UVI-2021-1001746 xen/balloon: use a kernel thread instead a workqueue

xen/balloon: use a kernel thread instead a workqueue This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.9 by commit...

UVI-2021-1001665 xen/balloon: use a kernel thread instead a workqueue

xen/balloon: use a kernel thread instead a workqueue This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.70 by commit...

GSD-2021-1001608 xen/balloon: use a kernel thread instead a workqueue

xen/balloon: use a kernel thread instead a workqueue This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.150 by commit...

UVI-2021-1001571 xen/balloon: use a kernel thread instead a workqueue

xen/balloon: use a kernel thread instead a workqueue This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.209 by commit...

GSD-2021-1001571 xen/balloon: use a kernel thread instead a workqueue

xen/balloon: use a kernel thread instead a workqueue This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.209 by commit...

UVI-2021-1001543 xen/balloon: use a kernel thread instead a workqueue

xen/balloon: use a kernel thread instead a workqueue This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.249 by commit...

PT-2021-26135

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.70 Description The issue is related to the xen/balloon component, where a kernel thread is used instead of a workqueue. The actual impact and attack plausibility have not yet been proven. Recommendations Fo...

PT-2021-30036

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.209 Description The issue involves the xen/balloon component using a kernel thread instead of a workqueue. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kerne...

PT-2021-26013

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to 4.14.249 Description The issue involves the xen/balloon component using a kernel thread instead of a workqueue. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-30130

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.70 Description The issue is related to the xen/balloon component, where a kernel thread is used instead of a workqueue. The actual impact and attack plausibility have not yet been proven. Recommendations Fo...

PT-2021-26041

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.209 Description The issue is related to the xen/balloon component, where a kernel thread is used instead of a workqueue. The actual impact and attack plausibility have not yet been proven. Recommendations F...

PT-2021-30008

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to 4.14.249 Description The issue involves the xen/balloon component using a kernel thread instead of a workqueue. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-30211

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to 5.14.9 Description The issue is related to the xen/balloon component, where a kernel thread is used instead of a workqueue. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2021-26216

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to 5.14.9 Description: The issue is related to the xen/balloon component, where a kernel thread is used instead of a workqueue. The actual impact and attack plausibility have not yet been proven. Recommendations: F...

PT-2021-30073

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.150 Description The issue is related to the xen/balloon component, where a kernel thread is used instead of a workqueue. The actual impact and attack plausibility have not yet been proven. Recommendations Fo...

PT-2021-26078

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.150 Description The issue involves the xen/balloon component using a kernel thread instead of a workqueue. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

CVE-2021-21941

A use-after-free vulnerability exists in the pushMuxer CreatePushThread functionality of Anker Eufy Homebase 2 2.1.6.9h. A specially-crafted set of network packets can lead to remote code execution...

SUSE SLED12: glibc / glibc-32bit / glibc-devel / glibc-devel-32bit / etc (SUSE-SU-2021:3290-1)

The remote SUSE Linux SLED12 / SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2021:3290-1 advisory. - CVE-2021-33574: Fixed a use-after-free possibility in mqnotify bsc1186489 Tenable has extracted the preceding description block...

Jetty 9.4.27 < 9.4.30 Buffer Overflow

The version of Jetty installed on the remote host when handling too large response headers throws an exception to produce an HTTP 431 error. When this happens, the ByteBuffer containing the HTTP response headers is released back to the ByteBufferPool twice. Because of this double release, two...

SUSE-RU-2021:14818-1 Recommended update for mozilla-nspr, mozilla-nss

This update for mozilla-nspr fixes the following issues: mozilla-nspr was updated to version 4.32: implement new socket option PRSockOptDontFrag support larger DNS records by increasing the default buffer size for DNS queries Lock access to PRCallOnceType members in PRCallOnce for thread safety...