3627 matches found
CVE-2021-46923
In the Linux kernel, the following vulnerability has been resolved: fs/mountsetattr: always cleanup mountkattr Make sure that finishmountkattr is called after mountkattr was succesfully built in both the success and failure case to prevent leaking any references we took when we built it. We...
UBUNTU-CVE-2021-46923
In the Linux kernel, the following vulnerability has been resolved: fs/mountsetattr: always cleanup mountkattr Make sure that finishmountkattr is called after mountkattr was succesfully built in both the success and failure case to prevent leaking any references we took when we built it. We...
Spoofing
In the Linux kernel, the following vulnerability has been resolved: fs/mountsetattr: always cleanup mountkattr Make sure that finishmountkattr is called after mountkattr was succesfully built in both the success and failure case to prevent leaking any references we took when we built it. We...
CVE-2021-46923 fs/mount_setattr: always cleanup mount_kattr
In the Linux kernel, the following vulnerability has been resolved: fs/mountsetattr: always cleanup mountkattr Make sure that finishmountkattr is called after mountkattr was succesfully built in both the success and failure case to prevent leaking any references we took when we built it. We...
CVE-2021-46923
CVE-2021-46923: Rejected reason; this CVE entry is not used.
CVE-2021-46923
In the Linux kernel, the following vulnerability has been resolved: fs/mountsetattr: always cleanup mountkattr Make sure that finishmountkattr is called after mountkattr was succesfully built in both the success and failure case to prevent leaking any references we took when we built it. We...
Linux kernel security vulnerabilities
The Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. A security vulnerability exists in the Linux kernel that stems from a memory leak in virtiofsprobe...
CVE-2021-46923: Exposure of Resource to Wrong Sphere
In the Linux kernel, the following vulnerability has been resolved: fs/mountsetattr: always cleanup mountkattr Make sure that finishmountkattr is called after mountkattr was succesfully built in both the success and failure case to prevent leaking any references we took when we built it. We...
CVE-2021-46957: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: riscv/kprobe: fix kernel panic when invoking sysread traced by kprobe The execution of sysread end up hitting a BUGON in findgetblock after installing kprobe at sysread, the BUG message like the following: 65.708663 ------------...
PT-2024-8379
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the ubifs component of the Linux kernel, where page cache reads are lockless. This allows a simultaneous reader to see old data if the freshly allocated page is s...
PT-2024-7326
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to errors in resource management within the fs/aio component of the Linux kernel. Specifically, when kiocb set cancel fn is called for I/O submitted via io uring, ...
CVE-2023-6881 fs: fuse: buffer overflow vulnerability in the Zephyr FS
Possible buffer overflow in ismountpoint...
CVE-2023-6881 fs: fuse: buffer overflow vulnerability in the Zephyr FS
Possible buffer overflow in ismountpoint...
CVE-2023-52434 smb: client: fix potential OOBs in smb2_parse_contexts()
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential OOBs in smb2parsecontexts Validate offsets and lengths before dereferencing create contexts in smb2parsecontexts. This fixes following oops when accessing invalid create contexts from server: BUG: unabl...
CVE-2024-1523
EC-WEB FS-EZViewerWeb's query functionality lacks proper restrictions of user input, allowing remote attackers authenticated as regular user to inject SQL commands for reading, modifying, and deleting database records, as well as executing system commands. Attackers may even leverage the dbo...
CVE-2024-1523 EC-WEB FS-EZViewer(Web) - SQL Injection
EC-WEB FS-EZViewerWeb's query functionality lacks proper restrictions of user input, allowing remote attackers authenticated as regular user to inject SQL commands for reading, modifying, and deleting database records, as well as executing system commands. Attackers may even leverage the dbo...
CVE-2024-1523: Improper Neutralization of Special Elements used in an SQL Command
EC-WEB FS-EZViewerWeb's query functionality lacks proper restrictions of user input, allowing remote attackers authenticated as regular user to inject SQL commands for reading, modifying, and deleting database records, as well as executing system commands. Attackers may even leverage the dbo...
[SECURITY] Fedora 38 Update: virtiofsd-1.10.1-1.fc38
Virtio-fs vhost-user device daemon Rust version...
PT-2024-18111 · Unknown · Ec-Web Fs-Ezviewer
Name of the Vulnerable Software and Affected Versions: EC-WEB FS-EZViewerWeb affected versions not specified Description: The query functionality in EC-WEB FS-EZViewerWeb lacks proper restrictions on user input, allowing remote attackers authenticated as regular users to inject SQL commands. This...