GSD-2023-1000404 vxlan: Fix memory leaks in error path

vxlan: Fix memory leaks in error path This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.19 by commit 75c1ab900f7cf0485f0be1607c79c55f51faaa90...

PT-2023-34126 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.86 Description: The issue is related to resource leaks in the Linux Kernel. It was introduced in version v4.2 and fixed in version v5.15.86. The actual impact and attack plausibility have not yet been...

Security update for tor (moderate)

openSUSE Security Update: Security update for tor Announcement ID: openSUSE-SU-2023:0022-1 Rating: moderate References: 1207110 Affected Products: openSUSE Backports SLE-15-SP3 An update that contains security fixes can now be installed. Description: This update for tor fixes the following issues...

PT-2023-33498 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v3.13 through v6.0.18 Description: The issue concerns potential resource leaks in the NFC component. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions v3.13...

PT-2023-33911 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.16 Description: The issue concerns potential name leaks in error paths. It was introduced in version v5.16 and is fixed in Linux Kernel version v6.0.16. The actual impact and attack plausibility have not ye...

Adobe InCopy post-release use vulnerability

Adobe InCopy is a text editing software for authoring from Adobe. Adobe InCopy has a use-after-release vulnerability that can be exploited by attackers to bypass mitigations such as ASLR and cause sensitive memory leaks...

kernel: i915: Incorrect GPU TLB flush can lead to random memory access

An incorrect TLB flush issue was found in the Linux kernel’s GPU i915 kernel driver, potentially leading to random memory corruption or data leaks. This flaw could allow a local user to crash the system or escalate their privileges on the system...

kernel: i915: Incorrect GPU TLB flush can lead to random memory access

An incorrect TLB flush issue was found in the Linux kernel’s GPU i915 kernel driver, potentially leading to random memory corruption or data leaks. This flaw could allow a local user to crash the system or escalate their privileges on the system...

RHEL 8 : kernel-rt (RHSA-2023:0114)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:0114 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirement...

RHEL 8 : kpatch-patch (RHSA-2023:0123)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:0123 advisory. This is a kernel live patch module which is automatically loaded by the RPM post-install script to modify the code of a running kernel...

Adobe InCopy 缓冲区错误漏洞

Adobe InCopy is a text editing software for authoring from Adobe. Adobe InCopy has an out-of-bounds read vulnerability that can be exploited by attackers to bypass mitigations such as ASLR and cause sensitive memory leaks...

Adobe InCopy 资源管理错误漏洞

Adobe InCopy is a text editing software for authoring from Adobe. Adobe InCopy has a use-after-release vulnerability that can be exploited by attackers to bypass mitigations such as ASLR and cause sensitive memory leaks...

PT-2023-3055 · Juniper Networks · Junos

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS PTX Series and QFX10000 Series versions prior to 20.2R3-S6 Juniper Networks Junos OS PTX Series and QFX10000 Series versions prior to 20.3R3-S6 Juniper Networks Junos OS PTX Series and QFX10000 Series versions prior ...

Barzahlen Payment Module PHP SDK 安全漏洞

Barzahlen Payment Module PHP SDK is a Barzahlen PHP library. A security vulnerability exists in Barzahlen Payment Module PHP SDK versions prior to 2.0.1, which stems from a faulty validation of a function in the file src/Webhook.php, which can lead to observable timing differences...

Information Disclosure

srp is vulnerable to information disclosure. The vulnerability exists because the BNmodexp is called with a small base and without constant time flag fall back on OpenSSL with insecure implementation of ctsrp.py, allowing an attacker to gain sensitive information through side channel leaks...

PT-2025-54010

Name of the Vulnerable Software and Affected Versions linux versions prior to 6.1.y Description The Linux kernel contains an issue in the bpf verifier related to pointer comparisons. Specifically, the verifier incorrectly flagged comparisons of packet pointers as potential pointer leaks. This...

GHSA-XMC3-9M9J-W9X4 cocagne pysrp vulnerable to side channel leaks

A vulnerability, which was classified as problematic, has been found in cocagne pysrp up to 1.0.16. This issue affects the function calculatex of the file srp/ctsrp.py. The manipulation leads to information exposure through discrepancy. Upgrading to version 1.0.17 is able to address this issue. T...

AIX 7.2 TL 5 : bind (IJ44426) (deprecated)

https://vulners.com/cve/CVE-2022-38178 https://vulners.com/cve/CVE-2022-38178 ISC BIND is vulnerable to a denial of service, caused by a memory leak in the DNSSEC verification code for the EdDSA algorithm. By spoofing the target resolver with responses that have a malformed EdDSA signature, a...

CVE-2022-4155 Contest Gallery < 19.1.5 - Admin+ SQL Injection

The Contest Gallery WordPress plugin before 19.1.5.1, Contest Gallery Pro WordPress plugin before 19.1.5.1 do not escape the wpuserid GET parameter before concatenating it to an SQL query in management-show-user.php. This may allow malicious users with administrator privileges i.e. on multisite...

Debian: Security Advisory (DLA-3245-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...