Upgraded Q -> H from #439 [1670433195074]

Judge has assessed an item in Issue 439 as H risk. The relevant finding follows: L02 - close should not be able to close a specific id credit line As per the docs: Can a Borrower chose to repay any debt in any order? No. The app automatically selects which credit line can be repaid using a...

Borrower can manipulate the repayment queue, avoid paying back the initial lender

Lines of code Vulnerability details Impact In contract LineOfCredit, the repayment queue protects lenders and assured that they have to get paid back. Without a queue, a borrower could constantly refinance to lower rates and avoid paying back the initial lender from sponsors. Every time, borrower...

FLAC Audio Codec Heap Buffer Overflow

The vulnerability of the appendtoverifyfifointerleaved function in the streamencoder.c component of the FLAC audio encoder is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows an attacker to gain access to confidential data...

PT-2022-32689

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.54 Description The issue concerns a potential security vulnerability in the Linux Kernel. It involves the m can read fifo,echo tx event function, where a shift of the timestamp to full 32 bits may have...

PT-2022-32475

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.11 Description The issue concerns a potential security vulnerability in the Linux Kernel. It involves the m can read fifo,echo tx event function, where a timestamp is shifted to full 32 bits. The actual...

GSD-2021-1002571 drm/vc4: kms: Clear the HVS FIFO commit pointer once done

drm/vc4: kms: Clear the HVS FIFO commit pointer once done This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.7 by commit...

PT-2021-27055

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.8 Description A memory leak issue was discovered in the error branch of the m can read fifo function. This issue was introduced in Linux Kernel version v5.15 and is fixed in version v5.15.8. The actual impa...

PT-2021-27039

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.7 Description The issue is related to the drm/vc4: kms component, where the HVS FIFO commit pointer is not cleared once done. This is an automated ID intended to aid in discovery of potential security...

UVI-2021-1002094 net: mscc: ocelot: avoid overflowing the PTP timestamp FIFO

net: mscc: ocelot: avoid overflowing the PTP timestamp FIFO This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.14 by commit...

PT-2021-30559

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.14 Description The issue is related to overflowing the PTP timestamp FIFO in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2021-26633

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15 Description: The issue is related to overflowing the PTP timestamp FIFO in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

PT-2021-26564

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.14 Description The issue is related to overflowing the PTP timestamp FIFO in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2021-30628

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15 Description The issue is related to overflowing the PTP timestamp FIFO in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prio...

PT-2024-11477 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A memory leak issue has been identified in the Linux kernel, specifically in the m can read fifo function. This occurs when the second call to m can fifo read fails, causing the functi...

PT-2021-29989

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.251 Description The issue is related to a NULL dereference in the fifo set limit function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior...

PT-2021-26098

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.27 through 5.10.72 Description The issue is related to a NULL dereference in the fifo set limit function. It was introduced in version v2.6.27 and fixed in version v5.10.73. The actual impact and attack plausibility...

PT-2021-26163

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.12 Description The issue is related to a NULL dereference in the fifo set limit function. It was introduced in version v2.6.27 and fixed in version v5.14.12. The actual impact and attack plausibility have n...

PT-2021-30158

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.12 Description A potential security issue exists due to a NULL dereference in the fifo set limit function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kerne...

PT-2021-25975

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.287 Description The issue is related to a NULL dereference in the fifo set limit function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior ...

PT-2021-25963

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.27 through 4.4.288 Description The issue is related to a NULL dereference in the fifo set limit function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...