0 views

UBUNTU-CVE-2022-29017

Bento4 v1.6.0.0 was discovered to contain a segmentation fault via the component /x8664/multiarch/strlen-avx2.S...

5.5CVSS5.8AI score0.00138EPSS
Exploits1References2
UbuntuCve
UbuntuCve
added 2022/05/16 2:15 p.m.21 views

CVE-2022-29017

Bento4 v1.6.0.0 was discovered to contain a segmentation fault via the component /x8664/multiarch/strlen-avx2.S...

5.5CVSS6.1AI score0.00138EPSS
Exploits1References1
Prion
Prion
added 2022/05/16 2:15 p.m.10 views

Design/Logic Flaw

Bento4 v1.6.0.0 was discovered to contain a segmentation fault via the component /x8664/multiarch/strlen-avx2.S...

4.3CVSS5.5AI score0.00138EPSS
Exploits1References1Affected Software1
CNNVD
CNNVD
added 2022/05/16 12:0 a.m.1 views

Bento4 安全漏洞

Bento4 is an open source C library for reading and writing MP4 files. Bento4 v1.6.0.0 contains a denial of service vulnerability that stems from a segmentation error in the /x8664/multiarch/strlen-avx2.S component, which could be exploited by an attacker to cause a denial of service...

5.5CVSS5.7AI score0.00138EPSS
Exploits1References2
0day.today
0day.today
added 2022/03/11 12:0 a.m.389 views

Linux/x86_64 - sudo enumeration Shellcode (245 bytes)

sudo vulnerability enumeration shellcode / sudo vulnerability enumeration shellcode xordynamic - Linux/x8664 Author : Kağan Çapar contact: email protected shellcode len : 245 bytes compilation: gcc -fno-stack-protector -z execstack .c -o "disasssemble only main." 0000000000001179 : 1179: 55 push...

7AI score
Exploits0
OSV
OSV
added 2022/02/27 3:23 a.m.6 views

GSD-2022-1000559 perf bpf: Defer freeing string after possible strlen() on it

perf bpf: Defer freeing string after possible strlen on it This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.11 by commit...

7.2AI score
Exploits0
OSV
OSV
added 2022/01/05 8:15 p.m.0 views

DEBIAN-CVE-2021-45831

A Null Pointer Dereference vulnerability exitgs in GPAC 1.0.1 in MP4Box via strlenavx2, which causes a Denial of Service...

5.5CVSS6.7AI score0.00138EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2022/01/05 12:0 a.m.3 views

PT-2022-12423 · Gpac · Gpac

Name of the Vulnerable Software and Affected Versions: GPAC version 1.0.1 Description: A Null Pointer Dereference issue exists in MP4Box via strlen avx2, causing a Denial of Service. Recommendations: For GPAC version 1.0.1, consider disabling the strlen avx2 function as a temporary workaround unt...

9.8CVSS7.4AI score0.01461EPSS
Exploits98References239
Oracle linux
Oracle linux
added 2021/11/23 12:0 a.m.108 views

glibc security update

2.28-164.0.1 - Merge of RH patches for ol8-u5 beta release Review-exception: Routine merge - Provide glibc.pthread.mutexspincount tunable for pthread adaptive - spin mutex Orabug: 27982358. Reviewed-by: Qing Zhao - add Ampere emag to tunable cpu list Patrick McGehearty - add optimized memset for...

9.8CVSS8.3AI score0.01407EPSS
Exploits1
OSV
OSV
added 2021/11/14 3:23 p.m.12 views

GSD-2021-1002171 ocfs2: mount fails with buffer overflow in strlen

ocfs2: mount fails with buffer overflow in strlen This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15 by commit...

7.7AI score
Exploits0
Rows per page
Query Builder