dotnet: ASP.NET Core Client Disconnect Denial of Service

A flaw was found in dotnet. The way client disconnects are handled can allow a remote, unauthenticated attacker to exploit this vulnerability to cause a denial of service against an ASP.NET Core application. The highest threat from this vulnerability is to system availability...

dotnet: ASP.NET Core Client Disconnect Denial of Service

A flaw was found in dotnet. The way client disconnects are handled can allow a remote, unauthenticated attacker to exploit this vulnerability to cause a denial of service against an ASP.NET Core application. The highest threat from this vulnerability is to system availability...

dotnet: ASP.NET Core Client Disconnect Denial of Service

A flaw was found in dotnet. The way client disconnects are handled can allow a remote, unauthenticated attacker to exploit this vulnerability to cause a denial of service against an ASP.NET Core application. The highest threat from this vulnerability is to system availability...

Linux kernel 资源管理错误漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A resource management error vulnerability exists in the Linux kernel HCI subsystem, which stems from a vulnerability in the HCI subsystem when a user disconnects a Bluetooth...

polkit 代码问题漏洞

polkit is a component for controlling system-wide permissions in Unix-like operating systems. It enables communication between processes of different priority by defining and auditing permission rules. A code issue vulnerability exists in polkit that stems from the inability of a requesting proce...

UVI-2021-1000186 net: hso: fix NULL-deref on disconnect regression

net: hso: fix NULL-deref on disconnect regression This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.115 by commit...

UVI-2021-1000043 net: hso: fix NULL-deref on disconnect regression

net: hso: fix NULL-deref on disconnect regression This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.115 by commit...

UVI-2021-1000093 net: hso: fix NULL-deref on disconnect regression

net: hso: fix NULL-deref on disconnect regression This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.1 by commit...

UVI-2021-1000049 net: hso: fix NULL-deref on disconnect regression

net: hso: fix NULL-deref on disconnect regression This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.189 by commit...

UVI-2021-1000042 net: hso: fix NULL-deref on disconnect regression

net: hso: fix NULL-deref on disconnect regression This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.11.17 by commit...

UVI-2021-1000128 net: hso: fix NULL-deref on disconnect regression

net: hso: fix NULL-deref on disconnect regression This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.11.17 by commit...

PT-2021-28514

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.10.30 through v5.10.32 Description The issue is related to a NULL-deref on disconnect regression in the net: hso component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2021-28517

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 4.19.187 through 4.19.188 Description A potential security issue exists due to a NULL-deref on disconnect regression in the net: hso component. The actual impact and attack plausibility have not yet been proven...

PT-2021-24516

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 5.11.14 through 5.11.16 Description: The issue is related to a NULL-deref on disconnect regression in the net: hso component. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

PT-2021-24520

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.10.30 through v5.10.32 Description: A potential security issue exists due to a NULL-deref on disconnect regression in the net: hso component. The actual impact and attack plausibility have not yet been proven...

PT-2021-24660

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 4.19.187 through 4.19.188 Description The issue is related to a NULL-deref on disconnect regression in the net: hso component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

DEBIAN-CVE-2020-25669

A vulnerability was found in the Linux Kernel where the function sunkbdreinit having been scheduled by sunkbdinterrupt before sunkbd being freed. Though the dangling pointer is set to NULL in sunkbddisconnect, there is still an alias in sunkbdreinit causing Use After Free...

kernel: use-after-free caused by a malicious USB device in the drivers/usb/misc/adutux.c driver

A flaw was found in the Linux kernel’s implementation for ADU devices from Ontrak Control Systems, where an attacker with administrative privileges and access to a local account could pre-groom the memory and physically disconnect or unload a module. The attacker must be able to access either of...

bluez: double free in gatttool client disconnect callback handler in src/shared/att.c could lead to DoS or RCE

In BlueZ before 5.55, a double free was found in the gatttool disconnectcb routine from shared/att.c. A remote attacker could potentially cause a denial of service or code execution, during service discovery, due to a redundant disconnect MGMT event...

PT-2024-11227 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.12.8 Description: A memory leak vulnerability has been identified in the Linux kernel's NFC subsystem, specifically in the nci allocate device function. The nfcmrvl disconnect function fails to free the hci de...