27 matches found
PT-2026-97967
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the greybus audio component where the gb audio gb get topology function fetches a topology blob based on a size supplied by a module. The gbaudio tplg parse data...
httpd: mod_proxy_ajp: heap-based buffer over-read and memory disclosure in ajp_parse_data()
A flaw was found in the modproxyajp module of httpd. When processing AJP Apache JServ Protocol messages, the ajpparsedata function attempts to read data beyond the allocated buffer size, allowing an attacker or a malformed request to cause a heap-based buffer over-read. This issue potentially lea...
httpd: mod_proxy_ajp: heap-based buffer over-read and memory disclosure in ajp_parse_data()
A flaw was found in the modproxyajp module of httpd. When processing AJP Apache JServ Protocol messages, the ajpparsedata function attempts to read data beyond the allocated buffer size, allowing an attacker or a malformed request to cause a heap-based buffer over-read. This issue potentially lea...
MGASA-2026-0129 Updated apache packages fix security vulnerabilities
http2: double free and possible RCE on early reset. CVE-2026-23918 modrewrite elevation of privileges via apexpr. CVE-2026-24072 buffer overflow in modproxyajp via ajpmsgcheckheader. CVE-2026-28780 modmd unrestricted OCSP response. CVE-2026-29168 moddavlock indirect lock crash. CVE-2026-29169...
BIT-APACHE-2026-34059 Apache HTTP Server: mod_proxy_ajp: Heap Over-Read and memory disclosure in ajp_parse_data()
Buffer Over-read vulnerability in Apache HTTP Server. This issue affects Apache HTTP Server: through 2.4.66. Users are recommended to upgrade to version 2.4.67, which fixes the issue...
UBUNTU-CVE-2026-34059
Buffer Over-read vulnerability in Apache HTTP Server. This issue affects Apache HTTP Server: through 2.4.66. Users are recommended to upgrade to version 2.4.67, which fixes the issue...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988765)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988765 advisory. In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: wcd934x: Add missing ofnodeput in wcd934xcodecparsedata The devicenode pointer is...
Metabase security vulnerabilities
Metabase is an open source data analytics platform from the US-based Metabase, Inc. A security vulnerability exists in Metabase version 54.10, which stems from an inefficient regular expression complexity in the function parseDataUri...
Linux Kernel Security Vulnerabilities
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a reference count leak due to a missing ofnodeput in wcd934xcodecparsedata...
PT-2025-8167
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A issue in the Linux kernel has been resolved, specifically in the ASoC: codecs: wcd934x component. The problem arises from a missing of node put call in the wcd934x codec parse data...
PT-2023-35569
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow read, which was identified through an OSS-Fuzz report. The crash involves several functions, including iasec...
SUSE CVE-2010-4341
The pamparseindatav2 function in src/responder/pam/pamsrvcmd.c in the PAM responder in SSSD 1.5.0, 1.4.x, and 1.3 allows local users to cause a denial of service infinite loop, crash, and login prevention via a crafted packet...
SUSE CVE-2017-6440
The parsedatanode function in bplist.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service memory allocation error via a crafted plist file...
PT-2022-3915
Name of the Vulnerable Software and Affected Versions Linux kernel versions through 5.18.9 Description A type confusion bug in nft set elem init leading to a buffer overflow could be used by a local attacker to escalate privileges. The attacker can obtain root access, but must start with an...
PT-2022-30142
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.33 Description A potential issue exists due to a missing of node put in wcd934x codec parse data. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel version...
PT-2022-29523
Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.6 through v5.17.1 Description A potential issue exists due to a missing of node put in the wcd934x codec parse data function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linu...
PT-2022-29831
Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.6 through v5.16.18 Description A potential issue exists due to a missing of node put in the wcd934x codec parse data function. The actual impact and attack plausibility have not yet been proven. Recommendations For Lin...
PT-2021-28297
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-use-after-free READ crash occurred, involving the AK::StringImpl::create, AK::String::String, and AK::URLParser::parse data url functions...
PT-2021-28052
Name of the Vulnerable Software and Affected Versions No specific software or versions mentioned. Description The issue is related to a global buffer overflow read, as indicated by an OSS-Fuzz report. The crash state involves functions such as vte write debug, do action, and parse data. No...
PT-2021-27414
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type identified as Global-buffer-overflow READ 1. The crash state involves several functions: vte write debug, do action,...