January 9, 2024—KB5034129 (OS Build 20348.2227)

None None...

January 9, 2024—KB5034127 (OS Build 17763.5329) - EXPIRED

None None...

CVE-2023-33294

An issue was discovered in KaiOS 3.0 before 3.1. The /system/bin/tctwebserver binary exposes a local web server that responds to GET and POST requests on port 2929. The server accepts arbitrary Bash commands and executes them as root. Because it is not permission or context restricted and returns...

CVE-2023-30438 IBM PowerVM gain access

An internally discovered vulnerability in PowerVM on IBM Power9 and Power10 systems could allow an attacker with privileged user access to a logical partition to perform an undetected violation of the isolation between logical partitions which could lead to data leakage or the execution of...

SUSE CVE-2016-5011

The parsedosextended function in partitions/dos.c in the libblkid library in util-linux allows physically proximate attackers to cause a denial of service memory consumption via a crafted MSDOS partition table with an extended partition boot record at zero offset...

SUSE CVE-2021-33285

In NTFS-3G versions 2021.8.22, when a specially crafted NTFS attribute is supplied to the function ntfsgetattributevalue, a heap buffer overflow can occur allowing for memory disclosure or denial of service. The vulnerability is caused by an out-of-bound buffer access which can be triggered by...

PT-2022-16034 · Typo3 · Typo3

Name of the Vulnerable Software and Affected Versions: TYPO3 versions prior to 8.7.49 TYPO3 versions prior to 9.5.38 TYPO3 versions prior to 10.4.33 TYPO3 versions prior to 11.5.20 TYPO3 versions prior to 12.1.1 Description: The issue concerns Improper Authentication in TYPO3, an open source PHP...

GSD-2022-1006640 mtd: core: add missing of_node_get() in dynamic partitions code

mtd: core: add missing ofnodeget in dynamic partitions code This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.7 by commit...

[SECURITY] Fedora 37 Update: android-tools-33.0.3p1-1.fc37

The Android Debug Bridge ADB is used to: - keep track of all Android devices and emulators instances connected to or running on a given host developer machine - implement various control commands e.g. "adb shell", "adb pull", etc. for the benefit of clients command-line users, or helper programs...

[SECURITY] Fedora 35 Update: android-tools-33.0.3p1-2.fc35

The Android Debug Bridge ADB is used to: - keep track of all Android devices and emulators instances connected to or running on a given host developer machine - implement various control commands e.g. "adb shell", "adb pull", etc. for the benefit of clients command-line users, or helper programs...

[SECURITY] Fedora 36 Update: android-tools-33.0.3p1-1.fc36

The Android Debug Bridge ADB is used to: - keep track of all Android devices and emulators instances connected to or running on a given host developer machine - implement various control commands e.g. "adb shell", "adb pull", etc. for the benefit of clients command-line users, or helper programs...

PT-2022-34895 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.7 Description: The issue is related to a missing of node get in dynamic partitions code in the Linux Kernel core. The actual impact and attack plausibility have not yet been proven. Recommendations: For Lin...

GSD-2022-1006024 mtd: partitions: Fix refcount leak in parse_redboot_of

mtd: partitions: Fix refcount leak in parseredbootof This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.211 by commit...

GSD-2022-1005863 mtd: partitions: Fix refcount leak in parse_redboot_of

mtd: partitions: Fix refcount leak in parseredbootof This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.137 by commit...

PT-2022-34121 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.137 Description: The issue is related to a refcount leak in the parse redboot of function in the mtd partitions. The actual impact and attack plausibility have not yet been proven. Recommendations: For Lin...

PT-2022-33868 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.61 Description: The issue is related to a refcount leak in the parse redboot of function in the mtd partitions. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linu...

GSD-2022-1005267 mtd: partitions: Fix refcount leak in parse_redboot_of

mtd: partitions: Fix refcount leak in parseredbootof This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

PT-2022-33522 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.2 Description: A refcount leak was discovered in the bcm4908 partitions fw offset function of the Linux Kernel. The issue was introduced in version v5.13 and is fixed in version v5.19.2. The actual impact...

PT-2024-8446 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the exfat component of the Linux kernel, where an overflow occurs when using the int type for the sector index in large capacity partitions. This can happen whe...

GSD-2022-1004839 irqchip/gic-v3: Fix refcount leak in gic_populate_ppi_partitions

irqchip/gic-v3: Fix refcount leak in gicpopulateppipartitions This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.249 by commit...