PT-2021-23197 · Google · Tensorflow

Name of the Vulnerable Software and Affected Versions: TensorFlow versions prior to 2.7.0 TensorFlow versions 2.6.1 and earlier TensorFlow versions 2.5.2 and earlier TensorFlow versions 2.4.4 and earlier Description: The implementation of SparseFillEmptyRows can be made to trigger a heap...

UBUNTU-CVE-2021-38507

The Opportunistic Encryption feature of HTTP2 RFC 8164 allows a connection to be transparently upgraded to TLS while retaining the visual properties of an HTTP connection, including being same-origin with unencrypted connections on port 80. However, if a second encrypted port on the same IP addre...

CVE-2021-41019

An improper validation of certificate with host mismatch CWE-297 vulnerability in FortiOS versions 6.4.6 and below may allow the connection to a malicious LDAP server via options in GUI, leading to disclosure of sensitive information, such as AD credentials...

CVE-2021-41019

An improper validation of certificate with host mismatch CWE-297 vulnerability in FortiOS versions 6.4.6 and below may allow the connection to a malicious LDAP server via options in GUI, leading to disclosure of sensitive information, such as AD credentials...

CVE-2021-41019

An improper validation of certificate with host mismatch CWE-297 vulnerability in FortiOS versions 6.4.6 and below may allow the connection to a malicious LDAP server via options in GUI, leading to disclosure of sensitive information, such as AD credentials...

CVE-2021-41019: Improper Certificate Validation

An improper validation of certificate with host mismatch CWE-297 vulnerability in FortiOS versions 6.4.6 and below may allow the connection to a malicious LDAP server via options in GUI, leading to disclosure of sensitive information, such as AD credentials...

ASB-A-191444150

In rwt4tsmdetectndef of rwt4t.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information disclosure due to a limited change in behavior based on the out of bounds data with no additional execution privileges needed. User interaction is not...

GSD-2021-1001874 mm, slub: fix mismatch between reconstructed freelist depth and cnt

mm, slub: fix mismatch between reconstructed freelist depth and cnt This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.15 by commit...

GSD-2021-1001839 mm, slub: fix mismatch between reconstructed freelist depth and cnt

mm, slub: fix mismatch between reconstructed freelist depth and cnt This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.76 by commit...

UVI-2021-1001839 mm, slub: fix mismatch between reconstructed freelist depth and cnt

mm, slub: fix mismatch between reconstructed freelist depth and cnt This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.76 by commit...

UVI-2021-1001816 mm, slub: fix mismatch between reconstructed freelist depth and cnt

mm, slub: fix mismatch between reconstructed freelist depth and cnt This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.156 by commit...

GSD-2021-1001816 mm, slub: fix mismatch between reconstructed freelist depth and cnt

mm, slub: fix mismatch between reconstructed freelist depth and cnt This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.156 by commit...

GSD-2021-1001799 mm, slub: fix mismatch between reconstructed freelist depth and cnt

mm, slub: fix mismatch between reconstructed freelist depth and cnt This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.214 by commit...

PT-2021-26309

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.76 Description: The issue is related to a mismatch between reconstructed freelist depth and cnt in the slub component of the Linux Kernel. The actual impact and attack plausibility have not yet been proven...

PT-2021-30304

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.76 Description The issue is related to a mismatch between reconstructed freelist depth and cnt in the slub component of the Linux Kernel. The actual impact and attack plausibility have not yet been proven...

PT-2021-30264

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.214 Description The issue is related to a mismatch between reconstructed freelist depth and cnt in the slub component of the Linux Kernel. The actual impact and attack plausibility have not yet been proven...

PT-2021-30281

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.156 Description The issue is related to a mismatch between reconstructed freelist depth and cnt in the slub component of the Linux Kernel. The actual impact and attack plausibility have not yet been proven...

PT-2021-26344

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.14.15 Description: The issue is related to a mismatch between reconstructed freelist depth and cnt in the slub allocator. The actual impact and attack plausibility have not yet been proven. Recommendations: F...

PT-2021-26269

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.214 Description: A potential security issue exists due to a mismatch between reconstructed freelist depth and count. The actual impact and attack plausibility have not yet been proven. Recommendations: For...

PT-2021-26286

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.156 Description: The issue is related to a mismatch between reconstructed freelist depth and cnt in the slub allocator. The actual impact and attack plausibility have not yet been proven. Recommendations: F...