GSD-2022-1007264 drivers: serial: jsm: fix some leaks in probe

drivers: serial: jsm: fix some leaks in probe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.150 by commit...

PT-2022-35046 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 3.19 through 6.0.2 Description: The issue is related to a buffer overflow in debugfs. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions 3.19 through 6.0.2,...

PT-2022-35058 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v3.19 through v6.0.2 Description: The issue is related to some leaks in the probe function of the serial driver. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2022-35308 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v3.19 through v5.15.74 Description: A buffer overflow issue exists in the iommu/omap debugfs. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions v3.19 through...

PT-2022-35652 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 3.19 through 5.4.219 Description: A buffer overflow issue was discovered in the iommu/omap debugfs. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions 3.19...

CVE-2022-1941

A parsing vulnerability for the MessageSet type in the ProtocolBuffers versions prior to and including 3.16.1, 3.17.3, 3.18.2, 3.19.4, 3.20.1 and 3.21.5 for protobuf-cpp, and versions prior to and including 3.16.1, 3.17.3, 3.18.2, 3.19.4, 3.20.1 and 4.21.5 for protobuf-python can lead to out of...

CVE-2022-1941

CVE-2022-1941 affects Protocol Buffers parsing for protobuf-cpp and protobuf-python, causing out-of-memory and DoS on parsing malformed MessageSet inputs. Affected versions include protobuf-cpp up to 3.16.1, 3.17.3, 3.18.2, 3.19.4, 3.20.1, 3.21.5 and protobuf-python up to 4.21.5, with 3.16/3.17 n...

GSD-2022-1003130 drm/rockchip: vop: fix possible null-ptr-deref in vop_bind()

drm/rockchip: vop: fix possible null-ptr-deref in vopbind This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.14 by commit...

PT-2022-15775 · Nginx · Nginx Controller Api Management

Name of the Vulnerable Software and Affected Versions: NGINX Controller API Management versions 3.18.0 through 3.19.0 Description: An authenticated attacker with access to the user or admin role can use undisclosed API endpoints on NGINX Controller API Management to inject JavaScript code that is...

CVE-2019-5678

NVIDIA GeForce Experience versions prior to 3.19 contains a vulnerability in the Web Helper component, in which an attacker with local system access can craft input that may not be properly validated. Such an attack may lead to code execution, denial of service or information disclosure...

Security Bulletin: NVIDIA GeForce Experience - May 2019

NVIDIA has released a software security update for NVIDIA® GeForce Experience™. This update addresses issues that may lead to information disclosure, escalation of privileges, denial of service, or code execution. To protect your system, download and install this software update through the GeFor...

PyroBatchFTP < 3.19 - Buffer Overflow

============================================= MGC ALERT 2018-001 - Original release date: December 22, 2017 - Last revised: January 12, 2018 - Discovered by: Manuel García Cárdenas - Severity: 7,5/10 CVSS Base Score ============================================= I. VULNERABILITY...

CVE-2015-9004

kernel/events/core.c in the Linux kernel before 3.19 mishandles counter grouping, which allows local users to gain privileges via a crafted application, related to the perfpmuregister and perfeventopen functions...

Fedora 22 : webkitgtk4-2.10.9-1.fc22 (2016-68b43a4e0d)

This update together with the previous release brings the following fixes Security fixes: CVE-2016-1726 Limit the number of tiles according to the visible area. This was causing a huge memory consumption with some websites. Fix rendering of form controls and scrollbars with GTK+ = 3.19. Fix HTTP...

BackBox Linux 4.4 - Ubuntu-based Linux Distribution Penetration Test and Security Assessment

BackBox is a Linux distribution based on Ubuntu. It has been developed to perform penetration tests and security assessments. Designed to be fast, easy to use and provide a minimal yet complete desktop environment, thanks to its own software repositories, always being updated to the latest stable...

Linux Kernel 3.13.0 < 3.19 (Ubuntu 12.04/14.04/14.10/15.04) - 'overlayfs' Local Privilege Escalation

/ Exploit Title: ofs.c - overlayfs local root in ubuntu Date: 2015-06-15 Exploit Author: rebel Version: Ubuntu 12.04, 14.04, 14.10, 15.04 Kernels before 2015-06-15 Tested on: Ubuntu 12.04, 14.04, 14.10, 15.04 CVE : CVE-2015-1328...

Ubuntu 15.04 : linux vulnerability (USN-2647-1)

Philip Pettersson discovered a privilege escalation when using overlayfs mounts inside of user namespaces. A local user could exploit this flaw to gain administrative privileges on the system. Note that Tenable Network Security has extracted the preceding description block directly from the Ubunt...

CVE-2014-9710

CVE-2014-9710 affects the Linux kernel’s Btrfs xattr handling prior to 3.19. The vulnerability arises because the visible xattr state may not be consistent with a requested replacement, enabling local attackers to bypass ACLs and gain privileges through standard filesystem operations during an xa...

CVE-2015-2041

net/llc/sysctlnetllc.c in the Linux kernel before 3.19 uses an incorrect data type in a sysctl table, which allows local users to obtain potentially sensitive information from kernel memory or possibly have unspecified other impact by accessing a sysctl entry...

PT-2017-1995 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 3.19 Description: The issue is related to the regulator ena gpio free function in drivers/regulator/core.c, which allows local users to gain privileges or cause a denial of service use-after-free via a crafted...