7565 matches found
USN-4917-1 linux, linux-aws, linux-aws-5.4, linux-azure, linux-azure-5.4, linux-gcp, linux-gcp-5.4, linux-gke-5.3, linux-gke-5.4, linux-gkeop, linux-gkeop-5.4, linux-hwe, linux-hwe-5.4, linux-hwe-5.8, linux-kvm, linux-oem-5.10, linux-oracle, linux-oracle-5.4, linux-raspi, linux-raspi-5.4, linux-raspi2-5.3 vulnerabilities
It was discovered that the overlayfs implementation in the Linux kernel did not properly validate the application of file system capabilities with respect to user namespaces. A local attacker could use this to gain elevated privileges. CVE-2021-3493 Vincent Dehors discovered that the shiftfs file...
UBUNTU-CVE-2021-3492
Shiftfs, an out-of-tree stacking file system included in Ubuntu Linux kernels, did not properly handle faults occurring during copyfromuser correctly. These could lead to either a double-free situation or memory not being freed at all. An attacker could use this to cause a denial of service kerne...
Malware Variants: More Sophisticated, Prevalent and Evolving in 2021
A malicious program intended to cause havoc with IT systems—malware—is becoming more and more sophisticated every year. The year 2021 is no exception, as recent trends indicate that several new variants of malware are making their way into the world of cybersecurity. While smarter security...
CVE-2021-3492
Shiftfs, an out-of-tree stacking file system included in Ubuntu Linux kernels, did not properly handle faults occurring during copyfromuser correctly. These could lead to either a double-free situation or memory not being freed at all. An attacker could use this to cause a denial of service kerne...
ALPINE-CVE-2021-31162
In the standard library in Rust before 1.52.0, a double free can occur in the Vec::fromiter function if freeing the element panics...
PT-2021-19197
Name of the Vulnerable Software and Affected Versions Rust versions prior to 1.52.0 Description A double free can occur in the Vec::from iter function if freeing the element panics. This issue is related to the standard library in Rust. Recommendations For versions prior to 1.52.0, update to...
PT-2023-1299
Name of the Vulnerable Software and Affected Versions GNU Tar versions 1.34 and earlier Description The issue is related to a one-byte out-of-bounds read in the from header function in list.c that results in the use of uninitialized memory for a conditional jump. This occurs via a V7 archive in...
Rust 资源管理错误漏洞
Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A resource management error vulnerability exists in the standard library in versions of Rust prior to 1.53.0, which stems from a double release that occurs in the Vec::fromiter function. No details of the...
Important: Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.2.2 security and bug fix update
Red Hat Advanced Cluster Management for Kubernetes 2.2.2 General Availability release images, which fix several bugs and security issues. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a...
PT-2021-28202
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ crash occurred, involving the functions frame get vlmetalayers, frame to schunk, and blosc2 schunk from buffer. No informatio...
This Week in Security News - April 9, 2021
Microsoft Teams and Zoom Hacked In $1 Million Competition and Preventing Ransomware While Working from Home...
PT-2021-4252
Name of the Vulnerable Software and Affected Versions Shiftfs versions prior to the fixed version Description The issue is related to the copy from user function in the shiftfs file system of the Linux kernel, which is associated with a double-free memory error. This can allow an attacker to acce...
Rust 资源管理错误漏洞
Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A resource management error vulnerability exists in Rust id-map crate version 2021-02-26 and prior versions, which stems from the discovery of a double release in IdMap::clonefrom. No detailed vulnerability...
PT-2021-14470
Name of the Vulnerable Software and Affected Versions CKEditor 5 versions = 26.0.0 Description A regular expression denial of service ReDoS vulnerability has been discovered in multiple CKEditor 5 packages, including ckeditor5-engine, ckeditor5-font, ckeditor5-image, ckeditor5-list,...
PT-2021-18589
Name of the Vulnerable Software and Affected Versions Knowage Suite versions prior to 7.4 Description The issue allows an attacker to inject arbitrary web script in "/restful-services/publish" via the EXEC FROM parameter, which can lead to data leakage. This is a case of reflected cross-site...
CVE-2021-29936
An issue was discovered in the adtensor crate through 2021-01-11 for Rust. There is a drop of uninitialized memory via the FromIterator implementation for Vector and Matrix...
Child Tweets Gibberish from U.S. Nuke Account
A nonsense tweet sent out from the official account of U.S. Strategic Command is no reason for alarm, according to the department. The social media manager’s kid found an open laptop, pounded on a few random keys and sent the tweet, which read, “;l;;gmlxzssaw” last Sunday. The tweets were met wit...
CVE-2021-21321
A flaw was found in fastify-reply-from. Escaping of the prefix of the proxied backend service is possible allowing an attacker, using a specially crafted URL, to gain access to directories that would otherwise be out of bounds. The highest threat from this vulnerability is to data confidentiality...
PT-2021-5825 · Unknown +8 · Hosted-Git-Info +8
Name of the Vulnerable Software and Affected Versions: hosted-git-info versions prior to 3.0.8 Description: The issue is related to a Regular Expression Denial of Service ReDoS in the fromUrl function in index.js. This occurs due to the shortcutMatch regular expression, which exhibits polynomial...