GSD-2022-1003299 blk-iolatency: Fix inflight count imbalances and IO hangs on offline

blk-iolatency: Fix inflight count imbalances and IO hangs on offline This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.46 by commit...

GSD-2022-1003292 ksmbd: fix reference count leak in smb_check_perm_dacl()

ksmbd: fix reference count leak in smbcheckpermdacl This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.47 by commit...

GSD-2022-1003111 drm/plane: Move range check for format_count earlier

drm/plane: Move range check for formatcount earlier This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.14 by commit...

PT-2022-31260

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.0 through v5.17.13 Description The issue is related to inflight count imbalances and IO hangs on offline devices. It was introduced in version v5.0 and fixed in version v5.17.14. The actual impact and attack plausibili...

PT-2022-32146

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.247 Description The issue is related to inflight count imbalances and IO hangs on offline devices. It was introduced in version v4.19.29 and fixed in version v4.19.247. Recommendations For Linux Kernel...

PT-2022-31962

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.198 Description The issue is related to the f2fs file system, specifically with the dec valid node count function, which could potentially lead to a security vulnerability. The actual impact and attack...

PT-2022-30896

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.3 Description The issue is related to the f2fs file system, specifically with the dec valid node count function, which could potentially lead to a security vulnerability. The actual impact and attack...

PT-2022-31222

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.14 Description The issue is related to the f2fs file system, specifically in the dec valid node count function, where a bug could be triggered, potentially leading to security vulnerabilities. The actual...

PT-2022-31555

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.47 Description A reference count leak was discovered in the smb check perm dacl function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior ...

PT-2022-31517

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.46 Description The issue is related to the f2fs file system, specifically with the dec valid node count function, which could potentially lead to a security vulnerability. The actual impact and attack...

PT-2022-31031

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.0 through v5.18.2 Description The issue is related to an imbalance in enable count with EXCLUSIVE GET. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions v5.0...

PT-2022-30881

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.4 Description A reference count leak was discovered in the smb check perm dacl function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior t...

PT-2022-31769

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.121 Description The issue is related to the f2fs file system, specifically with the dec valid node count function. It may potentially lead to a security vulnerability, although the actual impact and attack...

PT-2022-31239

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.15 Description A reference count leak was discovered in the smb check perm dacl function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior ...

Denial Of Service (DoS)

OPCFoundation.NetStandard.Opc.Ua is vulnerable to denial of service. The vulnerability exists due to improper configuration of maximum chunk count which allows malicious clients to cause an application crash via a carefully crafted message...

Denial Of Service (DoS)

opcfoundation.netstandard.opc.ua is vulnerable to denial of service. The vulnerability exists due to the lack of maximum chunk count check-in requests which allows malicious clients to cause an application crash...

Only the state() of the latest proposal can be checked

Lines of code Vulnerability details Impact state function cannot view the state from any proposal except for the latest one. Proof of Concept requireproposalCount = proposalId && proposalId initialProposalId, "GovernorBravo::state: invalid proposal id"; Currently proposalCount needs to be bigger ...

IBM Spectrum Protect Operations Center暴力破解漏洞

IBM Spectrum Protect Operations Center is a software from IBM USA that provides visual control of the IBM Spectrum Protect environment. IBM Spectrum Protect Operations Center is vulnerable to a brute-force cracking vulnerability that stems from cumulative login Failure count is invalid, and an...

Denial Of Service (DoS)

OPCFoundation.NetStandard.Opc.Ua is vulnerable to denial of service. The vulnerability exists due to the lack of maximum chunk count check-in request and response messages, allowing malicious clients or servers to cause a peer to hang with a carefully crafted message sent during secure channel...

CVE-2022-22485

In some cases, an unsuccessful attempt to log into IBM Spectrum Protect Operations Center 8.1.0.000 through 8.1.14.000 does not cause the administrator's invalid sign-on count to be incremented on the IBM Spectrum Protect Server. An attacker could exploit this vulnerability using brute force...