CVE-2022-35019

Summary of CVE-2022-35019 : Advancecomp v2.3 has a vulnerability in memory/file handling that can cause a segmentation fault when processing certain files (notably MNG/ZIP), as described in Ubuntu USN-5838-1 and mirrored by Fedora advisories. These documents indicate a fix was released (Advanceco...

CVE-2022-35018

Advancecomp v2.3 was discovered to contain a segmentation fault...

CVE-2022-35020

CVE-2022-35020 affects Advancecomp v2.3 , with a heap buffer overflow via the interceptor in sanitizer files (__interceptor_memcpy). This is described across multiple feeds: Fedora/Ubuntu advisories and Nessus/NVL entries, confirming the issue in the 2.3 release and its association to CVE-2022-35...

CVE-2022-35014

The CVE-2022-35014 family affects Advancecomp (v2.3). The root cause is improper memory handling during read paths, causing a segmentation fault and enabling a potential denial of service. Public docs (Ubuntu USN and Fedora advisories) confirm multiple CVEs (CVE-2022-35014, -35015, -35016, -35017...

CVE-2022-35019

Advancecomp v2.3 was discovered to contain a segmentation fault...

CVE-2022-35015

Advancecomp v2.3 was discovered to contain a heap buffer overflow via leuint32read at /lib/endianrw.h...

CVE-2022-35016

Advancecomp v2.3 was discovered to contain a heap buffer overflow...

CVE-2022-35018

Advancecomp v2.3 was discovered to contain a segmentation fault...

CVE-2022-35016

CVE-2022-35016 involves a heap-based buffer overflow in AdvanceCOMP v2.3. The issue affects the advancecomp component used for recompression tasks (zip/png/mng/gz handling) and is described as a memory management/overflow vulnerability. Public advisories across distros reference this CVE, includi...

CVE-2022-35015

CVE-2022-35015 affects AdvanceCOMP v2.3. The issue is described as a heap buffer overflow in the le_uint32_read path within /lib/endianrw.h, associated with ZIP file handling (as per Ubuntu USN-5838-1) and echoed in Fedora advisories referencing advancecomp updates. Connected sources confirm mult...

CVE-2022-35014

Advancecomp v2.3 contains a segmentation fault...

CVE-2022-35017

Advancecomp v2.3 was discovered to contain a heap buffer overflow...

CVE-2022-35019

Advancecomp v2.3 was discovered to contain a segmentation fault...

CVE-2022-35015

Advancecomp v2.3 was discovered to contain a heap buffer overflow via leuint32read at /lib/endianrw.h...

CVE-2022-35018

Advancecomp v2.3 was discovered to contain a segmentation fault...

CVE-2022-35014

Advancecomp v2.3 contains a segmentation fault...

CVE-2022-35017

CVE-2022-35017 affects Advancecomp v2.3 and is a heap buffer overflow in processing MNG/ZIP input, per public advisories. The Linux/Unix notes describe memory-management issues during read operations that could lead to a crash (denial of service). Connected documents confirm that advisories exist...

CVE-2022-35014

Advancecomp v2.3 contains a segmentation fault...

Security Bulletin: Vulnerability in Apache Log4j (CVE-2021-45105) affects the IBM Performance Management product

Summary The APM v8.1.4.0 Server installs an Online Help application that contains Log4j v2.3. A vulnerability was found in this version of Log4j that is documented by CVE-2021-44228 and fixed in Log4j v2.17.1. Vulnerability Details CVEID: CVE-2021-45105 DESCRIPTION: Apache Log4j is vulnerable to ...

Security Bulletin: Vulnerability in Apache Log4j (CVE-2021-44832) affects the IBM Performance Management product

Summary The APM v8.1.4.0 Server installs an Online Help application that contains Log4j v2.3. A vulnerability was found in this version of Log4j that is documented by CVE-2021-44832 and fixed in Log4j v2.17.1. Vulnerability Details CVEID: CVE-2021-44832 DESCRIPTION: Apache Log4j could allow a...