PT-2026-115613

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description An endpoint exhibits a response discrepancy when processing ID values, acting as an enumeration oracle. A request using a nonexistent ID returns a different erro...

EUVD-2023-59906

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

IoTSharp authorization issue vulnerability

IoTSharp 3.6.1 and earlier versions have an authorization issue vulnerability. This vulnerability arises from the fact that the Customers and Devices API handlers do not limit the query scope to the caller’s tenant. There is a potential for insecure direct object references. Attackers can registe...

Portable SDK for UPnP Devices – Improper exception handling leads to vulnerabilities

The Portable SDK for UPnP Devices versions prior to 2.0.2 have a vulnerability related to improper exception handling. This vulnerability arises from the ixmlNodecompare function, which directly passes the nullable fields nodeValue, namespaceURI, prefix, and localName to the strcmp function. When...

Portable SDK for UPnP Devices – Digital Error Vulnerability

The Portable SDK for UPnP Devices versions prior to 2.0.2 have a security vulnerability. This vulnerability arises from the rawtoint function in httpparser.c, which truncates or wraps integers when parsing Content-Length headers. This can lead to HTTP requests being injected or causing...

Portable SDK for UPnP Devices – Resource Management Error Vulnerability

Portable SDK for UPnP Devices. Versions prior to 2.0.0 of the Portable SDK for UPnP Devices contain a resource management vulnerability. This vulnerability stems from the ixml DOM traversal function’s unlimited recursive processing of deeply nested XML. Unauthorized local network attackers can...

Portable SDK for UPnP Devices – Resource Management Error Vulnerability

Portable SDK for UPnP Devices. Versions prior to 22.0.4 of the Portable SDK for UPnP Devices contain a resource management vulnerability. This vulnerability stems from the simultaneous invocation of getaddrinfo when processing inbound HTTP request targets and GENA SUBSCRIBE CALLBACK headers in th...

Portable SDK for UPnP Devices – Resource Management Error Vulnerability

Portable SDK for UPnP Devices. Versions prior to 2.0.2 of the Portable SDK for UPnP Devices contain a resource management vulnerability. This vulnerability arises from the HTTP parser, which handles Transfer-Encoding: chunked. In this case, the value of parser-contentlength remains zero in...

Astra Linux – Vulnerability in Ansible

A vulnerability was discovered in Ansible Engine versions 2.9.x before 2.9.3, 2.8.x before 2.8.8, and 2.7.x before 2.7.16 and earlier. In these versions, the nxosfilecopy module of Ansible can be used to copy files to the flash or bootflash on NXOS devices. Malicious code could manipulate the...

Astra Linux – vulnerability in linux-6.1, linux-5.10, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: drivers: base: Free devm resources when unregistering a device In the current code, devresreleaseall is only called if the device has a bus and has been probed. This results in issues when using bus-less or driver-less devices,...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Atom Integrated System Info v22 for DCN35 A new request from KMD/VBIOS to support a new UMA carving model. This fixes a null dereference caused by accessing Ctx-dcbios-integratedinfo when it was NULL. DAL parses...

Astra Linux – Vulnerability in Linux

In the Linux kernel, the following vulnerability has been resolved: misc/libmasm/module: Two use-after-free operations in ibmasminitone have been fixed. In ibmasminitone, it calls ibmasminitremoteinputdev. Inside ibmasminitremoteinputdev, mousedev and keybddev are allocated by inputallocatedevice...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Nilfs2: Rejects invalid file types when reading inodes. To prevent inodes with invalid file types from causing malfunctions or assertion failures, a missing sanity check should be added when reading an inode from a block device. ...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: net: usb: asixdevices: add phymask for ax88772 mdio bus Without setting the phymask for the ax88772 mdio bus, the current driver may create at most 32 mdio PHY devices with PHY addresses ranging from 0x00 to 0x1f. The DLink...

Astra Linux – Vulnerability in Systemd

In udev under systemd, before version 260, local root execution could occur through malicious hardware devices and unsanitized kernel output...

Astra Linux – Vulnerability in Linux 5.10, Linux

In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: Fixed a UAF Use-after-Free in LED devices during unbinding. LED devices created by HD-audio codec drivers are registered using devmledclassdevregister, and they are associated with the HD-audio codec device...

Astra Linux – vulnerability in linux-5.10, linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: net: liquidio: Fix off-by-one error in PF setupnicdevices cleanup In setupnicdevices, the initialization loop jumps to the label setupnicdevfree on failure. The current cleanup loop whilei-- skips the failing index i, resulting i...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Media: Davinci: VPif – Fix for use-after-free on driver unbind. The driver allocates and registers two platform device structures during the probe phase, but these devices are never deregistered during driver unbind. This results...

Astra Linux – vulnerability in linux, linux-5.10, linux-5.15, linux-6.1

In the Linux kernel, the following vulnerability has been resolved: wifi: rt2x00: Restart beacon queue upon hardware reset When a hardware reset occurs, all registers are reset, causing all queues to be halted at the hardware level. However, mac80211 does not automatically stop the queue. If we...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: net: lan743x: The EEPROM and OTP sizes for PCI1xxxx devices have been modified. The maximum OTP and EEPROM sizes for PCI1xxxx devices are 8 Kb and 64 Kb respectively. The maximum size definitions have been adjusted, and the corre...