Most recent entries from all

bdu:2023-05302

Withdrawn: BELL-CVE-2022-41409 — CVE-2022-41409 does not affect BellSoft software

Withdrawn by the publisher.

certfr-2023-avi-0991 — De multiples vulnérabilités ont été découvertes dans GitLab. Certaines d'entre elles permet…

certfr-2023-avi-0991

CLEANSTART-2024-WK36293 — Integer overflow vulnerability in pcre2test before 10

Affected: CleanStart: pcre2

Security vulnerability affects the pcre2 package. Integer overflow vulnerability in pcre2test before 10.

EUVD-2026-198183

fkie_cve-2022-41409

Integer overflow vulnerability in pcre2test before 10.41 allows attackers to cause a denial of service or other unspecified impacts via negative input.

GHSA-4qfx-v7wh-3q4j

Integer overflow vulnerability in pcre2test before 10.41 allows attackers to cause a denial of service or other unspecified impacts via negative input.

gsd-2022-41409

ICSA-24-046-11 — Siemens SCALANCE XCM-/XRM-300

A carefully crafted If: request header can cause a memory read, or write of a single zero byte, in a pool (heap) memory location beyond the header value sent. This could cause the process to crash.

This issue affects Apache HTTP Server 2.4.54 and earlier. A flaw was found in python. In algorithms with quadratic time complexity using non-binary bases, when using int("text"), a system could take 50ms to parse an int string with 100,000 digits and 5s for 1,000,000 digits (float, decimal, int.from_bytes(), and int() for binary bases 2, 4, 8, 16, and 32 are not affected). The highest threat from this vulnerability is to system availability. A flaw was found in libdnf's signature verification functionality in versions before 0.60.1. This flaw allows an attacker to achieve code execution if they can alter the header information of an RPM package and then trick a user or system into installing it. The highest risk of this vulnerability is to confidentiality, integrity, as well as system availability. An out-of-bounds memory access flaw was found in the ATI VGA device emulation of QEMU. This flaw occurs in the ati_2d_blt() routine while handling MMIO write operations when the guest provides invalid values for the destination display parameters. A malicious guest could use this flaw to crash the QEMU process on the host, resulting in a denial of service. A vulnerability was found in the fs/inode.c:inode_init_owner() function logic of the LInux kernel that allows local users to create…

msrc_CVE-2022-41409 — Integer overflow vulnerability in pcre2test before 10.41 allows attackers to cause a denial of service or other unspeci…

msrc_CVE-2022-41409

OESA-2023-1482 — pcre2 security update

Affected: openEuler:20.03-LTS-SP1: pcre2, openEuler:20.03-LTS-SP3: pcre2, openEuler:22.03-LTS: pcre2, openEuler:22.03-LTS-SP1: pcre2, openEuler:22.03-LTS-SP2: pcre2

PCRE2 is a re-working of the original PCRE1 library to provide an entirely new API. Security Fix(es): Integer overflow vulnerability in pcre2test before 10.41 allows attackers to cause a denial of service or other unspecified impacts via negative input.(CVE-2022-41409)

SUSE-SU-2023:3210-1 — Security update for pcre2

Security update for pcre2

UBUNTU-CVE-2022-41409

Affected: Ubuntu:16.04:LTS: pcre2, Ubuntu:Pro:18.04:LTS: pcre2, Ubuntu:20.04:LTS: pcre2, Ubuntu:22.04:LTS: pcre2

Integer overflow vulnerability in pcre2test before 10.41 allows attackers to cause a denial of service or other unspecified impacts via negative input.

VDE-2026-088 — METTLER TOLEDO: LabX Standard and Enterprise Report on External Component Analysis - v21.4

The vulnerabilities found in LabX Standard versions 21.3.22 - 21.4.23 are CVE-2025-69419, CVE-2026-0915, CVE-2025-15467, CVE-2026-4800, CVE-2026-33186, CVE-2026-39821, CVE-2026-33671 and are fixed in LabX Standard v21.4.25.

The vulnerabilities found in LabX Enterprise versions 21.3.22 - 21.4.23 are CVE-2026-4800, CVE-2026-33186, CVE-2026-39821, CVE-2026-33671 and are fixed in LabX Enterprise v21.4.25

All other vulnerabilities are to be fixed in the upcoming releases.

WID-SEC-W-2023-1983 — PCRE (Perl Compatible Regular Expressions): Schwachstelle ermöglicht Denial of Service

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in PCRE (Perl Compatible Regular Expressions) ausnutzen, um einen Denial of Service Angriff durchzuführen.