io.jenkins.plugins:metrics-aggregation-shaded-pmd (6.21.0-3) potentially affected by CVE-2018-1000862 via org.jenkins-ci.main:jenkins-core (2.150.3)

org.jenkins-ci.main:jenkins-core MAVEN version 2.150.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - io.jenkins.plugins:metrics-aggregation-shaded-pmd 6.21.0-3 Source cves: CVE-2018-1000862 Sour...

io.jenkins.plugins:metrics-aggregation-shaded-pmd (6.21.0-3) potentially affected by CVE-2018-1000864 via org.jenkins-ci.main:jenkins-core (2.150.3)

org.jenkins-ci.main:jenkins-core MAVEN version 2.150.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - io.jenkins.plugins:metrics-aggregation-shaded-pmd 6.21.0-3 Source cves: CVE-2018-1000864 Sour...

io.jenkins.plugins:metrics-aggregation-shaded-pmd (6.21.0-3) potentially affected by CVE-2018-1000864 via org.jenkins-ci.main:jenkins-core (2.150.3)

org.jenkins-ci.main:jenkins-core MAVEN version 2.150.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - io.jenkins.plugins:metrics-aggregation-shaded-pmd 6.21.0-3 Source cves: CVE-2018-1000864 Sour...

io.jenkins.plugins:metrics-aggregation-shaded-pmd (6.21.0-3) potentially affected by CVE-2018-1000863 via org.jenkins-ci.main:jenkins-core (2.150.3)

org.jenkins-ci.main:jenkins-core MAVEN version 2.150.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - io.jenkins.plugins:metrics-aggregation-shaded-pmd 6.21.0-3 Source cves: CVE-2018-1000863 Sour...

io.jenkins.plugins:metrics-aggregation-shaded-pmd (6.21.0-3) potentially affected by CVE-2018-1000863 via org.jenkins-ci.main:jenkins-core (2.150.3)

org.jenkins-ci.main:jenkins-core MAVEN version 2.150.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - io.jenkins.plugins:metrics-aggregation-shaded-pmd 6.21.0-3 Source cves: CVE-2018-1000863 Sour...

com.google.code.maven-svn-wagon:maven-svn-wagon (>=1.1, <=1.4), jp.pizzafactory.maven:s3-maven-wagon (3.3) +42 more potentially affected by CVE-2017-1000487 via org.codehaus.plexus:plexus-utils (1.4.2)

org.codehaus.plexus:plexus-utils MAVEN version 1.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - com.google.code.maven-svn-wagon:maven-svn-wagon =1.1, =3.2, =1.1.1, =1.0-alpha-2, =1.0-beta-3,...

io.jenkins.plugins:metrics-aggregation-shaded-pmd (6.21.0-3) potentially affected by CVE-2018-1000861 via org.jenkins-ci.main:jenkins-core (2.150.3)

org.jenkins-ci.main:jenkins-core MAVEN version 2.150.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - io.jenkins.plugins:metrics-aggregation-shaded-pmd 6.21.0-3 Source cves: CVE-2018-1000861 Sour...

io.jenkins.plugins:metrics-aggregation-shaded-pmd (6.21.0-3) potentially affected by CVE-2018-1000861 via org.jenkins-ci.main:jenkins-core (2.150.3)

org.jenkins-ci.main:jenkins-core MAVEN version 2.150.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - io.jenkins.plugins:metrics-aggregation-shaded-pmd 6.21.0-3 Source cves: CVE-2018-1000861 Sour...

Jenkins Report Info XML External Entity Processing Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Jenkins Report Info. Authentication is required to exploit this vulnerability. The specific flaw exists within the PMD class. Due to the improper restriction of XML External Entity XXE...

UVI-2021-1002193 mm: filemap: check if THP has hwpoisoned subpage for PMD page fault

mm: filemap: check if THP has hwpoisoned subpage for PMD page fault This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15 by commit...

GSD-2021-1002193 mm: filemap: check if THP has hwpoisoned subpage for PMD page fault

mm: filemap: check if THP has hwpoisoned subpage for PMD page fault This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15 by commit...

GSD-2021-1002124 mm: filemap: check if THP has hwpoisoned subpage for PMD page fault

mm: filemap: check if THP has hwpoisoned subpage for PMD page fault This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.16 by commit...

UVI-2021-1002124 mm: filemap: check if THP has hwpoisoned subpage for PMD page fault

mm: filemap: check if THP has hwpoisoned subpage for PMD page fault This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.16 by commit...

PT-2021-30589

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.16 Description The issue is related to a potential security vulnerability in the Linux Kernel, specifically with the filemap and THP Transparent Huge Pages handling for PMD Page Middle Directory page faults...

PT-2021-30658

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 4.8 through 5.14 Description The issue is related to a problem in the filemap where it fails to check if a Transparent Huge Page THP has a hwpoisoned subpage for a Page Middle Directory PMD page fault. The actual impact a...

PT-2021-26663

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 4.8 through 5.14 Description: The issue is related to a problem in the filemap where it fails to check if a Transparent Huge Page THP has a hwpoisoned subpage for a Page Middle Directory PMD page fault. The actual impact...

PT-2021-26594

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.16 Description The issue is related to a potential security vulnerability in the Linux Kernel, specifically with the filemap and THP Transparent Huge Pages handling for PMD Page Middle Directory page faults...

An issue was discovered in __split_huge_pmd in mm/huge_memory.c in the Linux kernel before 5.7.5. The copy-on-write implementation can grant unintended write access because of a race condition in a THP mapcount check aka CID-c444eb564fb1.

...

Linux Kernel Heap Buffer Overflow DoS

The vulnerability of the splithugepmd function in the Linux operating system’s kernel is related to errors during multi-threaded tasks race conditions. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Linux kernel code issue vulnerability (CNVD-2020-68543)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in versions of Linux kernel prior to 5.7.5, which stems from a contention condition in split huge pmd in mm huge memoryc, where the copy-on-writ...