105 matches found
Exploit for Privilege Context Switching Error in Canonical Ubuntu_Linux
CVE-2021-3493 Ubuntu OverlayFS...
Advisory ROSA-SA-2021-1833
Software: file 5.11 OS: Cobalt 7.9 CVE-ID: CVE-2014-9620 CVE-Crit: HIGH CVE-DESC: ELF parser in files 5.08 through 5.21 allows remote attackers to cause a denial of service with a large number of notes. CVE-STATUS: Default CVE-REV: Default CVE-ID: CVE-2018-1183 CVE-Crit: CRITICAL CVE-DESC: In Del...
GSD-2021-1000295 regmap: set debugfs_name to NULL after it is freed
regmap: set debugfsname to NULL after it is freed This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.4 by commit...
UVI-2021-1000276 scsi: lpfc: Fix null pointer dereference in lpfc_prep_els_iocb()
scsi: lpfc: Fix null pointer dereference in lpfcprepelsiocb This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.4 by commit...
GSD-2021-1000291 Drivers: hv: vmbus: Drop error message when 'No request id available'
Drivers: hv: vmbus: Drop error message when 'No request id available' This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.4 by commit...
Linux kernel post-release reuse vulnerability (CNVD-2021-39544)
The Linux kernel is a computer operating system kernel written in C and assembly language, compliant with the POSIX standard, and distributed under the GNU General Public License. A post-release reuse vulnerability exists in isotpsetsockopt in net/can/isotp.c in Linux kernel versions 5.11 through...
CVE-2021-32606
In the Linux kernel 5.11 through 5.12.2, isotpsetsockopt in net/can/isotp.c allows privilege escalation to root by leveraging a use-after-free. This does not affect earlier versions that lack CAN ISOTP SFBROADCAST support...
Linux kernel 资源管理错误漏洞
The Linux kernel is a computer operating system kernel written in C and assembly language, compliant with the POSIX standard, and distributed under the GNU General Public License. A post-release reuse vulnerability exists in isotpsetsockopt in net/can/isotp.c in Linux kernel versions 5.11 through...
OESA-2021-1158 qt5-qtbase security update
This package provides base tools, such as string, xml, and network handling. Security Fixes: An out-of-bounds memory access in the generateDirectionalRuns function in qtextengine.cpp in Qt qtbase 5.11.x and 5.12.x before 5.12.5 allows attackers to cause a denial of service by crashing an...
WordPress Business Directory Plugin <= 5.10.1 - Arbitrary File Upload vulnerability leading to Remote Code Execution (RCE)
Arbitrary File Upload vulnerability leading to Remote Code Execution RCE discovered by 0xB9 in WordPress Business Directory Plugin versions = 5.10.1. Solution Update the WordPress Business Directory Plugin to the latest available version at least 5.11...
CVE-2020-9995
An issue existed in the parsing of URLs. This issue was addressed with improved input validation. This issue is fixed in macOS Server 5.11. Processing a maliciously crafted URL may lead to an open redirect or cross site scripting...
CVE-2020-35499
A NULL pointer dereference flaw in Linux kernel versions prior to 5.11 may be seen if scosockgetsockopt function in net/bluetooth/sco.c do not have a sanity check for a socket connection, when using BTSNDMTU/BTRCVMTU for SCO sockets. This could allow a local attacker with a special user privilege...
PT-2021-7854 · Linux +2 · Linux Kernel +2
Name of the Vulnerable Software and Affected Versions: Linux kernel versions 5.6 through 5.11 Description: A time-of-check to time-of-use issue exists in the io uring subsystem's IORING OP CLOSE operation, allowing a local user to elevate their privileges to root. This issue is related to...
PT-2021-3741 · Linux +8 · Linux Kernel +8
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to 4.14.222 Linux Kernel versions prior to 4.19.177 Linux Kernel versions prior to 5.4.99 Linux Kernel versions prior to 5.10.17 Linux Kernel versions prior to 5.11 Description: An information disclosure issue exis...
CVE-2018-19872
An issue was discovered in Qt 5.11. A malformed PPM image causes a division by zero and a crash in qppmhandler.cpp...
Qt QtBase Module CVE-2019-18281 Denial of Service Vulnerability
Description Qt QtBase module is prone to a denial-of-service vulnerability. An attacker can exploit this issue to cause the application to crash, denying service to legitimate users. Qt QtBase module version 5.11.x and 5.12.x prior to 5.12.5 are vulnerable. Technologies Affected Qt Qt Base 5.11.0...
Security Bulletin: Multiple vulnerabilities in ISC BIND and Samba - including Badlock - affect IBM Netezza Host Management
Summary ISC BIND is used by IBM Netezza Host Management. Samba is delivered in IBM Netezza Host Management RHEL 5.11 and 6.6 OS upgrade kits. IBM Netezza Host Management has addressed the applicable CVEs including the vulnerability commonly referred to as "Badlock." Vulnerability Details CVEID:...
CVE-2018-19872
An issue was discovered in Qt 5.11. A malformed PPM image causes a division by zero and a crash in qppmhandler.cpp...
