33911 matches found
kasan: avoid sleepable page allocation from atomic context
...
RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem
...
net: appletalk: Fix use-after-free in AARP proxy probe
...
iommufd: Fix protection fault in iommufd_test_syz_conv_iova
...
HDF5 H5Fint.c H5F_addr_encode_len heap-based overflow
...
soc: qcom: pdr: protect locator_addr with the main mutex
...
In Das U-Boot through 2022.07-rc5, an integer signedness error and resultant stack-based buffer overflow in the "i2c md" command enables the corruption of the return address pointer of the do_i2c_md function.
...
sched/task_stack: fix object_is_on_stack() for KASAN tagged pointers
...
It was found that Lynx doesn't parse the authority component of the URL correctly
...
LoongArch: Set hugetlb mmap base address aligned with pmd size
...
TOTOLINK A702R /boafrm/formParentControl File Buffer Overflow Vulnerability
TOTOLINK A702R is a wireless router device manufactured by China's Gion Electronics TOTOLINK, mainly used for home network connection and signal coverage. The TOTOLINK A702R suffers from a buffer overflow vulnerability, which originates from the failure of the parameter submit-url in the file...
Linux Distros Unpatched Vulnerability : CVE-2018-19219
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In LibSass 3.5-stable, there is an illegal address access at Sass::Eval::operator that will lead to a DoS attack. CVE-2018-19219 Note that Nessus relies on the...
Linux Distros Unpatched Vulnerability : CVE-2017-11342
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - There is an illegal address access in ast.cpp of LibSass 3.4.5. A crafted input will lead to a remote denial of service attack. CVE-2017-11342 Note that Nessus...
udp: Deal with race between UDP socket address change and rehash
...
HDF5 H5Fint.c H5F_addr_decode_len heap-based overflow
...
i40e: Do not allow untrusted VF to remove administratively set MAC
...
An issue was discovered in Mbed TLS before 2.24.0. The verification of X.509 certificates when matching the expected common name (the cn argument of mbedtls_x509_crt_verify) with the actual certificate name is mishandled: when the subjecAltName extension is present, the expected name is compared to any name in that extension regardless of its type. This means that an attacker could impersonate a 4-byte or 16-byte domain by getting a certificate for the corresponding IPv4 or IPv6 address (this would require the attacker to control that IP address, though).
...
When a network error occurred during page load, the prior content could have remained in view with a blank URL bar. This could have been used to obfuscate a spoofed web site. This vulnerability affects Firefox < 126.
...