6446 matches found
AZL-10758 CVE-2022-0168 affecting package kernel for versions less than 5.15.67.1-4
A denial of service DOS issue was found in the Linux kernel’s smb2ioctlqueryinfo function in the fs/cifs/smb2ops.c Common Internet File System CIFS due to an incorrect return from the memdupuser function. This flaw allows a local, privileged CAPSYSADMIN attacker to crash the system...
AZL-34859 CVE-2021-3669 affecting package kernel for versions less than 6.6.35.1-4
A flaw was found in the Linux kernel. Measuring usage of the shared memory does not scale with large shared memory segment counts which could lead to resource exhaustion and DoS...
AZL-44790 CVE-2022-32745 affecting package samba for versions less than 4.18.3-1
A flaw was found in Samba. Samba AD users can cause the server to access uninitialized data with an LDAP add or modify the request, usually resulting in a segmentation fault...
AZL-10716 CVE-2021-42523 affecting package colord for versions less than 1.4.4-9
There are two Information Disclosure vulnerabilities in colord, and they lie in colord/src/cd-device-db.c and colord/src/cd-profile-db.c separately. They exist because the 'errmsg' of 'sqlite3exec' is not releasing after use, while libxml2 emphasizes that the caller needs to release it...
AZL-10675 CVE-2021-3998 affecting package glibc for versions less than 2.35-7
A flaw was found in glibc. The realpath function can mistakenly return an unexpected value, potentially leading to information leakage and disclosure of sensitive data...
AZL-35153 CVE-2021-4158 affecting package qemu for versions less than 6.2.0-18
A NULL pointer dereference issue was found in the ACPI code of QEMU. A malicious, privileged user within the guest could use this flaw to crash the QEMU process on the host, resulting in a denial of service condition...
UBUNTU-CVE-2022-38475
An attacker could have written a value to the first element in a zero-length JavaScript array. Although the array was zero-length, the value was not written to an invalid memory address. This vulnerability affects Firefox 104...
AZL-10617 CVE-2022-2873 affecting package kernel for versions less than 5.15.70.1-1
An out-of-bounds memory access flaw was found in the Linux kernel Intel’s iSMT SMBus host controller driver in the way a user triggers the I2CSMBUSBLOCKDATA with the ioctl I2CSMBUS with malicious input data. This flaw allows a local user to crash the system...
AZL-10651 CVE-2021-3639 affecting package mod_auth_mellon for versions less than 0.16.0-4
A flaw was found in modauthmellon where it does not sanitize logout URLs properly. This issue could be used by an attacker to facilitate phishing attacks by tricking users into visiting a trusted web application URL that redirects to an external and potentially malicious server. The highest threa...
AZL-10572 CVE-2022-2874 affecting package vim for versions less than 9.0.0325-1
NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0224...
AZL-10567 CVE-2022-2867 affecting package libtiff for versions less than 4.5.0-1
libtiff's tiffcrop utility has a uint32t underflow that can lead to out of bounds read and write. An attacker who supplies a crafted file to tiffcrop likely via tricking a user to run tiffcrop on it with certain parameters could cause a crash or in some cases, further exploitation...
AZL-10554 CVE-2022-2817 affecting package vim for versions less than 9.0.0325-1
Use After Free in GitHub repository vim/vim prior to 9.0.0213...
prometheus/client_golang: Denial of service using InstrumentHandlerCounter
A denial of service attack was found in prometheus/clientgolang. This flaw allows an attacker to produce a denial of service attack on an HTTP server by exploiting the InstrumentHandlerCounter function in the version below 1.11.1, resulting in a loss of availability...
prometheus/client_golang: Denial of service using InstrumentHandlerCounter
A denial of service attack was found in prometheus/clientgolang. This flaw allows an attacker to produce a denial of service attack on an HTTP server by exploiting the InstrumentHandlerCounter function in the version below 1.11.1, resulting in a loss of availability...
AZL-10535 CVE-2022-30632 affecting package golang for versions less than 1.18.5-1
Uncontrolled recursion in Glob in path/filepath before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via a path containing a large number of path separators...
AZL-34947 CVE-2021-33644 affecting package libtar for versions less than 1.2.20-11
An attacker who submits a crafted tar file with size in header struct being 0 may be able to trigger an calling of malloc0 for a variable gnulongname, causing an out-of-bounds read...
AZL-34948 CVE-2021-33645 affecting package libtar for versions less than 1.2.20-11
The thread function doesn’t free a variable t-thbuf.gnulonglink after allocating memory, which may cause a memory leak...
PT-2022-12901 · Unknown · Pandora Fms
Name of the Vulnerable Software and Affected Versions: Pandora FMS versions 756 and below Description: A XSS issue exists that allows an attacker to perform javascript code executions via the module massive operation name field. This enables the execution of malicious scripts. Recommendations: Fo...
AZL-10461 CVE-2022-29154 affecting package rsync for versions less than 3.2.5-1
An issue was discovered in rsync before 3.2.5 that allows malicious remote servers to write arbitrary files inside the directories of connecting peers. The server chooses which files/directories are sent to the client. However, the rsync client performs insufficient validation of file names. A...