DEBIAN-CVE-2020-29368

An issue was discovered in splithugepmd in mm/hugememory.c in the Linux kernel before 5.7.5. The copy-on-write implementation can grant unintended write access because of a race condition in a THP mapcount check, aka CID-c444eb564fb1...

UBUNTU-CVE-2020-29368

An issue was discovered in splithugepmd in mm/hugememory.c in the Linux kernel before 5.7.5. The copy-on-write implementation can grant unintended write access because of a race condition in a THP mapcount check, aka CID-c444eb564fb1...

Linux Kernel Race Condition Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in versions of Linux kernel prior to 5.7.5, which stems from a contention condition in split huge pmd in mm huge memoryc, where the copy-on-writ...

SUSE SLED15 / SLES15 Security Update : dpdk (SUSE-SU-2020:0439-1)

This update for dpdk to version 18.11.3 fixes the following issues : Security issue fixed : CVE-2019-14818: Fixed a denial of service by a malicious container via the vhost-user socket bsc1156146. Non-security issue fixed: Added current version to the PMD driver directory to avoid loading previou...

Debian: Security Advisory (DSA-4567-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 4567-1] dpdk security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4567-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff November 12, 2019 https://www.debian.org/security/faq -...

NULL Pointer Dereference

kernel-rt is vulnerable to NULL pointer dereference. NUMA systems does not properly determine whether a Page Middle Directory PMD entry is a transparent huge-table entry allowing local attackers to cause a a system crash through pmdnoneortranshugeorclearbad function in include/asm-generic/pgtable...

XML External Entity (XXE)

PMD is vulnerable to XML external entity XXE attacks. XML external entities are being parsed in ruleset files, allowing an attacker who is able to tamper the ruleset file to perform XXE attacks to forge requests or cause a denial of service condition...

CVE-2019-7722

PMD 5.8.1 and earlier processes XML external entities in ruleset files it parses as part of the analysis process, allowing attackers tampering it either by direct modification or MITM attacks when using remote rulesets to perform information disclosure, denial of service, or request forgery...

CVE-2019-7722

PMD 5.8.1 and earlier processes XML external entities in ruleset files it parses as part of the analysis process, allowing attackers tampering it either by direct modification or MITM attacks when using remote rulesets to perform information disclosure, denial of service, or request forgery...

CVE-2019-7722

PMD 5.8.1 and earlier processes XML external entities in ruleset files it parses as part of the analysis process, allowing attackers tampering it either by direct modification or MITM attacks when using remote rulesets to perform information disclosure, denial of service, or request forgery...

CVE-2019-7722

PMD 5.8.1 and earlier is vulnerable to XML External Entity (XXE) processing in ruleset files parsed during analysis. The underlying issue is the handling of XML external entities, which attackers can exploit by tampering with the ruleset (direct modification or via MITM when remote rulesets are u...

CVE-2019-7722

PMD 5.8.1 and earlier processes XML external entities in ruleset files it parses as part of the analysis process, allowing attackers tampering it either by direct modification or MITM attacks when using remote rulesets to perform information disclosure, denial of service, or request forgery...

com.alibaba.p3c.idea:p3c-common (1.0.0), com.alibaba.p3c:p3c-pmd (>=1.0.0, <=1.3.6) +65 more potentially affected by CVE-2019-7722 via net.sourceforge.pmd:pmd-core (>=5.2.0, <=5.8.1)

net.sourceforge.pmd:pmd-core MAVEN version =5.2.0, =1.0.0, =0.1.0, =0.1.0, =2.14.1, =0.1.0, =1.7.2, =1.4.2, =1.0.0, =1.2.1, =1.2.1, =1.0.0, =1.0.1 and more Source cves: CVE-2019-7722 Source advisory: MEND:CVE-2019-7722...

CVE-2019-7722: Improper Restriction of XML External Entity Reference

PMD 5.8.1 and earlier processes XML external entities in ruleset files it parses as part of the analysis process, allowing attackers tampering it either by direct modification or MITM attacks when using remote rulesets to perform information disclosure, denial of service, or request forgery...

PT-2019-18724

Name of the Vulnerable Software and Affected Versions PMD versions 5.8.1 and earlier Description The issue allows attackers to tamper with XML external entities in ruleset files, potentially leading to information disclosure, denial of service, or request forgery attacks. This can be achieved...

ASLR Bypass

kernel-rt is vulnerable to ASLR bypass attacks. The vulnerability exists as the vdsoaddr function in arch/x86/vdso/vma.c in the Linux kernel through 3.18.2 does not properly choose memory locations for the vDSO area, which makes it easier for local users to bypass the ASLR protection mechanism by...

io.jenkins.plugins:metrics-aggregation-shaded-pmd (6.21.0-3) potentially affected by CVE-2018-1000863 via org.jenkins-ci.main:jenkins-core (2.150.3)

org.jenkins-ci.main:jenkins-core MAVEN version 2.150.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - io.jenkins.plugins:metrics-aggregation-shaded-pmd 6.21.0-3 Source cves: CVE-2018-1000863 Sour...

io.jenkins.plugins:metrics-aggregation-shaded-pmd (6.21.0-3) potentially affected by CVE-2018-1000864 via org.jenkins-ci.main:jenkins-core (2.150.3)

org.jenkins-ci.main:jenkins-core MAVEN version 2.150.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - io.jenkins.plugins:metrics-aggregation-shaded-pmd 6.21.0-3 Source cves: CVE-2018-1000864 Sour...

io.jenkins.plugins:metrics-aggregation-shaded-pmd (6.21.0-3) potentially affected by CVE-2018-1000861 via org.jenkins-ci.main:jenkins-core (2.150.3)

org.jenkins-ci.main:jenkins-core MAVEN version 2.150.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - io.jenkins.plugins:metrics-aggregation-shaded-pmd 6.21.0-3 Source cves: CVE-2018-1000861 Sour...