CVE Vulnerability Catalog

A zone transition from NSEC to NSEC3 might trigger an internal inconsistency and cause a denial of service.

An attacker can send a web request that causes unlimited memory allocation in the internal web server, leading to a denial of service. The internal web server is disabled by default.

Many concurrent transfers of the same RPZ can lead to inconsistent RPZ data, use after free, and/or a crash of the recursor. Normally such concurrent transfers occur only with a malfunctioning RPZ provider.

In a DNS system, an attacker can publish and query a crafted zone to cause allocation of large entries in the negative and aggressive NSEC(3) caches.

An attacker can send a web request that causes unlimited memory allocation in the internal web server, leading to a denial of service. The internal web server is disabled by default.

An attacker can send a web request that causes unlimited memory allocation in the internal web server, leading to a denial of service. The internal web server is disabled by default.

A flaw was found in binutils, specifically within the `readelf` utility, allowing a local attacker to cause a Denial of Service (DoS) by tricking a user into processing a specially crafted ELF file. Exploitation can lead to excessive resource consumption or a program crash, making the system unresponsive.

A flaw was found in the readelf utility of the binutils package. A local attacker could exploit two Denial of Service (DoS) vulnerabilities by providing a specially crafted ELF file. One vulnerability, a resource exhaustion (CWE-400), can lead to an out-of-memory condition. The other, a null pointer dereference (CWE-476), can cause a segmentation fault. Both issues can result in the readelf utility becoming unresponsive or crashing.

A format string vulnerability was found in nano's `statusline()` function. A local user could create a directory with a name containing printf specifiers, causing a segmentation fault (SEGV) and denial of service (DoS).

Missing bounds validation for operator could allow out of range operator-code lookup during model loading. Affected version is prior to commit 1.30.0.

Improper validation of STRING tensor offsets allows malformed string metadata to trigger out-of-bounds access during constant tensor import in Samsung Open Source ONE. Affected versions are prior to commit 1.30.0.

An integer overflow occurs in Samsung Open Source ONE when calculating the data size of constant tensors. This can lead to incorrect buffer sizing for large constant nodes. The affected version is prior to commit 1.30.0.

Integer overflow in tensor copy size calculation in Samsung Open Source ONE can lead to out-of-bounds access during loop state propagation. Affects versions prior to commit 1.30.0.

Integer overflow in scratch buffer initialization size calculation in Samsung Open Source ONE causes incorrect memory initialization for large intermediate tensors. Affects versions prior to commit 1.30.0.

Integer overflow in memory copy size calculation in Samsung Open Source ONE could lead to invalid memory operations with large tensor shapes. Affected version is prior to commit 1.30.0.

Integer overflow in output tensor copy size calculation in Samsung Open Source ONE can cause incorrect copy length and memory corruption for oversized tensors. Affects versions prior to commit 1.30.0.

Integer overflow in buffer size calculation can result in out-of-bounds memory access when handling large tensors in Samsung Open Source ONE. Affects versions prior to commit 1.30.0.

Samsung Open Source ONE has a potential integer overflow in tensor allocation size calculation, which could lead to insufficient memory allocation for large tensors. Affected versions are prior to commit 1.30.0.

A vulnerability in Spring Security affects applications that configure JWT decoding with NimbusJwtDecoder or NimbusReactiveJwtDecoder and must separately configure an OAuth2TokenValidator<Jwt>, for example by calling setJwtValidator. The issue affects Spring Security versions 6.3.0 through 6.3.14, 6.4.0 through 6.4.14, 6.5.0 through 6.5.9, and 7.0.0 through 7.0.4.

A vulnerability in Spring Security's SubjectX500PrincipalExtractor incorrectly handles malformed CN values in X.509 certificates, potentially reading the wrong username. A crafted certificate could allow an attacker to impersonate another user.