CVE-2022-31045

A flaw was found in Istio. Memory access violation of ill-formed headers sent to Envoy in certain configurations can lead to unexpected memory access, resulting in undefined behavior or crashing...

Integer Overflow in function lsr_translate_coords

Description Integer Overflow in function lsrtranslatecoords at laser/lsrdec.c:853 gpac version git log commit ea3af7c8242d1a82657dc3a518df5a5b1b5e27ed HEAD - master, origin/master, origin/HEAD Author: Romain Bouqueau Date: Tue Jun 28 19:25:58 2022 +0200 POC ./MP4Box -bt ./pocintof1s.dat...

GSD-2022-1003838 drm/amdgpu/cs: make commands with 0 chunks illegal behaviour.

drm/amdgpu/cs: make commands with 0 chunks illegal behaviour. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.247 by commit...

PT-2022-31448

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.13 Description A potential security issue exists due to a typo in the try cmpxchg user function, which may cause non-atomic behavior. The actual impact and attack plausibility have not yet been proven...

PT-2022-31186

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.14 Description The issue is related to the drm/amdgpu/cs component, where commands with 0 chunks are considered illegal behavior. The actual impact and attack plausibility have not yet been proven...

PT-2022-32306

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.318 Description The issue concerns the drm/amdgpu/cs component, where commands with 0 chunks are considered illegal behavior. The actual impact and attack plausibility have not yet been proven. Recommendatio...

PT-2022-31133

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.2 Description A potential security issue exists due to a typo in the try cmpxchg user function, which may cause non-atomic behavior. The actual impact and attack plausibility have not yet been proven...

PT-2022-32101

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.247 Description The issue concerns the drm/amdgpu/cs component, where commands with 0 chunks are considered illegal behavior. The actual impact and attack plausibility have not yet been proven...

PT-2022-31953

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.198 Description The issue concerns the drm/amdgpu/cs component, where commands with 0 chunks are considered illegal behavior. The actual impact and attack plausibility have not yet been proven. Recommendatio...

PT-2022-31758

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.121 Description The issue concerns the drm/amdgpu/cs component, where commands with 0 chunks are considered illegal behavior. This change is intended to aid in the discovery of potential security...

PT-2022-32215

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.283 Description The issue concerns the drm/amdgpu/cs component, where commands with 0 chunks are considered illegal behavior. The actual impact and attack plausibility have not yet been proven...

Unused Return

Lines of code Vulnerability details Impact Configuration Check: unused-return Severity: Medium Confidence: Medium Description: The return value of this external call is not stored in a local or state variable. Unused return values of function calls are indicative of programmer errors which may ha...

LiquidityReserve may break if underlying token is upgraded to have fees

Lines of code Vulnerability details Impact One of the tokens supported by this project is USDC, which is an upgradeable contract, and the code specifically casts addresses to IERC20Upgradeable rather than to IERC20, so the intention is for the code to support upgrades. If USDC ever upgrades to ha...

TWAP array can be artificially filled up with the most recent quote

Lines of code Vulnerability details A malicious user can run updateTWAV on each block, quickly replacing all four values of the twavObservations array with the most recent valuation. I.e. the time weighted averaging essence of the recorded price can be directly reduced to always be just most rece...

SUSE SLES15 Security Update : xen (SUSE-SU-2022:2158-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:2158-1 advisory. - Racy interactions between dirty vram tracking and paging log dirty hypercalls Activation of log dirty mode done by...

Log Injection

org.apache.sling:org.apache.sling.api and org.apache.sling:org.apache.sling.commons.log is vulnerable to log injection. A remote attacker with privileges to forge logs, is able to inject fake logs and potentially corrupt log files, causing unintended behavior in the the system...

CVE-2021-41490

Memory leaks in LazyPRM.cpp of OMPL v1.5.0 can cause unexpected behavior...

CVE-2021-41490

Memory leaks in LazyPRM.cpp of OMPL v1.5.0 can cause unexpected behavior...

CVE-2021-41490

Memory leaks in LazyPRM.cpp of OMPL v1.5.0 can cause unexpected behavior...

CVE-2021-41490

Memory leaks in LazyPRM.cpp of OMPL v1.5.0 can cause unexpected behavior...