PT-2022-5322 · Nginx · Nginx Njs

Name of the Vulnerable Software and Affected Versions: Nginx NJS version 0.7.2 Description: The issue is related to a heap-use-after-free bug caused by an illegal memory copy in the njs json parse iterator call function at njs json.c. This bug can be exploited by a remote attacker to execute...

Nginx 资源管理错误漏洞

Nginx is a lightweight web server/reverse proxy server and email IMAP/POP3 proxy server from Nginx, Inc. njs is one of the scripting language components that supports extended NGINX functionality. A security vulnerability exists in Nginx NJS version 0.7.2, which stems from heap-based...

PT-2022-37319 · Git +1 · Skia

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read error. Technical details about the crash include the SkPath::Iter::next function, SkStroke::strokePat...

GSD-2022-1003905 f2fs: fix dereference of stale list iterator after loop body

f2fs: fix dereference of stale list iterator after loop body This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.247 by commit...

GSD-2022-1003742 f2fs: fix dereference of stale list iterator after loop body

f2fs: fix dereference of stale list iterator after loop body This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.198 by commit...

GSD-2022-1003561 f2fs: fix dereference of stale list iterator after loop body

f2fs: fix dereference of stale list iterator after loop body This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.121 by commit...

GSD-2022-1003325 f2fs: fix dereference of stale list iterator after loop body

f2fs: fix dereference of stale list iterator after loop body This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.46 by commit...

GSD-2022-1003031 f2fs: fix dereference of stale list iterator after loop body

f2fs: fix dereference of stale list iterator after loop body This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.14 by commit...

GSD-2022-1002690 f2fs: fix dereference of stale list iterator after loop body

f2fs: fix dereference of stale list iterator after loop body This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.3 by commit...

GSD-2022-1002652 misc: fastrpc: fix list iterator in fastrpc_req_mem_unmap_impl

misc: fastrpc: fix list iterator in fastrpcreqmemunmapimpl This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.3 by commit...

PT-2022-31294

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.14 Description The issue is related to a dereference of a stale list iterator after a loop body in the f2fs component. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2022-30953

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.3 Description The issue is related to a dereference of a stale list iterator after a loop body in the f2fs component. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2022-31588

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.46 Description The issue is related to a dereference of a stale list iterator after a loop body in the f2fs component. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2022-32168

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.247 Description The issue is related to a dereference of a stale list iterator after a loop body in the f2fs component. This problem was introduced in version v4.12 and is fixed in version v4.19.247. The...

PT-2022-32005

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.198 Description A potential issue exists due to the dereference of a stale list iterator after a loop body. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kerne...

PT-2022-31824

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.121 Description The issue is related to a dereference of a stale list iterator after a loop body in the f2fs component. The actual impact and attack plausibility have not yet been proven. Recommendations Fo...

MGASA-2022-0234 Updated php packages fix security vulnerability

CLI -Fixed bug 8575 CLI closes standard streams too early. Core -Fixed Haiku ZTS builds. Date -Fixed bug 8471 Segmentation fault when converting immutable and mutable DateTime instances created using reflection. php-fpm - Fixed bug 72185 writes empty fcgi record causing nginx 502. Mysqlnd - Fixed...

GHSA-QQMC-HWQP-8G2W Use after free in lru crate

Lru crate has use after free vulnerability. Lru crate has two functions for getting an iterator. Both iterators give references to key and value. Calling specific functions, like pop, will remove and free the value, and but it's still possible to access the reference of value which is already...

Use after free in lru crate

Lru crate has use after free vulnerability. Lru crate has two functions for getting an iterator. Both iterators give references to key and value. Calling specific functions, like pop, will remove and free the value, and but it's still possible to access the reference of value which is already...

move_elements can double-free objects on panic

Affected versions of scratchpad used ptr::read to read elements while calling a user provided function f on them. Since the pointer read duplicates ownership, a panic inside the user provided f function could cause a double free when unwinding. The flaw was fixed in commit 891561bea by removing t...