PT-2024-8453 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a null pointer dereference in the efx hard start xmit function. This can occur when trying to get the channel from the tx queue variable, which is wrong because...

GSD-2022-1005625 wifi: wil6210: debugfs: fix info leak in wil_write_file_wmi()

wifi: wil6210: debugfs: fix info leak in wilwritefilewmi This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.61 by commit...

PT-2022-34000 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 4.15 through 5.10.139 Description: The issue concerns a locking problem in the rxrpc's sendmsg function. The actual impact and potential for attack have not been proven yet. Recommendations: For Linux Kernel versions 4.1...

PT-2022-33860 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.15 through v5.15.60 Description: A potential security issue exists due to an out of bounds access in the get nodes function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Lin...

PT-2022-33524 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.12 through v5.19.1 Description: A refcount leak was discovered in the mc pcie init irq domains function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

PT-2022-25249 · Xstream · Xstream

Name of the Vulnerable Software and Affected Versions: Xstream affected versions not specified Description: The issue allows an attacker to cause a denial of service attack by supplying content that causes the parser to crash by stack overflow when the parser is running on user-supplied input. Th...

PT-2022-33295 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.12 through v5.19.5 Description: The issue concerns space cache corruption and potential double allocations in btrfs. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kerne...

PT-2024-11769

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a null pointer dereference in the efx hard start xmit function within the sfc/siena component of the Linux kernel. This could potentially lead to a null pointer...

PT-2022-4939 · Isc +10 · Bind +10

Name of the Vulnerable Software and Affected Versions: BIND versions affected versions not specified Description: The issue is related to a flaw in the resolver code, allowing an attacker to cause the named service to crash by sending specific queries. This can lead to a denial of service DoS...

PT-2022-5737 · Microsoft · Odbc Driver +1

Name of the Vulnerable Software and Affected Versions: Microsoft ODBC Driver affected versions not specified Description: The issue exists due to insufficient input validation in the Microsoft ODBC Driver. It allows a remote attacker to execute arbitrary code, potentially impacting the system...

PT-2022-5615 · Microsoft · Windows Dpapi +1

Name of the Vulnerable Software and Affected Versions: Windows DPAPI affected versions not specified Description: The issue is related to a lack of protection for sensitive data in the Windows DPAPI component, allowing an attacker to disclose protected information. This can enable attackers to...

PT-2022-37257 · Git +1 · Bluez

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type of UNKNOWN READ. The crash state involves functions such as write key, textfile put, and is located in the fuzz...

PT-2022-6922 · Snakeyaml +5 · Snakeyaml +5

Name of the Vulnerable Software and Affected Versions: snakeYAML affected versions not specified Description: The issue is related to a Denial of Service DOS attack that can occur when using snakeYAML to parse untrusted YAML files. If the parser is running on user-supplied input, an attacker may...

PT-2022-37243 · Git +1 · Fluent-Bit

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-use-after-free error, which occurs when the program attempts to access memory that has already been freed. The crash state...

PT-2022-19931 · Unknown +1 · Python-Scciclient +1

Name of the Vulnerable Software and Affected Versions: python-scciclient affected versions not specified Description: A flaw was found in the python-scciclient when making an HTTPS connection to a server where the server's certificate would not be verified. This issue opens up the connection to...

PT-2022-37215 · Blosc2 · Blosc2

Name of the Vulnerable Software and Affected Versions: blosc2 affected versions not specified Description: The issue is related to a heap-buffer-overflow crash. Technical details about the crash include the do job function, blosc compress context, and blosc2 compress. Recommendations: At the...

PT-2022-22324 · Tabit · Tabit

Name of the Vulnerable Software and Affected Versions: Tabit affected versions not specified Description: The issue concerns HTTP Method manipulation, where the endpoint "https://bridge.tabit.cloud/configuration/addresses-query" can be exploited by sending a POST request to add addresses to the...

PT-2022-23222 · Swfmill +1 · Swfmill +1

Name of the Vulnerable Software and Affected Versions: SWFMill affected versions not specified Description: A segmentation violation was discovered in SWFMill via the SWF::MethodBody::writeSWF::Writer, SWF::Context function. Recommendations: At the moment, there is no information about a newer...

PT-2022-4342 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in privilege management in the implementation of the Kerberos protocol in Windows operating systems. It allows a remote attacker to elevate their privileges...

PT-2022-4046 · Vmware · Vmware Workspace One Access +1

Name of the Vulnerable Software and Affected Versions: VMware Workspace ONE Access and Identity Manager affected versions not specified Description: The issue is related to a URL injection vulnerability. A malicious actor with network access may be able to redirect an authenticated user to an...