The vulnerability of Mozilla Firefox, Firefox ESR, and the email client Thunderbird, related to improper code generation, allows attackers to trigger service failures or potentially cause other adverse effects.

The vulnerabilities of Mozilla Firefox, Firefox ESR, and the email client Thunderbird are related to improper code generation. Exploiting these vulnerabilities can allow a remote attacker to cause service failures or potentially have other adverse effects...

Out-of-bounds

When cpif handles probe failures, there is a possible out of bounds read due to a use after free. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

PT-2023-17835 · Google · Android Kernel

Name of the Vulnerable Software and Affected Versions: Android kernel Description: The issue is related to how cpif handles probe failures, potentially leading to an out of bounds read due to a use after free. This could result in local information disclosure, with the requirement of System...

The vulnerability of the Linux operating system’s IPv6 protocol implementation allows a attacker to cause a service failure or potentially have other adverse effects.

The vulnerability of the Linux operating system’s IPv6 kernel implementation stems from synchronization errors when using shared resources. Exploiting this vulnerability can allow a remote attacker to cause service failures or potentially have other adverse effects...

The vulnerability of the AMD KVM subsystem for supporting embedded virtualization in Linux kernel allows a hacker to induce a service failure.

The vulnerability of the AMD KVM subsystem for supporting embedded virtualization in Linux operating systems’ kernels is related to improper handling of embedded termination processes. Exploiting this vulnerability can allow attackers to cause service failures...

The vulnerability of PDF viewing and editing programs like Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, and Adobe Acrobat 2020/Adobe Acrobat Reader 2020 lies in the handling of the zero pointer, which allows a malicious actor to trigger a service failure.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 are related to the handling of the null pointer. Exploiting these vulnerabilities can allow attackers to cause servi...

The vulnerability of the drm_gem_shmem_get_sg_table function (drivers/gpu/drm/virtio/virtgpu_object.c) in the Linux kernel allows a hacker to trigger a service failure.

The vulnerability of the drmgemshmemgetsgtable function drivers/gpu/drm/virtio/virtgpuobject.c in the Linux kernel leads to a situation where interpretation conflicts may occur. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability of the io_uring subsystem in the fs/io_uring.c module of the Linux operating system allows a hacker to disclose protected information or cause service failures.

The vulnerability of the iouring subsystem in the fs/iouring.c module of the Linux operating system is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information or cause service failures...

Debian: Security Advisory (DLA-288-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of the system entry console in the Cisco Unified Computing System (UCS) Manager, which manages the UCS 6400 and UCS 6500 routers, as well as the Cisco Nexus 9000 Series PID, allows a intruder to trigger a service failure.

The vulnerability of the system entry console in the Cisco Unified Computing System UCS Manager, which manages UCS 6400 and UCS 6500 routers and Cisco Nexus 9000 Series PIDS, is related to deficiencies in the password authentication process. Exploiting this vulnerability can allow attackers to...

The vulnerability of the Dell DBUtil driver (dbutil_2_3.sys) arises from deficiencies in authentication procedures, which allow attackers to escalate their privileges, expose sensitive information, and cause service failures.

The vulnerability of the Dell DBUtil driver dbutil23.sys is due to deficiencies in authentication procedures. Exploiting this vulnerability can allow attackers to enhance their privileges, disclose sensitive information, and cause service failures...

The vulnerability of the NGINX software configuration, which manages the Discourse mailing list, allows a hacker to cause a service failure.

The vulnerability of the NGINX software-based Discourse mailing list management system is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The High-Stakes Blame Game in the White House Cybersecurity Plan

The Biden administration’s new strategy would shift the liability for security failures to a controversial target: the companies that caused them...

The vulnerability of the application software interface for Active Directory Domain Services on the Windows operating system allows a perpetrator to cause a service failure.

The vulnerability of the Active Directory Domain Services application programming interface for the Windows operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Dumb Password Rules

Examples of dumb password rules. There are some pretty bad disasters out there. My worst experiences are with sites that have artificial complexity requirements that cause my personal password-generation systems to fail. Some of the systems on the list are even worse: when they fail they dont tel...

The vulnerability of AMD’s microprogrammed security processor BIOS systems, related to improper cleaning or release of resources, allows a perpetrator to trigger a service failure.

The vulnerability of AMD’s microprogrammed security processor BIOS systems is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...

PUB-A-259323725

When cpif handles probe failures, there is a possible out of bounds read due to a use after free. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...

The vulnerability of Microsoft Visual Studio, a software development tool, stems from insufficient validation of input data. This allows attackers to trigger service failures.

The vulnerability of the Microsoft Visual Studio software development tool is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the Microsoft .NET Framework software platform, related to improper cleaning or release of resources, allows a perpetrator to cause a service failure.

The vulnerability of the Microsoft .NET Framework software platform is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the System Management Unit (SMU) subsystem in AMD microprogramming software allows a hacker to trigger a service failure.

The vulnerability of the System Management Unit SMU subsystem in AMD microprogramming systems is related to the improper release of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...