Google Pixel 安全漏洞

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability. The vulnerability is due to an allowable memory allocation flaw in the mmumapforfw function in gsldfwload.c, which leads to a mitigation bypass. An attack...

kernel: openvswitch: integer underflow leads to out-of-bounds write in reserve_sfa_size()

An integer coercion error was found in the openvswitch kernel module. Given a sufficiently large number of actions, while copying and reserving memory for a new action of a new flow, the reservesfasize function does not return -EMSGSIZE as expected, potentially leading to an out-of-bounds write...

USN-5758-1: Linux kernel vulnerabilities

Jann Horn discovered that the Linux kernel did not properly track memory allocations for anonymous VMA mappings in some situations, leading to potential data structure reuse. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2022-427...

USN-5757-1: Linux kernel vulnerabilities

Jann Horn discovered that the Linux kernel did not properly track memory allocations for anonymous VMA mappings in some situations, leading to potential data structure reuse. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2022-427...

PUB-A-231500967

In mmumapforfw of gsldfwload.c, there is a possible mitigation bypass due to Permissive Memory Allocation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

USN-5728-3: Linux kernel (GCP) vulnerabilities

Jann Horn discovered that the Linux kernel did not properly track memory allocations for anonymous VMA mappings in some situations, leading to potential data structure reuse. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2022-427...

Security Bulletin: A Kafka vulnerability affects IBM Operations Analytics Predictive Insights (CVE-2022-34917 )

Summary Kafka vulnerability affects IBM Operations Analytics Predictive Insights CVE-2022-34917. Kafka is used by IBM Operations Analytics Predictive Insight in the data ingestion and processing services. The vulnerabilities have been addressed. Vulnerability Details CVEID:CVE-2022-34917...

SUSE: Security Advisory (SUSE-SU-2022:4252-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2022:4252-1 Security update for exiv2

This update for exiv2 fixes the following issues: - CVE-2019-13112: Fixed an uncontrolled memory allocation in PngChunk:parseChunkContent causing denial of service. bsc1142681 - CVE-2021-37620: Fixed out-of-bounds read in XmpTextValue:read. bsc1189332 - CVE-2021-34334: Fixed a DoS due to integer...

MGASA-2022-0435 Updated java packages fix security vulnerability

Class compilation issue. CVE-2022-21540 Improper restriction of MethodHandle.invokeBasic. CVE-2022-21541 Integer truncation issue in Xalan-J. CVE-2022-34169 Improper MultiByte conversion can lead to buffer overflow. CVE-2022-21618 Improper handling of long NTLM client hostnames. CVE-2022-21619...

Denial Of Service (DoS)

xen is vulnerable to denial of service. The vulnerability exists due to excessive memory allocation which allows an attacker to cause an application crash due to overflows...

Denial Of Service (DoS)

xen is vulnerable to denial of service. The vulnerability exists due to the large memory allocation in the library, allowing an attacker to create many nodes more than the maximum allowed size and path length by accessing many nodes inside a transaction...

Denial Of Service (DoS)

xen is vulnerable to denial of service. The vulnerability exists due to excessive memory allocation which allows an attacker to cause an application crash due to overflows...

Denial Of Service (DoS)

xen is vulnerable to denial of service. The vulnerability exists due to excessive memory allocation which allows an attacker to cause an application crash due to overflows...

Denial Of Service (DoS)

xen is vulnerable to denial of service. The vulnerability exists due to excessive memory allocation which allows an attacker to cause an application crash due to overflows...

Denial Of Service (DoS)

xen is vulnerable to denial of service. The vulnerability exists due to excessive memory allocation which allows an attacker to cause an application crash due to overflows...

Denial Of Service (DoS)

xen is vulnerable to denial of service. The vulnerability exists due to excessive memory allocation which allows an attacker to cause an application crash due to overflows...

Denial Of Service (DoS)

xen is vulnerable to denial of service. The vulnerability exists due to excessive memory allocation which allows an attacker to cause an application crash due to overflows...

CVE-2022-36227

A flaw was found in libarchive. A missing check of the return value of the calloc function can cause a NULL pointer dereference in an out-of-memory condition or when a memory allocation limit is reached, resulting in the program linked with libarchive to crash...

Oracle Linux 9 : gimp (ELSA-2022-7978)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-7978 advisory. - fix CVE-2022-30067 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not...