GHSA-X23Q-4J9J-9CXW Ops CLI Deserialization of Untrusted Data vulnerability

Ops CLI version 2.0.4 and earlier is affected by a Deserialization of Untrusted Data vulnerability to achieve arbitrary code execution when the checkoutrepo function is called on a maliciously crafted file. An attacker can leverage this to execute arbitrary code on the victim machine...

Ops CLI Deserialization of Untrusted Data vulnerability

Ops CLI version 2.0.4 and earlier is affected by a Deserialization of Untrusted Data vulnerability to achieve arbitrary code execution when the checkoutrepo function is called on a maliciously crafted file. An attacker can leverage this to execute arbitrary code on the victim machine...

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service. The vulnerability exists because the tf.rawops.DeleteSessionTensor in sessionops.cc does not properly validate the input arguments, allowing an attacker to crash the application through the CHECK failure...

CVE-2022-29213 Incomplete validation in signal ops leads to crashes in TensorFlow

TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, the tf.compat.v1.signal.rfft2d and tf.compat.v1.signal.rfft3d lack input validation and under certain condition can result in crashes due to CHECK-failures. Versions 2.9.0, 2.8.1, 2.7.2,...

Cloud Foundry vulnerable to Cross-Site Request Forgery

Multiple cross-site request forgery CSRF vulnerabilities in Pivotal Cloud Foundry PCF before 242; UAA 2.x before 2.7.4.7, 3.x before 3.3.0.5, and 3.4.x before 3.4.4; UAA BOSH before 11.5 and 12.x before 12.5; Elastic Runtime before 1.6.40, 1.7.x before 1.7.21, and 1.8.x before 1.8.2; and Ops...

kernel: crypto: ccp - fix resource leaks in ccp_run_aes_gcm_cmd()

A flaw was found in the Linux kernel. A memory leak in the ccp-ops crypto driver can allow attackers to cause a denial of service. This vulnerability is similar with the older CVE-2019-18808. The highest threat from this vulnerability is to system availability...

PT-2022-30204

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.32 Description The issue is related to the use of try get ops in tpm-space.c. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v5.15.32,...

PT-2022-29900

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.18 Description The issue is related to the use of try get ops in tpm-space.c. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v5.16.18,...

PT-2022-30555

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.188 Description The issue is related to the use of try get ops in tpm-space.c. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v5.4.188,...

PT-2022-30417

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.109 Description The issue is related to the use of try get ops in tpm-space.c. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v5.10.10...

PT-2022-30690

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.276 Description The issue is related to the mmc host, where an error should be returned when the -enable sdio irq ops is missing. The actual impact and attack plausibility have not yet been proven...

PT-2022-30588

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to 4.19.238 Description The issue is related to a delay in the xen hvm init time ops function when kdump is booting on vcpu=32. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2022-30464

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to 5.4.189 Description The issue is related to a delay in the xen hvm init time ops function when kdump is booting on vcpu=32. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2022-29647

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to 5.16.20 Description The issue is related to a delay in the xen hvm init time ops function when kdump is booting on vcpu=32. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2022-29974

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to 5.15.34 Description The issue is related to a delay in the xen hvm init time ops function when kdump is booting on vcpu=32. The actual impact and attack plausibility have not yet been proven. Recommendations For...

Oracle Enterprise Manager Ops Center (Apr 2022 CPU)

The 12.4.0.0 versions of Enterprise Manager Ops Center installed on the remote host are affected by multiple vulnerabilities as referenced in the April 2022 CPU advisory. - Vulnerability in the Oracle Secure Global Desktop product of Oracle Virtualization component: Web Server Apache HTTP Server...

Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2022-1376)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

VMware Response to Spring Framework Remote Code Execution Vulnerability (CVE-2022-22965)

IMPORTANT See the Notes section if prior to April 6, 3 PM PST you have updated TAS or Ops Manager or you have applied workarounds to TAS, Ops Manager or TKGi. 1. Impacted Products VMware Tanzu Application Service for VMs TAS VMware Tanzu Operations Manager Ops Manager VMware Tanzu Kubernetes Grid...

VMware Response to Spring Framework Remote Code Execution Vulnerability (CVE-2022-22965)

IMPORTANT See the Notes section if prior to April 6, 3 PM PST you have updated TAS or Ops Manager or you have applied workarounds to TAS, Ops Manager or TKGi. 1. Impacted Products VMware Tanzu Application Service for VMs TAS VMware Tanzu Operations Manager Ops Manager VMware Tanzu Kubernetes Grid...

GSD-2022-1000943 ASoC: ops: Shift tested values in snd_soc_put_volsw() by +min

ASoC: ops: Shift tested values in sndsocputvolsw by +min This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.305 by commit...