24590 matches found
ypserv allows a local user to modify the GECOS and login shells of other users.
...
ypserv allows local administrators to modify password tables.
...
In older versions of Sendmail, an attacker could use a pipe character to execute root commands.
...
mtd: rawnand: stm32_fmc2: avoid overlapping mappings on ECC buffer
...
net: phylink: add lock for serializing concurrent pl->phydev writes with resolver
...
af_unix: Fix null-ptr-deref in unix_stream_sendpage().
...
can: j1939: implement NETDEV_UNREGISTER notification handler
...
mm/vmalloc, mm/kasan: respect gfp mask in kasan_populate_vmalloc()
...
i40e: remove read access to debugfs files
...
ceph: fix race condition validating r_parent before applying state
...
hv_netvsc: Don't free decrypted memory
...
Drivers: hv: vmbus: Don't free ring buffers that couldn't be re-encrypted
...
net: hns3: fix kernel crash when devlink reload during initialization
...
net: hns3: fix kernel crash when devlink reload during pf initialization
...
Timing side-channel in SM2 algorithm on 64 bit ARM
...
A buffer overflow occurs in pytorch v2.7.0 when a PyTorch model consists of torch.nn.Conv2d, torch.nn.functional.hardshrink, and torch.Tensor.view-torch.mv() and is compiled by Inductor, leading to a Denial of Service (DoS).
...
In PyTorch before 2.7.0, when torch.compile is used, FractionalMaxPool2d has inconsistent results.
...
A Name Error occurs in pytorch v2.7.0 when a PyTorch model consists of torch.cummin and is compiled by Inductor, leading to a Denial of Service (DoS).
...
In PyTorch before 2.7.0, when inductor is used, nn.Fold has an assertion error.
...
PyTorch before 3.7.0 has a bernoulli_p decompose function in decompositions.py even though it lacks full consistency with the eager CPU implementation, negatively affecting nn.Dropout1d, nn.Dropout2d, and nn.Dropout3d for fallback_random=True.
...
GNU Binutils objdump.c dump_dwarf_section out-of-bounds
...
leds: mlxreg: Use devm_mutex_init() for mutex initialization
...
leds: an30259a: Use devm_mutex_init() for mutex initialization
...
net/mlx5e: Avoid field-overflowing memcpy()
...
An issue was discovered in Quagga through 1.2.4. Unsafe chown/chmod operations in the suggested spec file allow users (with control of the non-root-owned directory /etc/quagga) to escalate their privileges to root upon package installation or update.
...
Special characters break path parsing in XML functions
...
Integer overflow in modules/MSADPCM.cpp in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service (crash) via a crafted file.
...
Integer overflow in sfcommands/sfconvert.c in Audio File Library
...
WAVE.cpp in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service
...
Heap-based buffer overflow in the Expand3To4Module::run function in libaudiofile/modules/SimpleModule.h in Audio File Library (aka audiofile) 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0 allows remote attackers to cause a denial of service (crash) via a crafted file.
...
Heap-based buffer overflow in the decodeBlock in MSADPCM.cpp in Audio File Library (aka audiofile) 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0, 0.2.7 allows remote attackers to cause a denial of service (crash) via a crafted file.
...
Vulnerability in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service via a crafted file.
...
Heap-based buffer overflow in the ulaw2linear_buf function in G711.cpp in Audio File Library (aka audiofile) 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0, 0.2.7 allows remote attackers to cause a denial of service (crash) via a crafted file.
...
Vulnerability in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service
...
Heap-based buffer overflow in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service
...
Heap-based buffer overflow in the decodeBlockWAVE function in IMA.cpp in Audio File Library (aka audiofile) 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0 and 0.2.7 allows remote attackers to cause a denial of service (crash) via a crafted file.
...
Heap-based buffer overflow in audiofile allows remote attackers to have unspecified impact
...
The decodeSample function in IMA.cpp in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service (crash) via a crafted file.
...
libplist allows attackers to cause a denial of service (large memory allocation and crash) via vectors involving an offset size of zero.
...
Heap-based buffer overflow in audiofile allows remote attackers to have unspecified impact via a crafted audio file
...
The plist_free_data function libplist allows attackers to cause a denial of service
...
The parse_dict_node function in bplist.c in libplist allows attackers to cause a denial of service
...
The _xrealloc function in xlsp_xmalloc.c in OpenSLP 2.0.0 allows remote attackers to cause a denial of service
...
The theme editor in Bolt allows remote authenticated users to execute arbitrary code by renaming a crafted file
...
sfcb in sblim-sfcb places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.
...
realmd allows remote attackers to inject arbitrary configurations in to sssd.conf and smb.conf
...
Multiple off-by-one errors in the (1) token and (2) linetoken functions in backend/dvi/mdvi-lib/afmparse.c in t1lib, as used in teTeX 3.0.x, GNOME evince, and possibly other products, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a DVI file containing a crafted Adobe Font Metrics (AFM) file, different vulnerabilities than CVE-2010-2642 and CVE-2011-0433.
...
Heap-based buffer overflow in the linetoken function in afmparse.c in t1lib, as used in teTeX 3.0.x, GNOME evince, and possibly other products, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a DVI file containing a crafted Adobe Font Metrics (AFM) file, a different vulnerability than CVE-2010-2642.
...
AS/400 Telnet 5250 terminal emulation clients, as implemented by (1) IBM client access, (2) Bosanova, (3) PowerTerm, (4) Mochasoft, and possibly other emulations, allows malicious AS/400 servers to execute arbitrary commands via a STRPCO (Start PC Organizer) command followed by STRPCCMD (Start PC command), as demonstrated by creating a backdoor account using REXEC.
...