885 matches found
CVE-2025-71120
In the Linux kernel, the following vulnerability has been resolved: SUNRPC: svcauthgss: avoid NULL deref on zero length gsstoken in gssreadproxyverf A zero length gsstoken results in pages == 0 and intoken-pages0 is NULL. The code unconditionally evaluates pageaddressintoken-pages0 for the initia...
CVE-2025-71120 SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf
In the Linux kernel, the following vulnerability has been resolved: SUNRPC: svcauthgss: avoid NULL deref on zero length gsstoken in gssreadproxyverf A zero length gsstoken results in pages == 0 and intoken-pages0 is NULL. The code unconditionally evaluates pageaddressintoken-pages0 for the initia...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a failure to check the length of the gsstoken, which could result in a null pointer dereference...
CVE-2022-50821
In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Don't leak netobj memory when gssreadproxyverf fails Mitigation To mitigate this issue, prevent module sunrpc from being loaded. Please see https://access.redhat.com/solutions/41278 for how to blacklist a kernel module to...
SUSE CVE-2022-50821
In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Don't leak netobj memory when gssreadproxyverf fails...
SUSE CVE-2025-58181
SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption...
Malicious code in gel-gss (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8548b80c889e1007553fed7b6c39f257eb8e7bb58a140bf4c3b00ba3e23a6934 The package gel-gss was found to contain malicious code...
EUVD-2025-37281
Malicious code in gel-gss npm...
MAL-2025-49283 Malicious code in gel-gss (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8548b80c889e1007553fed7b6c39f257eb8e7bb58a140bf4c3b00ba3e23a6934 The package gel-gss was found to contain malicious code...
EUVD-2010-0659
Malware in sbrugna...
EUVD-2010-1350
Malware in sbrugna...
EUVD-2005-1127
Malware in sbrugna...
EUVD-2020-17411
Malware in sbrugna...
EUVD-2020-17412
Malware in sbrugna...
EUVD-2020-17410
Malware in sbrugna...
EUVD-2020-29473
Malware in sbrugna...
EUVD-2010-1353
Malware in sbrugna...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: krb5 (UTSA-2025-986178)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986178 advisory. In MIT Kerberos 5 aka krb5 before 1.21.3, an attacker can cause invalid memory reads during GSS message token handling by sending message tokens with invalid length...