CVE-2021-28705: Improper Handling of Exceptional Conditions

issues with partially successful P2M updates on x86 This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. x86 HVM and PVH guests may be started in populate-on-demand PoD mode, to provide a way for them to later easily have...

Improper Error Handling

go has improper error handling. An attacker is able to cause an open panic via a maliciously crafted ZIP archive containing an invalid name or an empty filename field...

PT-2021-30342

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.15 Description The issue concerns proper error handling in set cred ucounts. It was introduced in version v5.14 and fixed in version v5.14.15. The actual impact and attack plausibility have not yet been...

PT-2021-26347

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.14.15 Description: The issue concerns proper error handling in set cred ucounts. It was introduced in version v5.14 and fixed in version v5.14.15. The actual impact and attack plausibility have not yet been...

Improper Error Handling

camaleoncms has improper error handling. The vulnerability exists due to an uncaught exception, allowing an attacker to upload a maliciously crafted .svg file...

CVE-2021-25477

An improper error handling in Mediatek RRC Protocol stack prior to SMR Oct-2021 Release 1 allows modem crash and remote denial of service...

CVE-2021-25477

An improper error handling in Mediatek RRC Protocol stack prior to SMR Oct-2021 Release 1 allows modem crash and remote denial of service...

CVE-2021-25481

An improper error handling in Exynos CP booting driver prior to SMR Oct-2021 Release 1 allows local attackers to bypass a Secure Memory Protector of Exynos CP Memory...

CVE-2021-25477

An improper error handling in Mediatek RRC Protocol stack prior to SMR Oct-2021 Release 1 allows modem crash and remote denial of service...

CVE-2021-25481: Improper Check for Unusual or Exceptional Conditions

An improper error handling in Exynos CP booting driver prior to SMR Oct-2021 Release 1 allows local attackers to bypass a Secure Memory Protector of Exynos CP Memory...

Security update for sqlite3 (important)

openSUSE Security Update: Security update for sqlite3 Announcement ID: openSUSE-SU-2021:1058-1 Rating: important References: 1157818 1158812 1158958 1158959 1158960 1159491 1159715 1159847 1159850 1160309 1160438 1160439 1164719 1172091 1172115 1172234 1172236 1172240 1173641 928700 928701...

PT-2021-25208

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.194 Description The issue concerns the net: caif component, which lacks proper error handling. This was introduced in version v3.3 and fixed in version v4.19.194. The actual impact and attack plausibility...

PT-2021-25243

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.3 through 5.10.42 Description The issue concerns the net: caif component, which lacks proper error handling. This was introduced in version v3.3 and fixed in version v5.10.43. Recommendations For Linux Kernel versions 3...

PT-2021-29202

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.194 Description The issue concerns the net: caif component, which lacks proper error handling. This was introduced in version v3.3 and fixed in version v4.19.194. The actual impact and attack plausibility...

PT-2021-25219

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.125 Description The issue concerns the net: caif component, which lacks proper error handling. This could potentially lead to security vulnerabilities, although the actual impact and attack plausibility have...

PT-2021-29213

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.3 through 5.4.124 Description The issue concerns the net: caif component, which lacks proper error handling. This could potentially lead to security vulnerabilities, although the actual impact and attack plausibility ha...

PT-2021-25183

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.3 through 4.4.271 Description The issue concerns the net: caif component, which lacks proper error handling. This was introduced in version v3.3 and fixed in version v4.4.272. Recommendations For Linux Kernel versions 3...

PT-2021-29185

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.272 Description The issue concerns the net: caif component, which lacks proper error handling. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2021-29177

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.3 through 4.4.271 Description The issue concerns the net: caif component, which lacks proper error handling. This was introduced in version v3.3 and fixed in version v4.4.272. The actual impact and attack plausibility...

Denial Of Service (DoS)

clamav is vulnerable to denial of service. An unauthenticated remote attacker is able to cause a denial of service condition in the application via a malicious Excel file due to improper error handling that may result in an infinite loop...