3797 matches found
CVE-2024-35988 riscv: Fix TASK_SIZE on 64-bit NOMMU
In the Linux kernel, the following vulnerability has been resolved: riscv: Fix TASKSIZE on 64-bit NOMMU On NOMMU, userspace memory can come from anywhere in physical RAM. The current definition of TASKSIZE is wrong if any RAM exists above 4G, causing spurious failures in the userspace access...
CVE-2024-35988 riscv: Fix TASK_SIZE on 64-bit NOMMU
In the Linux kernel, the following vulnerability has been resolved: riscv: Fix TASKSIZE on 64-bit NOMMU On NOMMU, userspace memory can come from anywhere in physical RAM. The current definition of TASKSIZE is wrong if any RAM exists above 4G, causing spurious failures in the userspace access...
The vulnerability of the interactive browser environment for data analysis and visualization in Apache Zeppelin SAP arises from incorrect restrictions on XML links to external objects. This allows attackers to disclose sensitive information or cause service failures.
The vulnerability of the interactive browser environment for data analysis and visualization in Apache Zeppelin SAP is related to incorrect restrictions on XML links to external objects. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information or cause service...
The vulnerability of the l2cap_chan_timeout() function in the Linux kernel’s Bluetooth subsystem allows a hacker to trigger a service failure.
The vulnerability of the l2capchantimeout function in the net/bluetooth/l2capcore.c module of the Linux kernel’s Bluetooth subsystem is related to the swapping of the zero pointer due to concurrent access to resources race condition. Exploiting this vulnerability could allow a attacker to cause...
CVE-2024-35818 LoongArch: Define the __io_aw() hook as mmiowb()
In the Linux kernel, the following vulnerability has been resolved: LoongArch: Define the ioaw hook as mmiowb Commit fb24ea52f78e0d595852e "drivers: Remove explicit invocations of mmiowb" remove all mmiowb in drivers, but it says: "NOTE: mmiowb has only ever guaranteed ordering in conjunction wit...
The vulnerability in the FortiOS operating system’s web administration interface allows a hacker to trigger a service failure.
The vulnerability in the FortiOS operating system’s web administration interface is related to deficiencies in handling exceptional states. Exploiting this vulnerability allows a malicious actor to cause service failures by sending specially crafted HTTP requests...
The vulnerability of the JIT-compiler of the Mozilla Firefox browser, which allows a hacker to trigger a service failure.
The vulnerability of the JIT-compiler of the Mozilla Firefox browser is related to an uncontrolled resource consumption due to incorrect object initialization. Exploiting this vulnerability can allow a malicious actor to cause service failures...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the existence of a production environment issue that causes reconnection failures...
The vulnerability in the compilation of compilers for various programming languages in the GNU Compiler Collection (GCC) relates to the incorrect handling of the sum of a pointer and an integer. This vulnerability allows an attacker to trigger a service failure or cause other adverse effects.
The vulnerability in the compiler set for various programming languages in the GNU Compiler Collection GCC relates to the incorrect handling of the sum of a pointer and an integer, when the sum is greater than or equal to the pointer, without using transformations. This can lead to the...
WordPress Tutor LMS Pro Plugin <= 2.7.0 is vulnerable to Privilege Escalation
Software Tutor LMS Pro Type Plugin Vulnerable versions = 2.7.0 Fixed in 2.7.1 OWASP Top 10 A7: Identification and Authentication Failures Classification Privilege Escalation CVE CVE-2024-4351 Patch priority High CVSS severity High 8.8 Developer Claim ownership PSID fc3d215c9303 Credits villu164...
The vulnerability of the sr9800bind() function in the Linux kernel’s drivers/net/usb/sr9800.c module allows a hacker to cause a service failure.
The vulnerability of the sr9800bind function in the Linux kernel’s drivers/net/usb/sr9800.c file is related to the lack of code checks for function return values. Exploiting this vulnerability could allow an attacker to cause service failures...
“Cannot Retrieve Data” on Citrix Director Dashboard error. Unable to see session information .
“Cannot Retrieve Data” on Citrix Director Dashboard error. Unable to see session information of User Connection Failures, Failed Single-session OS Machines, Failed Multi-session OS Machines data is missing. The following exception can be seen in CDF traces. Error:...
The vulnerability of the free_swap_and_cache() function in the mm/swapfile.c module of the Linux kernel’s memory management subsystem allows a hacker to trigger a service failure.
The vulnerability of the freeswapandcache function in the mm/swapfile.c file, a memory management subsystem of the Linux kernel, is related to concurrent access to resources. Exploiting this vulnerability could allow an attacker to cause service failures...
The vulnerability of Xenstore information storage in Xen hypervisors allows a attacker to cause a service failure.
The vulnerability of Xenstore information storage in Xen hypervisors stems from memory release errors that can occur due to the creation of an arbitrary number of nodes through transactions. Exploiting this vulnerability can allow a attacker to cause service failures...
The vulnerability of Xenstore information storage in Xen hypervisors allows a attacker to cause a service failure.
The vulnerability of Xenstore information storage system in Xen hypervisors is related to the unlimited distribution of resources. Exploiting this vulnerability can allow attackers to cause service failures...
The vulnerability of Xenstore information storage in Xen hypervisors allows a attacker to cause a service failure.
The vulnerability of Xenstore information storage system in Xen hypervisors is related to the unlimited distribution of resources. Exploiting this vulnerability can allow attackers to cause service failures...
The vulnerability of Xenstore information storage in Xen hypervisors allows a attacker to cause a service failure.
The vulnerability of Xenstore information storage system in Xen hypervisors is related to the unlimited distribution of resources. Exploiting this vulnerability can allow attackers to cause service failures...
The vulnerability of Xenstore information storage in Xen hypervisors allows a attacker to cause a service failure.
The vulnerability of Xenstore information storage in Xen hypervisors is related to memory release errors. Exploiting this vulnerability can allow attackers to cause service failures...
The vulnerability of Xenstore information storage in Xen hypervisors allows a attacker to cause a service failure.
The vulnerability of Xenstore information storage system in Xen hypervisors is related to the unlimited distribution of resources. Exploiting this vulnerability can allow attackers to cause service failures...
The vulnerability of Xenstore information storage in Xen hypervisors allows a attacker to cause a service failure.
The vulnerability of Xenstore information storage in Xen hypervisors stems from memory release errors that can occur due to the creation of an arbitrary number of nodes through transactions. Exploiting this vulnerability can allow a attacker to cause service failures...