5423 matches found
PT-2024-11879 · Linux +4 · Linux Kernel +4
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A NULL pointer dereference issue has been identified in the Linux kernel, specifically in the nixge hw dma bd release function. This issue arises when the allocation of priv-rx bd v...
CLSA-2023-1673906443 rpm: Fix of CVE-2021-35938
CVE-2021-35938: drop the patch and following descriptor leak fix because these patches breaks non-root source package installation and can't be relied on without backporting a lot of the surrounding upstream code...
dpdk: DoS when a Vhost header crosses more than two descriptors and exhausts all mbufs
A permissive list of allowed inputs flaw was found in DPDK. This issue allows a remote attacker to cause a denial of service triggered by sending a crafted Vhost header to DPDK...
PT-2022-7636 · Linux +1 · Linux Kernel +1
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a use-after-free vulnerability in the Linux kernel's dmaengine subsystem, specifically in the idxd driver. When the driver is unloaded, any pending descriptors...
The vulnerability of the cURL command-line utility arises from a logical error in the reused descriptor, which allows a hacker to trigger a service failure or cause other adverse effects on the system when processing subsequent HTTP requests like PUT and POST.
The vulnerability of the command-line tool cURL is related to a logical error in the reused descriptor during the processing of subsequent HTTP requests like PUT and POST. Exploiting this vulnerability can allow an attacker to cause service failures or other adverse effects on the system by using...
DEBIAN-CVE-2022-45412
When resolving a symlink such as file:///proc/self/fd/1, an error message may be produced where the symlink was resolved to a string containing unitialized memory in the buffer. This bug only affects Thunderbird on Unix-based operated systems Android, Linux, MacOS. Windows is unaffected.. This...
ROS-20221222-22
A vulnerability in the cURL command-line utility is related to a bounds error in parsing the .netrc file. Exploitation vulnerability could allow an attacker acting remotely to transfer a specially crafted file, cause a stack-based buffer overflow, and perform a denial of service DoS attack The cU...
Exploit for Use After Free in Linux Linux_Kernel
CVE-2022-2602-Kernel-Exploit Details https://blog.hacktives...
CLSA-2022-1671124065 rpm: Fix of 2 CVEs
CVE-2021-35939: validate intermediate symlinks during installation - CVE-2021-35938: set file metadata via fd-based ops for everything but symlinks - Fix file descriptor leak recently introduced in rpmPackageFilesInstall...
CLSA-2022-1671123868 rpm: Fix of 2 CVEs
CVE-2021-35939: validate intermediate symlinks during installation - CVE-2021-35938: set file metadata via fd-based ops for everything but symlinks - Fix file descriptor leak recently introduced in rpmPackageFilesInstall...
Amazon Linux 2022 : polkit (ALAS2022-2022-220)
The version of polkit installed on the remote host is prior to 0.117-10. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2022-2022-220 advisory. - A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid to...
numpy: NULL pointer dereference in numpy.sort in in the PyArray_DescrNew() due to missing return-value validation
Null Pointer Dereference vulnerability exists in numpy.sort in NumPy < and 1.19 in the PyArrayDescrNew function due to missing return-value validation, which allows attackers to conduct DoS attacks by repetitively creating sort arrays. NOTE: While correct that validation is missing, an error ca...
PT-2024-11880 · Linux +4 · Linux Kernel +4
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A potential socket leak issue has been identified in the Linux kernel, specifically in the p9 socket open function within the net/9p module. The issue arises when p9 fd create tcp and ...
Denial Of Service (DoS)
xen is vulnerable to denial of service. The vulnerability exists because XAPI to be unable to accept new requests for other trusted clients which allows an unauthenticated client on the network to cause XAPI to hit its file-descriptor limit...
DEBIAN-CVE-2022-44789
A logical issue in OgetOwnPropertyDescriptor in Artifex MuJS 1.0.0 through 1.3.x before 1.3.2 allows an attacker to achieve Remote Code Execution through memory corruption, via the loading of a crafted JavaScript file...
Artifex Software Artifex MuJS 缓冲区错误漏洞
Artifex Software Artifex MuJS is a lightweight JavaScript interpreter from Artifex Software, Inc. that is designed to be embedded into other software to provide script execution capabilities. A security vulnerability exists in Artifex Software Artifex MuJS versions 1.0.0 through 1.3.1, which stem...
PT-2025-41019
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference count leak exists in the USB gadget f hid functionality. Specifically, when allocation of report desc fails, the reference count opts-refcnt is not decremented, leading to th...
Mozilla: Symlinks may resolve to partially uninitialized buffers
The Mozilla Foundation Security Advisory describes this flaw as: When resolving a symlink such as file:///proc/self/fd/1, an error message may be produced where the symlink was resolved to a string containing unitialized memory in the buffer...
Mozilla: Symlinks may resolve to partially uninitialized buffers
The Mozilla Foundation Security Advisory describes this flaw as: When resolving a symlink such as file:///proc/self/fd/1, an error message may be produced where the symlink was resolved to a string containing unitialized memory in the buffer...
DPDK: out-of-bounds read/write in vhost_user_set_inflight_fd() may lead to crash
A flaw was found in the vhost library in DPDK. Function vhostusersetinflightfd does not validate msg-payload.inflight.numqueues, possibly causing out-of-bounds memory read/write. Any software using DPDK vhost library may crash as a result of this vulnerability...