GSD-2021-1000141 md/raid1: properly indicate failure when ending a failed write request

md/raid1: properly indicate failure when ending a failed write request This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.36 by commit...

PT-2021-24646

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.118 Description The issue is related to the md/raid1 module, where a failed write request is not properly indicated. This could potentially lead to security vulnerabilities, although the actual impact and...

PT-2021-28640

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.118 Description The issue is related to the md/raid1 module, where it fails to properly indicate failure when ending a failed write request. The actual impact and attack plausibility have not yet been proven...

PT-2021-28608

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.36 Description The issue is related to the md/raid1 module, where it fails to properly indicate failure when ending a failed write request. The actual impact and attack plausibility have not yet been proven...

PT-2021-24614

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.36 Description The issue is related to the md/raid1 module, where a failed write request does not properly indicate failure. This problem was introduced in version v5.4 and is fixed in version v5.10.36...

PT-2021-28534

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.4 through v5.12.3 Description The issue is related to the md/raid1 module, where it fails to properly indicate failure when ending a failed write request. The actual impact and attack plausibility have not yet been...

PT-2021-24579

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.11.20 Description The issue is related to the md/raid1 module, where a failed write request is not properly indicated. This could potentially lead to security vulnerabilities, although the actual impact and...

PT-2021-28573

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.11.20 Description The issue is related to the md/raid1 module, where it fails to properly indicate failure when ending a failed write request. The actual impact and attack plausibility have not yet been proven...

PT-2021-24540

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.12.3 Description: The issue is related to the md/raid1 module, where a failed write request does not properly indicate failure. This problem was introduced in version v5.4 and fixed in version v5.12.3...

PT-2021-5835

Name of the Vulnerable Software and Affected Versions md4c version 0.4.7 Description The issue is related to the md analyze line function in md4c.c, which allows attackers to trigger the use of uninitialized memory. This can cause a denial of service via a malformed Markdown document. The...

CVE-2021-29474

HedgeDoc formerly known as CodiMD is an open-source collaborative markdown editor. An attacker can read arbitrary .md files from the server's filesystem due to an improper input validation, which results in the ability to perform a relative path traversal. To verify if you are affected, you can t...

PT-2021-6031

Name of the Vulnerable Software and Affected Versions IDEMIA Morpho Wave Compact versions prior to 2.6.2 IDEMIA VisionPass versions prior to 2.6.2 IDEMIA Sigma devices versions prior to 4.9.4 IDEMIA MA VP MD devices versions prior to 4.9.7 Description The issue is related to a buffer overflow in...

SUSE: Security Advisory (SUSE-SU-2017:0517-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MDaemon Webmail 注入漏洞

MDaemon Webmail is a server-side application for providing mail services from MDaemon, Inc. in the United States. An IFRAME injection vulnerability exists in MDaemon Webmail versions prior to 20.0.4, which can be exploited by an attacker to perform any action with the privileges of the attacked...

CVE-2021-29996

Mark Text through 0.16.3 allows attackers arbitrary command execution. This could lead to Remote Code Execution RCE by opening .md files containing a mutation Cross Site Scripting XSS payload...

Cross site scripting

Mark Text through 0.16.3 allows attackers arbitrary command execution. This could lead to Remote Code Execution RCE by opening .md files containing a mutation Cross Site Scripting XSS payload...

CVE-2021-29996

Mark Text through 0.16.3 allows attackers arbitrary command execution. This could lead to Remote Code Execution RCE by opening .md files containing a mutation Cross Site Scripting XSS payload...

CVE-2021-29996

Mark Text through 0.16.3 allows attackers arbitrary command execution. This could lead to Remote Code Execution RCE by opening .md files containing a mutation Cross Site Scripting XSS payload...

PT-2021-18562

Name of the Vulnerable Software and Affected Versions Mark Text versions 0.16.3 and earlier Description The issue allows attackers to execute arbitrary commands, potentially leading to Remote Code Execution RCE by opening .md files containing a mutation Cross Site Scripting XSS payload...

ALBA-2021:0539 libblockdev bug fix and enhancement update

The libblockdev packages provide a C library with GObject introspection support used for low-level operations on block devices. The library serves as a thin wrapper around plug-ins for specific functionality, such as LVM, Btrfs, LUKS, or MD RAID. Bug Fixes and Enhancements: libblockdev doesn't ru...