CVE-2021-32813

The CVE-2021-32813 issue affects Traefik (HTTP reverse proxy/load balancer). Before v2.4.13, Traefik’s handling of the Connection header can remove a request header if a middleware chain sets a header and the request uses a specific Connection header, potentially preventing the backend from seein...

PT-2021-25633

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 4.18 through 5.13.5 Description: A potential security issue exists due to a leak in the kvm arch vcpu ioctl function, specifically in the vcpu load operation. The actual impact and likelihood of an attack have not been...

PT-2021-25782

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.136 Description The issue is related to a leak in the kvm arch vcpu ioctl function, specifically in the vcpu load operation. This problem was introduced in version v4.18 and is fixed in Linux Kernel version...

PT-2021-29709

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 4.18 through 5.10.53 Description A potential security issue exists due to a leak in the kvm arch vcpu ioctl function when handling vcpu load. The actual impact and attack plausibility have not yet been proven. This issue...

PT-2021-29833

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.199 Description A potential security issue exists due to a leak in the kvm arch vcpu ioctl function, specifically in the vcpu load operation. The actual impact and attack plausibility of this issue have not...

PT-2021-25714

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 4.18 through 5.10.53 Description A potential security issue exists due to a leak in the kvm arch vcpu ioctl function, specifically in the vcpu load operation. The actual impact and likelihood of an attack have not been...

PT-2021-25838

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.199 Description The issue is related to a leak in the kvm arch vcpu ioctl function, specifically in the vcpu load operation. The actual impact and potential for attack have not been fully determined...

PT-2021-29628

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 4.18 through 5.13.5 Description A potential security issue exists due to a leak in the kvm arch vcpu ioctl vcpu load function. The actual impact and attack plausibility have not yet been proven. This issue was introduced ...

Virtuozzo Hybrid Infrastructure 4.6 Update 1

This update provides new features, as well as bug fixes and improvements. Vulnerability id: VSTOR-45315 The MDS service may be unstable under a high load condition. Vulnerability id: VSTOR-43126 A deadlock is possible between atomic and non-atomic commands in the iSCSI kernel module. Vulnerabilit...

Updated xstream packages fix security vulnerabilities

In XStream before version 1.4.16, there is a vulnerability which may allow a remote attacker to allocate 100% CPU time on the target system depending on CPU type or parallel execution of such a payload resulting in a denial of service only by manipulating the processed input stream CVE-2021-21341...

UBUNTU-CVE-2021-32686

PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. In PJSIP before version 2.11.1, there are a couple of issues found in the SSL socket. First, a race condition between callback a...

Oracle Application Testing Suite (Jul 2021 CPU)

The 13.3.0.1 versions of Application Testing Suite installed on the remote host are affected by a vulnerability as referenced in the July 2021 CPU advisory. - Vulnerability in the Oracle Application Testing Suite product of Oracle Enterprise Manager component: Load Testing for Web Apps Apache...

PT-2021-6700

Name of the Vulnerable Software and Affected Versions PJSIP versions prior to 2.11.1 Description The issue is related to the SSL socket in PJSIP, a free and open source multimedia communication library. It involves a race condition between callback and destroy due to the accepted socket having no...

CVE-2020-5316

Dell SupportAssist for Business PCs versions 2.0, 2.0.1, 2.0.2, 2.1, 2.1.1, 2.1.2, 2.1.3 and Dell SupportAssist for Home PCs version 2.0, 2.0.1, 2.0.2, 2.1, 2.1.1, 2.1.2, 2.1.3, 2.2, 2.2.1, 2.2.2, 2.2.3, 3.0, 3.0.1, 3.0.2, 3.1, 3.2, 3.2.1, 3.2.2, 3.3, 3.3.1, 3.3.2, 3.3.3, 3.4 contain an...

PT-2021-7967 · Unknown +2 · Stb Image.H +2

Name of the Vulnerable Software and Affected Versions: stb image.h version 2.27 Description: The issue is related to a heap-based buffer overflow in the stbi jpeg load function of the stb image.h library, which can lead to Information Disclosure or Denial of Service. This can be exploited by a...

Citrix ADM: Incorrect status of service under LB "Going out of Service"

When Admin is trying to disable the service of Load balancing V-server from ADM, encounters Going Out of service On ADC same service is being marked OUT OF SERVICE as expected On ADC we see, the status of service correctly changed to "Out of Service": But on ADM, status of service still shows GOI...

PT-2024-11297

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a leak in kvm arch vcpu ioctl vcpu load due to vcpu put not being called if the user copy fails. This can result in preempt notifier corruption and crashes, among...

Docker before 1.3 does not properly validate image IDs which allows remote attackers to redirect to another image through the loading of untrusted images via 'docker load'.

...

Docker before 1.3.3 does not properly validate image IDs which allows remote attackers to conduct path traversal attacks and spoof repositories via a crafted image in a (1) "docker load" operation or (2) "registry communications."

...

PT-2021-28354

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read error. Technical details about the crash include the involvement of specific functions: stbi convert ...