9664 matches found
PT-2023-33315 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.158 Description: The issue is related to a problem with Clang builds in the drm/amdgpu component, which may lead to a blown stack-frame. The actual impact and potential for attack have not been proven yet...
PT-2023-33314 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.158 Description: The issue provides extra FRAME WARN leeway when KASAN is enabled. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...
PT-2023-33410 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.268 Description: The issue provides a little extra FRAME WARN leeway when KASAN is enabled. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...
PT-2023-33243 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.82 Description: The issue provides a little extra FRAME WARN leeway when KASAN is enabled. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions pri...
GdkPixbuf Composite Frame Code Execution
The vulnerability of the compositeframe function in the GdkPixbuf image loading library is related to buffer overflows during the processing of GIF format files. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
Debian DSA-5316-1 : netty - security update
The remote Debian 11 host has a package installed that is affected by multiple vulnerabilities as referenced in the dsa-5316 advisory. Several out-of-memory, stack overflow or HTTP request smuggling vulnerabilities have been discovered in Netty, a Java NIO client/server socket framework, which ma...
Clickjacking
pyload-ng is vulnerable to clickjacking attacks. The vulnerability exists due to the lack of frame restrictions in init.py as it does not properly set the response header X-Frame-Options: DENY, which allows an attacker to load the website within a malicious response header...
USN-5791-3 linux-azure-5.4, linux-azure-fde vulnerabilities
It was discovered that a race condition existed in the Android Binder IPC subsystem in the Linux kernel, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2022-20421 David Leadbeater...
USN-5792-2 linux-aws, linux-aws-5.15, linux-azure, linux-azure-5.15, linux-azure-fde vulnerabilities
Mingwei Zhang discovered that the KVM implementation for AMD processors in the Linux kernel did not properly handle cache coherency with Secure Encrypted Virtualization SEV. A local attacker could possibly use this to cause a denial of service host system crash. CVE-2022-0171 It was discovered th...
CVE-2022-33283
Information disclosure due to buffer over-read in WLAN while WLAN frame parsing due to missing frame length check...
CVE-2022-33284
Information disclosure due to buffer over-read in WLAN while parsing BTM action frame...
CVE-2022-33252
Information disclosure due to buffer over-read in WLAN while handling IBSS beacons frame...
CVE-2022-25717
Memory corruption in display due to double free while allocating frame buffer memory...
Double free
Memory corruption in display due to double free while allocating frame buffer memory...
Information disclosure
Information disclosure due to buffer over-read in WLAN while parsing BTM action frame...
Information disclosure
Information disclosure due to buffer over-read in WLAN while WLAN frame parsing due to missing frame length check...
CVE-2022-33284 Buffer over-read in WLAN
Information disclosure due to buffer over-read in WLAN while parsing BTM action frame...
CVE-2022-33284 Buffer over-read in WLAN
Information disclosure due to buffer over-read in WLAN while parsing BTM action frame...
CVE-2022-33283
CVE-2022-33283 describes information disclosure via a buffer over-read in WLAN frame parsing caused by a missing frame length check. The issue is documented across multiple sources as affecting WLAN-related components, including Qualcomm closed-source components, with the vulnerability enabling p...