Lucene search
K

10 matches found

SUSE CVE
SUSE CVE
added 2023/02/15 5:55 a.m.4 views

SUSE CVE-2010-4645

strtod.c, as used in the zendstrtod function in PHP 5.2 before 5.2.17 and 5.3 before 5.3.5, and other products, allows context-dependent attackers to cause a denial of service infinite loop via a certain floating-point value in scientific notation, which is not properly handled in x87 FPU...

5CVSS6.9AI score0.15103EPSS
Exploits1References4
NVD
NVD
added 2020/07/15 10:15 p.m.8 views

CVE-2020-15107

In openenclave before 0.10.0, enclaves that use x87 FPU operations are vulnerable to tampering by a malicious host application. By violating the Linux System V Application Binary Interface ABI for such operations, a host app can compromise the execution integrity of some x87 FPU operations in an...

5.3CVSS0.00333EPSS
Exploits0References1
OSV
OSV
added 2020/07/15 10:15 p.m.10 views

CVE-2020-15107

In openenclave before 0.10.0, enclaves that use x87 FPU operations are vulnerable to tampering by a malicious host application. By violating the Linux System V Application Binary Interface ABI for such operations, a host app can compromise the execution integrity of some x87 FPU operations in an...

5.3CVSS6.8AI score
Exploits0References1
Prion
Prion
added 2020/07/15 10:15 p.m.9 views

Design/Logic Flaw

In openenclave before 0.10.0, enclaves that use x87 FPU operations are vulnerable to tampering by a malicious host application. By violating the Linux System V Application Binary Interface ABI for such operations, a host app can compromise the execution integrity of some x87 FPU operations in an...

1.2CVSS5.3AI score0.00333EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2020/07/15 9:21 p.m.57 views

CVE-2020-15107

CVE-2020-15107 affects OpenEnclave up to version 0.10.0: enclaves performing x87 FPU operations can be tampered by a malicious host app that violates the Linux SYSV ABI, compromising execution integrity and enabling potential side-channel attacks depending on FPU config. The issue has been fixed ...

5.3CVSS5.2AI score0.00333EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2020/07/15 9:21 p.m.14 views

CVE-2020-15107 x87 FPU operations in enclaves are vulnerable to ABI poisoning in openenclave

In openenclave before 0.10.0, enclaves that use x87 FPU operations are vulnerable to tampering by a malicious host application. By violating the Linux System V Application Binary Interface ABI for such operations, a host app can compromise the execution integrity of some x87 FPU operations in an...

5.3CVSS5.2AI score0.00333EPSS
Exploits0References1
F5 Networks
F5 Networks
added 2011/02/28 12:0 a.m.44 views

SOL12650 - PHP vulnerability CVE-2010-4645

The strtod.c function may allow context-dependent attackers to cause a denial-of-service via a certain floating-point value in scientific notation, which is not properly handled in x87 FPU registers. Information about this advisory is available at the following location: Note: The previous link...

5CVSS8.8AI score0.15103EPSS
Exploits1
Tenable Nessus
Tenable Nessus
added 2011/01/24 12:0 a.m.33 views

Fedora 13 : maniadrive-1.2-26.fc13.1 / maniadrive-data-1.2-5.fc13 / php-5.3.5-1.fc13 / etc (2011-0321)

This release resolves a critical issue, reported as PHP bug 53632 and CVE-2010-4645, where conversions from string to double might cause the PHP interpreter to hang on systems using x87 FPU registers. Note that Tenable Network Security has extracted the preceding description block directly from t...

5CVSS8.3AI score0.15103EPSS
Exploits1References6
Prion
Prion
added 2011/01/11 3:0 a.m.20 views

Design/Logic Flaw

strtod.c, as used in the zendstrtod function in PHP 5.2 before 5.2.17 and 5.3 before 5.3.5, and other products, allows context-dependent attackers to cause a denial of service infinite loop via a certain floating-point value in scientific notation, which is not properly handled in x87 FPU...

5CVSS6.8AI score0.15103EPSS
Exploits1References28Affected Software1
UbuntuCve
UbuntuCve
added 2011/01/11 3:0 a.m.32 views

CVE-2010-4645

strtod.c, as used in the zendstrtod function in PHP 5.2 before 5.2.17 and 5.3 before 5.3.5, and other products, allows context-dependent attackers to cause a denial of service infinite loop via a certain floating-point value in scientific notation, which is not properly handled in x87 FPU...

5CVSS7.2AI score0.15103EPSS
Exploits1References2
Rows per page
Query Builder