GSD-2022-1000058 mm/damon/dbgfs: fix 'struct pid' leaks in 'dbgfs_target_ids_write()'

mm/damon/dbgfs: fix 'struct pid' leaks in 'dbgfstargetidswrite' This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.13 by commit...

USN-5208-1 linux, linux-aws, linux-aws-5.11, linux-azure, linux-azure-5.11, linux-gcp, linux-gcp-5.11, linux-hwe-5.11, linux-kvm, linux-oracle, linux-oracle-5.11, linux-raspi vulnerabilities

Nadav Amit discovered that the hugetlb implementation in the Linux kernel did not perform TLB flushes under certain conditions. A local attacker could use this to leak or alter data from other processes that use huge pages. CVE-2021-4002 It was discovered that a race condition existed in the...

The vulnerability of the AutoReconnect function in the Cisco IOS XE operating system allows a hacker to trigger a service failure.

The vulnerability of the AutoReconnect function in Cisco IOS XE and Cisco IOS systems is related to memory leaks. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Fuzzing HTTP Proxies: Privoxy, Part 3

Research Fuzzing HTTP Proxies: Privoxy, Part 3 Share January 4th, 2022 One of my earlier posts outlined how I had discovered six security vulnerabilities in the Privoxy software using the technique of fuzzing to cause the software to crash. This post outlines how I discovered three more...

Improper Authorization in saleor/saleor

Title GraphQL traversal due to missing permission checks Description orders and customers fields allow to access each other via nodes edges. However, connections don't check user's permissions, which allows, for instance, a staff with just Customers permissions get full information about the orde...

PT-2025-8106

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A issue in the Linux kernel has been resolved, related to the handling of read-only devices in the memstick/mspro block component. The fix involves using set disk ro to propagate the...

PT-2025-8240

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved. The issue was related to the assignment of ACPI companions to xHCI ports and USB devices in the dwc3 host. The problem occurred...

Adobe Dimension out-of-bounds read vulnerability (CNVD-2022-02635)

Adobe Dimension is a set of 2D and 3D composite design tools from Adobe, Inc. An out-of-bounds read vulnerability exists in Adobe Dimension, which can be exploited by attackers to cause sensitive memory leaks...

Adobe Dimension out-of-bounds read vulnerability (CNVD-2022-02631)

Adobe Dimension is a set of 2D and 3D composite design tools from Adobe, Inc. An out-of-bounds read vulnerability exists in Adobe Dimension, which can be exploited by attackers to cause sensitive memory leaks...

Relay races, batons, and techniques: How to improve your cloud security posture

In 2008, the US 4x100m relay team was the favorite to win the gold medal at the Beijing Olympics. Not a massive surprise, considering that team included the second fastest athlete in history, Tyson Gay. It was a great shock though when the team blundered on the last exchange, dropping the baton,...

GSD-2021-1002560 perf report: Fix memory leaks around perf_tip()

perf report: Fix memory leaks around perftip This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.7 by commit...

GSD-2021-1002491 perf report: Fix memory leaks around perf_tip()

perf report: Fix memory leaks around perftip This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.84 by commit...

GSD-2021-1002446 perf report: Fix memory leaks around perf_tip()

perf report: Fix memory leaks around perftip This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.164 by commit...

openSUSE 15 Security Update : barrier (openSUSE-SU-2021:1595-1)

The remote SUSE Linux SUSE15 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:1595-1 advisory. - An issue was discovered in Barrier before 2.4.0. The barriers component aka the server-side implementation of Barrier does not sufficient...

Security Bulletin: Jnuary 2017 OpenSSL Vulnerabilities affect Multiple N series Products

Summary Multiple N series products incorporate the OpenSSL software libraries to provide cryptographic capabilities. OpenSSL versions below 1.0.2k and 1.1.0d are susceptible to vulnerabilities that could lead to out-of-bound reads, process crashes, Denial of Service DoS attacks, or incorrect...

SUSE-SU-2021:4099-1 Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP3)

This update for the Linux Kernel 5.3.18-57 fixes several issues. The following security issues were fixed: - CVE-2021-0941: In bpfskbchangehead of filter.c, there is a possible out of bounds read due to a use after free. This could lead to local escalation of privilege with System execution...

SUSE: Security Advisory (SUSE-SU-2021:4057-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2021:4090-1 Security update for the Linux Kernel (Live Patch 10 for SLE 15 SP2)

This update for the Linux Kernel 5.3.18-2449 fixes several issues. The following security issues were fixed: - CVE-2021-0941: In bpfskbchangehead of filter.c, there is a possible out of bounds read due to a use after free. This could lead to local escalation of privilege with System execution...

SUSE-SU-2021:4038-1 Security update for the Linux Kernel (Live Patch 20 for SLE 15 SP1)

This update for the Linux Kernel 4.12.14-19775 fixes several issues. The following security issues were fixed: - CVE-2021-0941: In bpfskbchangehead of filter.c, there is a possible out of bounds read due to a use after free. This could lead to local escalation of privilege with System execution...

SUSE-SU-2021:4021-1 Security update for the Linux Kernel (Live Patch 25 for SLE 12 SP5)

This update for the Linux Kernel 4.12.14-12298 fixes several issues. The following security issues were fixed: - CVE-2021-0941: In bpfskbchangehead of filter.c, there is a possible out of bounds read due to a use after free. This could lead to local escalation of privilege with System execution...