CVE-2022-34835

In Das U-Boot through 2022.07-rc5, an integer signedness error and resultant stack-based buffer overflow in the "i2c md" command enables the corruption of the return address pointer of the doi2cmd function...

PT-2022-22384 · Unknown +5 · Das U-Boot +5

Name of the Vulnerable Software and Affected Versions: Das U-Boot versions through 2022.07-rc5 Description: The issue is caused by an integer signedness error and a resultant stack-based buffer overflow in the "i2c md" command. This enables the corruption of the return address pointer of the do i...

Das U-Boot 缓冲区错误漏洞

Das U-Boot is a boot loader program mainly for embedded systems. The program supports many different computer system architectures such as PPC, ARM, AVR32, MIPS, x86, 68k, Nios and MicroBlaze. A security vulnerability exists in Das U-Boot version 2022.07-rc5 and earlier versions, which stems from...

GSD-2022-1003617 md/bitmap: don't set sb values if can't pass sanity check

md/bitmap: don't set sb values if can't pass sanity check This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.121 by commit...

GSD-2022-1003392 md/bitmap: don't set sb values if can't pass sanity check

md/bitmap: don't set sb values if can't pass sanity check This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.46 by commit...

GSD-2022-1003119 md/bitmap: don't set sb values if can't pass sanity check

md/bitmap: don't set sb values if can't pass sanity check This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.14 by commit...

PT-2022-31918

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.120 Description The issue is related to the raid5 module in the Linux Kernel, introducing MD BROKEN. The actual impact and attack plausibility have not yet been proven. Recommendations For versions prior to...

PT-2022-31382

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to 5.17.14 Description The issue is related to the md/bitmap component, where sanity check failures can lead to security problems. The actual impact and attack plausibility have not yet been proven. Recommendations...

PT-2022-31655

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to 5.15.46 Description A potential security issue exists where the md/bitmap does not set sb values if it cannot pass a sanity check. The actual impact and attack plausibility have not yet been proven. Recommendatio...

PT-2022-31090

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to 5.18.3 Description The issue is related to the md/bitmap component, where sanity check failures can lead to security problems. The actual impact and attack plausibility have not yet been proven. Recommendations F...

PT-2022-32162

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to 4.19.247 Description A potential security issue exists where the md/bitmap does not set sb values if it cannot pass a sanity check. The actual impact and attack plausibility have not yet been proven...

PT-2022-31127

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v4.20 through v5.18.1 Description The issue is related to the raid5 module, introducing MD BROKEN. The actual impact and attack plausibility have not yet been proven. It was introduced in version v4.20 and fixed in Linux...

PT-2022-31711

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v4.20 through v5.15.44 Description The issue is related to the raid5 module in the Linux Kernel, introducing MD BROKEN. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-31439

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v4.20 through v5.17.12 Description The issue is related to the introduction of MD BROKEN in raid5. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions v4.20 throug...

PT-2022-32073

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v4.20 through v5.4.196 Description The issue is related to the raid5 module in the Linux Kernel, introducing MD BROKEN. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-32039

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to 5.4.198 Description A potential security issue exists where the md/bitmap does not set sb values if it cannot pass a sanity check. The actual impact and attack plausibility have not yet been proven. Recommendatio...

PT-2022-31880

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to 5.10.121 Description A potential security issue exists where the md/bitmap does not set sb values if it cannot pass a sanity check. The actual impact and attack plausibility have not yet been proven...

md-technology.com Cross Site Scripting vulnerability OBB-2670868

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Malicious code in md-performance (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 90d6d5be3f70190aacf0f23190e1e0da484a2a9d3df619cf872b9ade12ed5f30 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4524 Malicious code in md-performance (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 90d6d5be3f70190aacf0f23190e1e0da484a2a9d3df619cf872b9ade12ed5f30 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...