Denial Of Service (DoS)

sckitlearn is vulnerable to denial of service DoS. The vulnerability exists through a SVM model with a large value in the nsupport array caused by svmpredictvalues in svm.cpp in Libsvm v324...

Libsvm Denial of Service Vulnerability

Libsvm is a simple, easy-to-use and efficient software for SVM classification and regression. A denial of service vulnerability exists in svmpredictvalues in svm.cpp in Libsvm version 324. An attacker can exploit this vulnerability to cause a denial of service segmentation error via a specially...

CVE-2020-28975

svmpredictvalues in svm.cpp in Libsvm v324, as used in scikit-learn 0.23.2 and other products, allows attackers to cause a denial of service segmentation fault via a crafted model SVM introduced via pickle, json, or any other model permanence standard with a large value in the nsupport array. NOT...

PYSEC-2020-108

DISPUTED svmpredictvalues in svm.cpp in Libsvm v324, as used in scikit-learn 0.23.2 and other products, allows attackers to cause a denial of service segmentation fault via a crafted model SVM introduced via pickle, json, or any other model permanence standard with a large value in the nsupport...

UBUNTU-CVE-2020-28975

DISPUTED svmpredictvalues in svm.cpp in Libsvm v324, as used in scikit-learn 0.23.2 and other products, allows attackers to cause a denial of service segmentation fault via a crafted model SVM introduced via pickle, json, or any other model permanence standard with a large value in the nsupport...

Libsvm security vulnerabilities

Libsvm is a simple, easy-to-use and efficient software for SVM classification and regression. A denial of service vulnerability exists in svmpredictvalues in svm.cpp in Libsvm version 324. An attacker can exploit this vulnerability to cause a denial of service segmentation error via a specially...

CVE-2020-28975

svmpredictvalues in svm.cpp in Libsvm v324, as used in scikit-learn 0.23.2 and other products, allows attackers to cause a denial of service segmentation fault via a crafted model SVM introduced via pickle, json, or any other model permanence standard with a large value in the nsupport array. NOT...

CVE-2020-28975

svmpredictvalues in svm.cpp in Libsvm v324, as used in scikit-learn 0.23.2 and other products, allows attackers to cause a denial of service segmentation fault via a crafted model SVM introduced via pickle, json, or any other model permanence standard with a large value in the nsupport array. NOT...

An issue was discovered in the Linux kernel before 5.6. svm_cpu_uninit in arch/x86/kvm/svm.c has a memory leak aka CID-d80b64ff297e. NOTE: third parties dispute this issue because it's a one-time leak at the boot the size is negligible and it can't be triggered at will

...

FreeBSD : FreeBSD -- bhyve SVM guest escape (e73c688b-f7e6-11ea-88f8-901b0ef719ab)

A number of AMD virtualization instructions operate on host physical addresses, are not subject to nested page table translation, and guest use of these instructions was not trapped. Impact : From kernel mode a malicious guest can write to arbitrary host memory with some constraints, affording th...

CVE-2020-11901: Impact of Ripple20 vulnerabilities on Citrix ADC/ADM/SVM

Citrix ADC/ADM/SVM will be detected with TCP ripple 20 vulnerability while performing security scans...

FreeBSD -- bhyve SVM guest escape

Problem Description: A number of AMD virtualization instructions operate on host physical addresses, are not subject to nested page table translation, and guest use of these instructions was not trapped. Impact: From kernel mode a malicious guest can write to arbitrary host memory with some...

FreeBSD-SA-20:29.bhyve_svm

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-20:29.bhyvesvm Security Advisory The FreeBSD Project Topic: bhyve SVM guest escape Category: core Module: bhyve Announced: 2020-09-15 Credits: Maxime Villard...

PT-2021-2547

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.8 Description: An issue in the Linux kernel allows a set memory region test infinite loop for certain nested page faults. This can be exploited to cause a denial of service. Recommendations: For Linux kernel...

OS Command Injection

limdu is vulnerable to command injection. The vulnerability exists because it allows an attacker to inject malicious code via the function trainBatch in BinaryClassifierSet.js as it relies on shell execution, such as SVM Perf, SVM Linear or Adaboos...

Command Injection in Limdu

Impact The trainBatch function has a command injection vulnerability. Clients of the Limdu library are unlikely to be aware of this, so they might unwittingly write code that contains a vulnerability. Patches Patched in version 0.9.5. Workarounds Do not use trainBatch with classifiers that rely o...

Linux kernel memory leak vulnerability (CNVD-2020-28263)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A memory leak vulnerability exists in the svmcpuuninit file in arch/x86/kvm/svm.c in versions of Linux kernel prior to 5.6. An attacker could exploit this vulnerabilit...

DEBIAN-CVE-2020-12768

An issue was discovered in the Linux kernel before 5.6. svmcpuuninit in arch/x86/kvm/svm.c has a memory leak, aka CID-d80b64ff297e. NOTE: third parties dispute this issue because it's a one-time leak at the boot, the size is negligible, and it can't be triggered at will...

CVE-2020-12768

An issue was discovered in the Linux kernel before 5.6. svmcpuuninit in arch/x86/kvm/svm.c has a memory leak, aka CID-d80b64ff297e. NOTE: third parties dispute this issue because it's a one-time leak at the boot, the size is negligible, and it can't be triggered at will...

CVE-2020-12768

An issue was discovered in the Linux kernel before 5.6. svmcpuuninit in arch/x86/kvm/svm.c has a memory leak, aka CID-d80b64ff297e. NOTE: third parties dispute this issue because it's a one-time leak at the boot, the size is negligible, and it can't be triggered at will...