libwebp: use-after-free in EmitFancyRGB() in dec/io_dec.c

A flaw was found in libwebp. A use-after-free was found due to a thread being killed too early. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

PT-2024-11274 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel version 5.13.0-rc4-00927-gebbe9dbd802c-dirty 36 Description: A vulnerability in the Linux kernel has been resolved. The issue involves a pending hrtimer that may expire after the kthread worker of a tcpm port is destroyed. This c...

PT-2021-28293

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type of UNKNOWN READ. The crash state involves functions such as FuzzedFileProvider::seek, IO do write, and IO file close...

DEBIAN-CVE-2020-14340

A vulnerability was discovered in XNIO where file descriptor leak caused by growing amounts of NIO Selector file handles between garbage collection cycles. It may allow the attacker to cause a denial of service. It affects XNIO versions 3.6.0.Beta1 through 3.8.1.Final...

CVE-2020-10742

A flaw was found in the Linux kernel. An index buffer overflow during Direct IO write leading to the NFS client to crash. In some cases, a reach out of the index after one memory allocation by kmalloc will cause a kernel panic. The highest threat from this vulnerability is to data confidentiality...

CVE-2020-10742

A flaw was found in the Linux kernel. An index buffer overflow during Direct IO write leading to the NFS client to crash. In some cases, a reach out of the index after one memory allocation by kmalloc will cause a kernel panic. The highest threat from this vulnerability is to data confidentiality...

CVE-2020-10742

A flaw was found in the Linux kernel. An index buffer overflow during Direct IO write leading to the NFS client to crash. In some cases, a reach out of the index after one memory allocation by kmalloc will cause a kernel panic. The highest threat from this vulnerability is to data confidentiality...

CVE-2020-10742: Out-of-bounds Write

A flaw was found in the Linux kernel. An index buffer overflow during Direct IO write leading to the NFS client to crash. In some cases, a reach out of the index after one memory allocation by kmalloc will cause a kernel panic. The highest threat from this vulnerability is to data confidentiality...

PT-2021-24530

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.12 through v5.12.2 Description: The issue is related to a problem with shared sqpoll cancellation hangs in io uring. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kerne...

Fedora: Security Advisory for python-eventlet (FEDORA-2021-d5915c247b)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 33 Update: python-eventlet-0.31.0-1.fc33

Eventlet is a networking library written in Python. It achieves high scalability by using non-blocking io while at the same time retaining high programmer usability by using coroutines to make the non-blocking io operations appear blocking at the source code level...

Apple macOS 缓冲区错误漏洞

Apple macOS is a suite of specialized operating systems developed by Apple Inc. for Mac computers. A buffer error vulnerability exists in the Model IO component of Apple MacOS, which stems from a boundary condition in the Model IO subsystem. A remote attacker could exploit the vulnerability could...

Apple macOS 缓冲区错误漏洞

Apple macOS is a specialized operating system from Apple Inc. developed for Mac computers. A buffer error vulnerability exists in the model IO component of Apple MacOS, which stems from a boundary condition due to the model IO subsystem. A remote attacker can exploit this vulnerability to create ...

Apple macOS 缓冲区错误漏洞

Apple macOS is a suite of specialized operating systems developed by Apple Inc. for Mac computers. A buffer error vulnerability exists in the Model IO component of Apple MacOS, which stems from a boundary condition in the Model IO subsystem. A remote attacker can exploit the vulnerability to crea...

PT-2021-24420

Name of the Vulnerable Software and Affected Versions: moov-io/customers affected versions not specified Description: The issue is related to the hashing of account numbers without using a salt, making it susceptible to rainbow table attacks. The expected behavior is to include a salt, such as a...

WS-2021-0128

github.com/moov-io/customers before 0.5.0 is vulnerable to rainbow table attack...

Linux tss_invalidate_io_bitmap Privilege Escalation

The vulnerability of the tssinvalidateiobitmap function in the Linux operating system is related to incorrect default access rights settings. Exploiting this vulnerability can allow an attacker to enhance their privileges...

PT-2022-1369 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A use-after-free flaw was found in the Linux kernel’s io uring subsystem, allowing a local user to crash or escalate their privileges on the system. This issue is related to the way a...

kernel: child process is able to access parent mm through hfi dev file handle

A flaw use after free in the Linux kernel infiniband hfi1 driver was found in the way user calls Ioctl after open dev file and fork. A local user could use this flaw to crash the system...

CVE-2021-22543

An issue was discovered in Linux: KVM through Improper handling of VMIO|VMPFNMAP vmas in KVM can bypass RO checks and can lead to pages being freed while still accessible by the VMM and guest. This allows users with the ability to start and control a VM to read/write random pages of memory and ca...