SUSE CVE-2021-20247

A flaw was found in mbsync before v1.3.5 and v1.4.1. Validations of the mailbox names returned by IMAP LIST/LSUB do not occur allowing a malicious or compromised server to use specially crafted mailbox names containing '..' path components to access data outside the designated mailbox on the...

SUSE CVE-2021-26331

AMD System Management Unit SMU contains a potential issue where a malicious user may be able to manipulate mailbox entries leading to arbitrary code execution...

SUSE CVE-2021-26364

Insufficient bounds checking in an SMU mailbox register could allow an attacker to potentially read outside of the SRAM address range which could result in an exception handling leading to a potential denial of service...

SUSE CVE-2021-41581

x509constraintsparsemailbox in lib/libcrypto/x509/x509constraints.c in LibreSSL through 3.4.0 has a stack-based buffer over-read. When the input exceeds DOMAINPARTMAXLEN, the buffer lacks '\0' termination...

SUSE CVE-2022-4121

In libetpan a null pointer dereference in mailimapmailboxdatastatusfree in low-level/imap/mailimaptypes.c was found that could lead to a remote denial of service or other potential consequences...

CVE-2023-25160 IDOR Vulnerability in Nextcloud Mail

Nextcloud Mail is an email app for the Nextcloud home server platform. Prior to versions 2.2.1, 1.14.5, 1.12.9, and 1.11.8, an attacker can access the mail box by ID getting the subjects and the first characters of the emails. Users should upgrade to Mail 2.2.1 for Nextcloud 25, Mail 1.14.5 for...

IDOR Vulnerability in Nextcloud Mail

None...

Nextcloud 安全漏洞

Nextcloud is an open source suite of self-hosted file synchronization and sharing communication application platform from Nextcloud, Germany. A security vulnerability exists in Nextcloud Mail, which stems from an attacker being able to access mailboxes by obtaining the subject and first character...

GSD-2023-1001521 igb: Initialize mailbox message for VF reset

igb: Initialize mailbox message for VF reset This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.161 by commit...

GSD-2023-1001362 mailbox: zynq-ipi: fix error handling while device_register() fails

mailbox: zynq-ipi: fix error handling while deviceregister fails This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.163 by commit...

GSD-2023-1001227 igb: Initialize mailbox message for VF reset

igb: Initialize mailbox message for VF reset This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.85 by commit...

GSD-2023-1001039 mailbox: zynq-ipi: fix error handling while device_register() fails

mailbox: zynq-ipi: fix error handling while deviceregister fails This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.86 by commit...

UBUNTU-CVE-2022-4121

In libetpan a null pointer dereference in mailimapmailboxdatastatusfree in low-level/imap/mailimaptypes.c was found that could lead to a remote denial of service or other potential consequences...

GSD-2023-1000617 mailbox: zynq-ipi: fix error handling while device_register() fails

mailbox: zynq-ipi: fix error handling while deviceregister fails This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000198 igb: Initialize mailbox message for VF reset

igb: Initialize mailbox message for VF reset This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.161 by commit...

GSD-2023-1000005 igb: Initialize mailbox message for VF reset

igb: Initialize mailbox message for VF reset This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.15 by commit...

PT-2023-33275 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.161 Description: The issue is related to the initialization of mailbox messages for VF reset. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

PT-2023-33082 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.15 Description: The issue concerns the initialization of mailbox messages for VF reset. It was introduced in version v4.0 and fixed in version v6.0.15. The actual impact and attack plausibility have not yet...

PT-2023-33933 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.15 Description: The issue concerns the initialization of mailbox messages for VF reset. It was introduced in version v4.0 and fixed in version v6.0.15. The actual impact and attack plausibility have not yet...

PT-2023-33187 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.85 Description: The issue concerns the initialization of mailbox messages for VF reset. It was introduced in version v4.0 and fixed in version v5.15.85. The actual impact and attack plausibility have not y...