tigervnc bug fix and enhancement update

An update is available for tigervnc. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Virtual Network Computing VNC is a remote display system which allows users ...

virt-who bug fix and enhancement update

An update is available for virt-who. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The virt-who service collects information about the connection between the...

CVE-2021-26396

Insufficient validation of address mapping to IO in ASP AMD Secure Processor may result in a loss of memory integrity in the SNP guest...

Input validation

Insufficient validation of address mapping to IO in ASP AMD Secure Processor may result in a loss of memory integrity in the SNP guest...

AMD Secure Encrypted Virtualization 安全漏洞

AMD Secure Encrypted Virtualization is a software application from UltraMicroelectronics AMD. Hardware-accelerated memory encryption to protect data in use. AMD Secure Encrypted Virtualization suffers from a security vulnerability that stems from insufficient boundary checking. An attacker exploi...

CVE-2021-26396

The CVE-2021-26396 issue affects the AMD Secure Processor (ASP) where insufficient validation of address mapping to IO can lead to loss of memory integrity in the SNP guest. The entry is supported by multiple sources (NVD/NCSC AMD SB) detailing the vulnerability and its scope across AMD EPYC gene...

CVE-2021-26396

Insufficient validation of address mapping to IO in ASP AMD Secure Processor may result in a loss of memory integrity in the SNP guest...

CVE-2021-26396: Insufficient Verification of Data Authenticity

Insufficient validation of address mapping to IO in ASP AMD Secure Processor may result in a loss of memory integrity in the SNP guest...

AMD Server Vulnerabilities – January 2023

Bulletin ID: AMD-SB-1032 Potential Impact: Varies by CVE, see descriptions below Severity: Varies by CVE, see descriptions below Summary During security reviews in collaboration with Google, Microsoft, and Oracle, potential vulnerabilities in the AMD Secure Processor ASP, AMD System Management Un...

CVE-2022-43972

A null pointer dereference vulnerability exists in Linksys WRT54GL Wireless-G Broadband Router with firmware = 4.30.18.006. A null pointer dereference in the soapaction function within the upnp binary can be triggered by an unauthenticated attacker via a malicious POST request invoking the...

CVE-2022-25746

Memory corruption in kernel due to missing checks when updating the access rights of a memextent mapping...

Memory corruption

Memory corruption in kernel due to missing checks when updating the access rights of a memextent mapping...

PT-2023-14414 · Linksys · Linksys Wrt54Gl Wireless-G Broadband Router

Name of the Vulnerable Software and Affected Versions: Linksys WRT54GL Wireless-G Broadband Router versions = 4.30.18.006 Description: A null pointer dereference issue exists in the soap action function within the upnp binary. This can be triggered by an unauthenticated attacker via a malicious...

nlgis2 SQL注入漏洞

nlgis2 is an open source mapping feature project for Dutch cities by Social History Services. nlgis2 suffers from a SQL injection vulnerability. An attacker exploits this vulnerability to perform a sql injection attack...

CVE-2022-25746

CVE-2022-25746 concerns a kernel memory corruption issue tied to the memextent mapping. The root cause, as reported in multiple sources, is missing checks when updating the access rights of a memextent mapping, which enables memory corruption. Documented impact indicates high-severity effects wit...

CVE-2022-25746 Buffer Copy Without Checking Size of Input in Kernel

Memory corruption in kernel due to missing checks when updating the access rights of a memextent mapping...

PT-2023-12818 · Kernel · Kernel

Name of the Vulnerable Software and Affected Versions: Kernel affected versions not specified Description: The issue is related to memory corruption in the kernel due to missing checks when updating the access rights of a memextent mapping. Recommendations: At the moment, there is no information...

CVE-2022-34674

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler, where a helper function maps more physical pages than were requested, which may lead to undefined behavior or an information leak...

UBUNTU-CVE-2022-34674

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler, where a helper function maps more physical pages than were requested, which may lead to undefined behavior or an information leak...

PT-2022-22287 · Nvidia +1 · Nvidia Gpu Display Driver For Linux +1

Name of the Vulnerable Software and Affected Versions: NVIDIA GPU Display Driver for Linux affected versions not specified Description: The issue is related to a helper function in the kernel mode layer handler that maps more physical pages than requested, potentially leading to undefined behavio...