7566 matches found
Security Bulletin: IBM Sterling External Authentication Server is vulnerable to Apache Commons IO.
Summary Security Bulletin:IBM Sterling External Authentication Server is vulnerable to Apache Commons IO. Vulnerability Details CVEID:CVE-2024-47554 DESCRIPTION: Uncontrolled Resource Consumption vulnerability in Apache Commons IO. The org.apache.commons.io.input.XmlStreamReader class may...
PT-2025-28884
Name of the Vulnerable Software and Affected Versions: Linux Kernel affected versions not specified Description: A flaw exists in the Linux kernel's io uring resource management related to folio unpinning. Specifically, the issue arises when a tail page of a folio is pinned, and the io uring...
PT-2025-30867
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 Description The Linux kernel contains a flaw in the io uring/msg ring subsystem related to the freeing of io kiocb requests. Specifically, the freeing of requests was not...
Security Bulletin: Multiple Vulnerabilities in IBM Event Streams
Summary Multiple vulnerabilities were addressed in IBM Event Streams version 11.8.1. Vulnerability Details CVEID:CVE-2024-47554 DESCRIPTION: Uncontrolled Resource Consumption vulnerability in Apache Commons IO. The org.apache.commons.io.input.XmlStreamReader class may excessively consume CPU...
PT-2025-27971
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.15.0-rc7-syzkaller-gd7fa1af5b33e Description: A vulnerability in the Linux kernel has been resolved, related to the io uring/rsrc module. The issue occurs when the buffer count with offset for cloning exceeds...
AZL-64550 CVE-2025-38111 affecting package kernel for versions less than 6.6.96.1-1
In the Linux kernel, the following vulnerability has been resolved: net/mdiobus: Fix potential out-of-bounds read/write access When using publicly available tools like 'mdio-tools' to read/write data from/to network interface and its PHY via mdiobus, there is no verification of parameters passed ...
DEBIAN-CVE-2025-38100
In the Linux kernel, the following vulnerability has been resolved: x86/iopl: Cure TIFIOBITMAP inconsistencies iobitmapexit is invoked from exitthread when a task exists or when a fork fails. In the latter case the exitthread cleans up resources which were allocated during fork. iobitmapexit...
AZL-64577 CVE-2025-38100 affecting package kernel for versions less than 6.6.96.1-1
In the Linux kernel, the following vulnerability has been resolved: x86/iopl: Cure TIFIOBITMAP inconsistencies iobitmapexit is invoked from exitthread when a task exists or when a fork fails. In the latter case the exitthread cleans up resources which were allocated during fork. iobitmapexit...
UBUNTU-CVE-2025-38100
In the Linux kernel, the following vulnerability has been resolved: x86/iopl: Cure TIFIOBITMAP inconsistencies iobitmapexit is invoked from exitthread when a task exists or when a fork fails. In the latter case the exitthread cleans up resources which were allocated during fork. iobitmapexit...
CVE-2025-38100 x86/iopl: Cure TIF_IO_BITMAP inconsistencies
In the Linux kernel, the following vulnerability has been resolved: x86/iopl: Cure TIFIOBITMAP inconsistencies iobitmapexit is invoked from exitthread when a task exists or when a fork fails. In the latter case the exitthread cleans up resources which were allocated during fork. iobitmapexit...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a TIFIOBITMAP inconsistency in x86/iopl...
kernel: dm ioctl: prevent potential spectre v1 gadget
A vulnerability was found in the Linux kernel's dm-ioctl interface in the lookupioctl function, which accepts a user-provided cmd value that is used to index the ioctls array directly. This issue could lead to an out-of-bounds access if the CPU speculatively executes the array access before cmd i...
Security Bulletin: IBM App Connect for Healthcare is vulnerable to Uncontrolled Resource Consumption due to Apache Commons IO ( CVE-2024-47554 )
Summary IBM App Connect for Healthcare is vulnerable to Uncontrolled Resource Consumption due to Apache Commons IO. Vulnerability Details CVEID:CVE-2024-47554 DESCRIPTION: Uncontrolled Resource Consumption vulnerability in Apache Commons IO. The org.apache.commons.io.input.XmlStreamReader class m...
CVE-2025-2403
A denial-of-service vulnerability due to improper prioritization of network traffic over protection mechanism exists in Relion 670/650 and SAM600-IO series device that if exploited could potentially cause critical functions like LDCM Line Distance Communication Module to malfunction...
Security Bulletin: IBM Maximo Application Suite - Manage Component uses commons-io: 2.7 which is vulnerable to CVE-2024-47554
Summary Security Bulletin: IBM Maximo Application Suite - Manage Component uses commons-io: 2.7 which is vulnerable to CVE-2024-47554. This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details CVEID:CVE-2024-47554 DESCRIPTION: Uncontrolled Resource...
Hitachi Energy Relion 670/650 and SAM600-IO Series (Update A)
SUMMARY Hitachi Energy is aware of a vulnerability that affects the Relion 670/650 and SAM600-IO series IED device versions that are listed in this document. An authenticated attacker successfully exploiting this vulnerability via FTP access can cause the device to reboot due to improper disk...
CVE-2025-2403
A denial-of-service vulnerability due to improper prioritization of network traffic over protection mechanism exists in Relion 670/650 and SAM600-IO series device that if exploited could potentially cause critical functions like LDCM Line Distance Communication Module to malfunction...
CVE-2025-2403
A denial-of-service vulnerability due to improper prioritization of network traffic over protection mechanism exists in Relion 670/650 and SAM600-IO series device that if exploited could potentially cause critical functions like LDCM Line Distance Communication Module to malfunction...
CVE-2025-2403
The CVE-2025-2403 vulnerability affects Hitachi Energy Relion 670/650 and SAM600-IO series devices, caused by improper prioritization of network traffic over protection mechanisms. This can lead to a denial-of-service that potentially disrupts critical functions such as the Line Distance Communic...
PT-2025-26714 · Sam600-Io +1 · Sam600-Io +1
Name of the Vulnerable Software and Affected Versions: Relion 670/650 and SAM600-IO series device affected versions not specified Description: A denial-of-service issue exists due to improper prioritization of network traffic over protection mechanisms. This could cause critical functions, such a...