4287 matches found
PT-2024-4126
Name of the Vulnerable Software and Affected Versions Microsoft Visual Studio affected versions not specified Description The issue is related to a violation of the data protection mechanism in Microsoft Visual Studio, allowing an attacker to execute arbitrary code using a specially crafted file...
kernel: net/smc: fix illegal rmb_desc access in SMC-D connection dump
A flaw was found in the Linux kernel in which functions providing information about SMC-D connections caused a NULL pointer dereference. This flaw allows an attacker with permission to read this information to cause a denial of service...
kernel: net/smc: fix illegal rmb_desc access in SMC-D connection dump
A flaw was found in the Linux kernel in which functions providing information about SMC-D connections caused a NULL pointer dereference. This flaw allows an attacker with permission to read this information to cause a denial of service...
SUSE CVE-2023-1249
A use-after-free flaw was found in the Linux kernel's core dump subsystem. This flaw allows a local user to crash the system. Only if patch 390031c94211 "coredump: Use the vma snapshot in fillfilesnote" not applied yet, then kernel could be affected...
RHEL 6 : commons-compress (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - commons-compress: Denial of service caused by an infinite loop for a corrupted DUMP file CVE-2024-25710 Note that...
commons-compress: Denial of service caused by an infinite loop for a corrupted DUMP file
A loop with an unreachable exit condition Infinite Loop vulnerability was found in Apache Common Compress. This issue can lead to a denial of service...
The vulnerability of the tipc_udp_nl_dump_remoteip() function in the implementation of the TIPC protocol allows a attacker to gain access to protected data or cause a service failure.
The vulnerability of the tipcudpnldumpremoteip function in the net/tipc/udpmedia.c module of the TIPC Transparent Inter-Process Communication protocol implementation in the Linux operating system is related to incorrect validation of the received data. Exploiting this vulnerability may allow an...
SUSE CVE-2021-47531
In the Linux kernel, the following vulnerability has been resolved: drm/msm: Fix mmap to include VMIO and VMDONTDUMP In commit 510410bfc034 "drm/msm: Implement mmap as GEM object function" we switched to a new/cleaner method of doing things. That's good, but we missed a little bit. Before that...
SUSE CVE-2021-47518
In the Linux kernel, the following vulnerability has been resolved: nfc: fix potential NULL pointer deref in nfcgenldumpsesdone The done netlink callback nfcgenldumpsesdone should check if received argument is non-NULL, because its allocation could fail earlier in dumpit nfcgenldumpses...
SUSE CVE-2021-47381
In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: Fix DSP oops stack dump output contents Fix @buf arg given to hexdumptobuffer and stack address used in dump error output...
DEBIAN-CVE-2021-47518
In the Linux kernel, the following vulnerability has been resolved: nfc: fix potential NULL pointer deref in nfcgenldumpsesdone The done netlink callback nfcgenldumpsesdone should check if received argument is non-NULL, because its allocation could fail earlier in dumpit nfcgenldumpses...
DEBIAN-CVE-2021-47501
In the Linux kernel, the following vulnerability has been resolved: i40e: Fix NULL pointer dereference in i40edbgdumpdesc When trying to dump VFs VSI RX/TX descriptors using debugfs there was a crash due to NULL pointer dereference in i40edbgdumpdesc. Added a check to i40edbgdumpdesc that checks ...
UBUNTU-CVE-2021-47518
In the Linux kernel, the following vulnerability has been resolved: nfc: fix potential NULL pointer deref in nfcgenldumpsesdone The done netlink callback nfcgenldumpsesdone should check if received argument is non-NULL, because its allocation could fail earlier in dumpit nfcgenldumpses...
UBUNTU-CVE-2021-47501
In the Linux kernel, the following vulnerability has been resolved: i40e: Fix NULL pointer dereference in i40edbgdumpdesc When trying to dump VFs VSI RX/TX descriptors using debugfs there was a crash due to NULL pointer dereference in i40edbgdumpdesc. Added a check to i40edbgdumpdesc that checks ...
CVE-2021-47256
A vulnerability was found in the memoryfailure function in the Linux kernel's memory management system, where the system may not wait for certain pages to finish writing before performing actions on them, leading to a kernel crash. Mitigation Red Hat has investigated whether a possible mitigation...
kernel: gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
A NULL pointer dereference flaw was found in the Linux kernel when accessing the rgd-rdrgl in the gfs2rgrpdump function. This issue may lead to a crash...
kernel: gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
A NULL pointer dereference flaw was found in the Linux kernel when accessing the rgd-rdrgl in the gfs2rgrpdump function. This issue may lead to a crash...
kernel: Use-after-free in nft_verdict_dump due to a race between set GC and transaction
A use-after-free flaw was found in the Linux kernel’s nftables sub-component due to a race problem between the set GC and transaction in the Linux Kernel. This flaw allows a local attacker to crash the system due to a missing call to nftsetelemmarkbusy, causing double deactivation of the element...
SUSE CVE-2024-33901
Issue in KeePassXC 2.7.7 allows an attacker who has the privileges of the victim to recover some passwords stored in the .kdbx database via a memory dump. NOTE: the vendor disputes this because memory-management constraints make this unavoidable in the current design and other realistic designs...