PT-2022-32838

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.132 Description The issue is related to data races in the proc douintvec function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2022-32449

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.13 Description The issue is related to data races in the proc douintvec minmax function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior t...

PT-2022-32450

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.13 Description The issue is related to data races in the proc douintvec function. The actual impact and attack plausibility have not yet been proven. It was introduced in version v4.8 and fixed in Linux...

PT-2022-32667

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.56 Description The issue is related to data races in the proc douintvec function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2022-32666

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.56 Description The issue is related to data races in the proc douintvec minmax function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior t...

Malicious code in proc-title (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 59afad326fc37fe3e90463876138d8a2d3f252f2c8c52ac57ac2de831674beea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5467 Malicious code in proc-title (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 59afad326fc37fe3e90463876138d8a2d3f252f2c8c52ac57ac2de831674beea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

EulerOS Virtualization 2.10.1 : util-linux (EulerOS-SA-2022-2069)

According to the versions of the util-linux package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support. The Readline library uses an...

UBUNTU-CVE-2022-2320

A flaw was found in the Xorg-x11-server. The specific flaw exists within the handling of ProcXkbSetDeviceInfo requests. The issue results from the lack of proper validation of user-supplied data, which can result in a memory access past the end of an allocated buffer. This flaw allows an attacker...

PT-2025-8567

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A data-race issue exists in the Linux kernel due to concurrent access of a sysctl variable. This issue can lead to load/store-tearing. The problem arises from the lack of protection for...

PT-2025-26132

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A pointer dereference issue exists in the emulation proc handler function within the ARM64 architecture support of the Linux kernel. When emulation proc handler is called concurrently wi...

PT-2022-1371 · Google +3 · Android Kernel +3

Name of the Vulnerable Software and Affected Versions: Android kernel Description: The issue is related to a race condition in the emulation proc handler function of armv8 deprecated.c, which could lead to memory corruption. This may result in local escalation of privilege without requiring...

CVE-2022-20198

In llcpdlcprocconnectpdu of llcpdlc.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure from the NFC stack with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2018-17240: Missing Release of Memory after Effective Lifetime

There is a memory dump vulnerability on Netwave IP camera devices at //proc/kcore that allows an unauthenticated attacker to exfiltrate sensitive information from the network configuration e.g., username and password...

PT-2022-8038

Name of the Vulnerable Software and Affected Versions Netwave IP camera devices affected versions not specified Description The issue allows an unauthenticated attacker to exfiltrate sensitive information, such as username and password, from the network configuration of Netwave IP camera devices...

org.jenkins-ci.main:jenkins-test-harness (1.596.3), org.jenkins-ci.main:jenkins-war (1.596.3) +4 more potentially affected by CVE-2019-10383 via org.jenkins-ci.main:jenkins-core (1.596.3)

org.jenkins-ci.main:jenkins-core MAVEN version 1.596.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.596.3 - org.jenkins-ci.main:jenkins-war 1.596.3 -...

GHSA-VFJC-2QCW-J95J Docker Moby /proc/scsi Path Exposure Allows Host Data Loss (SCSI MICDROP)

The DefaultLinuxSpec function in oci/defaults.go in Docker Moby through 17.03.2-ce does not block /proc/scsi pathnames, which allows attackers to trigger data loss when certain older Linux kernels are used by leveraging Docker container access to write a "scsi remove-single-device" line to...

org.jenkins-ci.main:jenkins-test-harness (1.596.3), org.jenkins-ci.main:jenkins-war (1.596.3) +4 more potentially affected by CVE-2017-1000400 via org.jenkins-ci.main:jenkins-core (1.596.3)

org.jenkins-ci.main:jenkins-core MAVEN version 1.596.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.596.3 - org.jenkins-ci.main:jenkins-war 1.596.3 -...

GSD-2022-1001632 ALSA: pcm: Fix races among concurrent prealloc proc writes

ALSA: pcm: Fix races among concurrent prealloc proc writes This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.18 by commit...

PT-2022-30265

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.111 Description The issue is related to reference count leaks in the nfs42 proc copy notify function in NFSv4.2. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...