1701 matches found
BIT-TENSORFLOW-2022-41909 Segfault in `CompositeTensorVariantToComponents` in Tensorflow
TensorFlow is an open source platform for machine learning. An input encoded that is not a valid CompositeTensorVariant tensor will trigger a segfault in tf.rawops.CompositeTensorVariantToComponents. We have patched the issue in GitHub commits bf594d08d377dc6a3354d9fdb494b32d45f91971 and...
BIT-TENSORFLOW-2022-41911 Invalid char to bool conversion when printing a tensor in Tensorflow
TensorFlow is an open source platform for machine learning. When printing a tensor, we get it's data as a const char array since that's the underlying storage and then we typecast it to the element type. However, conversions from char to bool are undefined if the char is not 0 or 1, so...
BIT-MARIADB-2022-21451
Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 5.7.37 and prior and 8.0.28 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...
mysql: Server: Partition unspecified vulnerability (CPU Apr 2023)
Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Partition. Supported versions that are affected are 8.0.32 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...
CVE-2023-43553
Memory corruption while parsing beacon/probe response frame when AP sends more supported links in MLIE...
Memory corruption
Memory corruption while parsing beacon/probe response frame when AP sends more supported links in MLIE...
CVE-2023-43553 Use of Out-of-range Pointer Offset in WLAN HOST
Memory corruption while parsing beacon/probe response frame when AP sends more supported links in MLIE...
CVE-2023-43550
CVE-2023-43550 affects Qualcomm components, describing memory corruption when processing a QMI request to allocate memory from a DHMS‑supported subsystem. The CVSS v3.1 vector indicates a Local, Low‑Complexity, Privileged (low) exploit with no user interaction, and high impact to confidentiality,...
Authorization
UNSUPPORTED WHEN ASSIGNED Incorrect Authorization vulnerability in Apache Archiva: a vulnerability in Apache Archiva allows an unauthenticated attacker to modify account data, potentially leading to account takeover. This issue affects Apache Archiva: from 2.0.0. As this project is retired, we do...
SUSE CVE-2021-47005
In the Linux kernel, the following vulnerability has been resolved: PCI: endpoint: Fix NULL pointer dereference for -getfeatures getfeatures ops of pciepcops may return NULL, causing NULL pointer dereference in pciepftestallocspace function. Let us add a check for pciepcfeature pointer in...
DEBIAN-CVE-2021-47005
In the Linux kernel, the following vulnerability has been resolved: PCI: endpoint: Fix NULL pointer dereference for -getfeatures getfeatures ops of pciepcops may return NULL, causing NULL pointer dereference in pciepftestallocspace function. Let us add a check for pciepcfeature pointer in...
UBUNTU-CVE-2021-47005
In the Linux kernel, the following vulnerability has been resolved: PCI: endpoint: Fix NULL pointer dereference for -getfeatures getfeatures ops of pciepcops may return NULL, causing NULL pointer dereference in pciepftestallocspace function. Let us add a check for pciepcfeature pointer in...
Failed to install Remote PowerShell SDK on Cloud Connector machine
Failed to install Remote PowerShell SDK on Cloud Connector machine. Error message "Connector Machine detected. SDK's cmdlets are not supported on Cloud Connectors." was shown...
CVE-2024-20931
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic...
OSV-2024-79 Heap-double-free in supported_features
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66398 Crash type: Heap-double-free Crash state: supportedfeatures handleatcommand handleatcommandfortest...
CVE-2024-23978
Heap-based buffer overflow vulnerability exists in HOME SPOT CUBE2 V102 and earlier. By processing invalid values, arbitrary code may be executed. Note that the affected products are no longer supported...
CVE-2024-21780
Stack-based buffer overflow vulnerability exists in HOME SPOT CUBE2 V102 and earlier. Processing a specially crafted command may result in a denial of service DoS condition. Note that the affected products are no longer supported...
Stack overflow
Stack-based buffer overflow vulnerability exists in HOME SPOT CUBE2 V102 and earlier. Processing a specially crafted command may result in a denial of service DoS condition. Note that the affected products are no longer supported...
CVE-2024-23978
Heap-based buffer overflow vulnerability exists in HOME SPOT CUBE2 V102 and earlier. By processing invalid values, arbitrary code may be executed. Note that the affected products are no longer supported...
