428 matches found
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that originates in the Bluetooth/hci module that allows a handle value greater than HCICONNHANDLEMAX to be set, resulting in...
undertow: Out-of-memory Error after several closed connections with wildfly-http-client protocol
A vulnerability was found in Undertow. This vulnerability impacts a server that supports the wildfly-http-client protocol. Whenever a malicious user opens and closes a connection with the HTTP port of the server and then closes the connection immediately, the server will end with both memory and...
SAMSUNG Mobile Processor Security Vulnerability
SAMSUNG Mobile Processor is a family of mobile processors from Samsung South Korea. A security vulnerability exists in SAMSUNG Mobile Processor, which stems from a lack of validation checks on local handles, and could lead to a denial-of-service attack by unmapping invalid lengths...
CVE-2024-31957
The CVE concerns Samsung Mobile Processors Exynos 2200 and Exynos 2400. Affected component: native handle validation check; root cause is lack of validation of native handles, which can enable a Denial of Service by unmapping an invalid length. Documented impact: availability impact (HIGH). Explo...
PT-2024-24318 · Samsung · Exynos
Name of the Vulnerable Software and Affected Versions: Samsung Mobile Processors Exynos versions 2200 through 2400 Description: A vulnerability was discovered in Samsung Mobile Processors where they lack a check for the validation of native handles, which can result in a Denial of Service attack ...
CVE-2024-31957
A vulnerability was discovered in Samsung Mobile Processors Exynos 2200 and Exynos 2400 where they lack a check for the validation of native handles, which can result in a DoSDenial of Service attack by unmapping an invalid length...
CVE-2024-31959
An issue was discovered in Samsung Mobile Processor Exynos 2200, Exynos 1480, Exynos 2400. It lacks a check for the validation of native handles, which can result in code execution...
CVE-2024-31958
An issue was discovered in Samsung Mobile Processor EExynos 2200, Exynos 1480, Exynos 2400. It lacks a check for the validation of native handles, which can result in an Out-of-Bounds Write...
CVE-2024-31958
An issue was discovered in Samsung Mobile Processor EExynos 2200, Exynos 1480, Exynos 2400. It lacks a check for the validation of native handles, which can result in an Out-of-Bounds Write...
PT-2024-24320 · Samsung · Exynos 2200 +2
Name of the Vulnerable Software and Affected Versions: Samsung Mobile Processor Exynos versions 2200, 1480, 2400 Description: An issue was discovered in Samsung Mobile Processor Exynos, where it lacks a check for the validation of native handles, which can result in code execution. Recommendation...
SUSE CVE-2024-26973
In the Linux kernel, the following vulnerability has been resolved: fat: fix uninitialized field in nostale filehandles When fatencodefhnostale encodes file handle without a parent it stores only first 10 bytes of the file handle. However the length of the file handle must be a multiple of 4 so t...
DEBIAN-CVE-2024-26973
In the Linux kernel, the following vulnerability has been resolved: fat: fix uninitialized field in nostale filehandles When fatencodefhnostale encodes file handle without a parent it stores only first 10 bytes of the file handle. However the length of the file handle must be a multiple of 4 so t...
UBUNTU-CVE-2024-26973
In the Linux kernel, the following vulnerability has been resolved: fat: fix uninitialized field in nostale filehandles When fatencodefhnostale encodes file handle without a parent it stores only first 10 bytes of the file handle. However the length of the file handle must be a multiple of 4 so t...
Cookie-Monster - BOF To Steal Browser Cookies & Credentials
Steal browser cookies for edge, chrome and firefox through a BOF or exe! Cookie-Monster will extract the WebKit master key, locate a browser process with a handle to the Cookies and Login Data files, copy the handles and then filelessly download the target. Once the Cookies/Login Data files are...
CVE-2024-2607
creationtimestamp| type| source ---|---|--- 2024-03-19 13:26:49+00:00| seen| https://t.me/ctinow/211449 2024-03-19 13:31:22+00:00| seen| https://t.me/ctinow/211468...
EulerOS 2.0 SP8 : curl (EulerOS-SA-2024-1260)
According to the versions of the curl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - This flaw allows an attacker to insert cookies at will into a running program using libcurl, if the specific series of conditions are met. libcurl...
CVE-2022-43855
IBM SPSS Statistics 26.0, 27.0.1, and 28.0 IO Module could allow a local user to create multiple files that could exhaust the file handles capacity and cause a denial of service...
Code injection
IBM SPSS Statistics 26.0, 27.0.1, and 28.0 could allow a local user to create multiple files that could exhaust the file handles capacity and cause a denial of service. IBM X-Force ID: 230235...
CVE-2022-43855 IBM SPSS Statistics denial of service
IBM SPSS Statistics 26.0, 27.0.1, and 28.0 IO Module could allow a local user to create multiple files that could exhaust the file handles capacity and cause a denial of service...
CVE-2022-43855 IBM SPSS Statistics denial of service
IBM SPSS Statistics 26.0, 27.0.1, and 28.0 IO Module could allow a local user to create multiple files that could exhaust the file handles capacity and cause a denial of service...