RHEL 8 : kernel-rt (RHSA-2021:4140)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:4140 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirement...

CVE-2021-37158

An issue was discovered in OpenGamePanel OGP-Agent-Linux through 2021-08-14. An authenticated attacker could inject OS commands by starting a Counter-Strike server and using the map field to enter a Bash command...

Open Game Panel 操作系统命令注入漏洞

Open Game Panel is an open source game server control panel. It uses a web interface PHP/MySQL to control the agent Perl running on the server hosting the game. It is used to start/stop/monitor game server instances. A security vulnerability exists in Open Game Panel OGP-Agent-Linux, which stems...

CVE-2021-37158

An issue was discovered in OpenGamePanel OGP-Agent-Linux through 2021-08-14. An authenticated attacker could inject OS commands by starting a Counter-Strike server and using the map field to enter a Bash command...

libsepol: use-after-free in __cil_verify_classperms()

The CIL compiler in SELinux 3.2 has a use-after-free in cilverifyclassperms called from verifymappermclassperms and hashtabmap...

CVE-2021-37158: Improper Neutralization of Special Elements used in an OS Command

An issue was discovered in OpenGamePanel OGP-Agent-Linux through 2021-08-14. An authenticated attacker could inject OS commands by starting a Counter-Strike server and using the map field to enter a Bash command...

PT-2021-21539

Name of the Vulnerable Software and Affected Versions OpenGamePanel OGP-Agent-Linux versions through 2021-08-14 Description An issue was discovered that allows an authenticated attacker to inject OS commands. This can be achieved by starting a Counter-Strike server and using the map field to ente...

samba: Negative idmap cache entries can cause incorrect group entries in the Samba file server process token

A flaw was found in samba. The Samba smbd file server must map Windows group identities SIDs into unix group ids gids. The code that performs this had a flaw that could allow it to read data beyond the end of the array in the case where a negative cache entry had been added to the mapping cache...

PT-2021-26320

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 2.6.31 through 5.10.75 Description: The issue is related to the debug dma map sg function in the dma-debug module. It was introduced in version v2.6.31 and fixed in version v5.10.76. The actual impact and attack...

PT-2021-30356

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.15 Description The issue is related to the debug dma map sg function in the dma-debug module. It was introduced in version v2.6.31 and fixed in version v5.14.15. The actual impact and attack plausibility ha...

PT-2021-26293

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 2.6.31 through 5.4.155 Description: The issue is related to the debug dma map sg function in the dma-debug module. It was introduced in version v2.6.31 and fixed in version v5.4.156. The actual impact and attack...

PT-2021-30315

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.31 through 5.10.75 Description The issue is related to the debug dma map sg function in the dma-debug module. It was introduced in version v2.6.31 and fixed in version v5.10.76. The actual impact and attack plausibili...

PT-2021-26361

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.14.15 Description: The issue is related to the debug dma map sg function in the dma-debug module. It was introduced in version v2.6.31 and fixed in version v5.14.15. The actual impact and attack plausibility...

PT-2021-30288

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.31 through 5.4.155 Description The issue is related to the debug dma map sg function in the dma-debug module. It was introduced in version v2.6.31 and fixed in version v5.4.156. The actual impact and attack plausibili...

PT-2021-26274

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.214 Description: The issue is related to the debug dma map sg function in the dma-debug module. It was introduced in version v2.6.31 and fixed in version v4.19.214. The actual impact and attack plausibilit...

PT-2021-30269

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.214 Description The issue concerns a fix in the debug dma map sg function related to sg checks. It was introduced in version v2.6.31 and fixed in version v4.19.214. The actual impact and attack plausibility...

The vulnerability in the hw/usb/hcd-xhci.c component of the QEMU hardware emulation software arises from the use of memory after it has been freed. This allows a malicious actor to trigger a service failure.

The vulnerability in the hw/usb/hcd-xhci.c component of the QEMU hardware emulation software is related to the lack of checking for the return value of usbpacketmap. Exploiting this vulnerability could allow a attacker to cause a service failure...

The vulnerability of the `build_diff_map` function in the Ffmpeg library, related to buffer overflows in memory, allows a hacker to trigger a service denial.

The vulnerability of the builddiffmap function in the Ffmpeg library is related to buffer overflow in memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

OpenJDK: Excessive memory allocation in HashMap and HashSet (Utility, 8266097)

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Utility. Supported versions that are affected are Java SE: 7u311, 8u301, 11.0.12, 17; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Easily exploitable vulnerability allows unauthenticated...

OpenJDK: Excessive memory allocation in HashMap and HashSet (Utility, 8266097)

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Utility. Supported versions that are affected are Java SE: 7u311, 8u301, 11.0.12, 17; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Easily exploitable vulnerability allows unauthenticated...