9871 matches found
Important: dpdk security and bug fix update
The dpdk packages provide the Data Plane Development Kit, which is a set of libraries and drivers for fast packet processing in the user space. Security Fixes: dpdk: DoS when a Vhost header crosses more than two descriptors and exhausts all mbufs CVE-2022-2132 DPDK: out-of-bounds read/write in...
GSD-2022-1007435 f2fs: fix to do sanity check on destination blkaddr during recovery
f2fs: fix to do sanity check on destination blkaddr during recovery This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.220 by commit...
GSD-2022-1007313 f2fs: fix to do sanity check on destination blkaddr during recovery
f2fs: fix to do sanity check on destination blkaddr during recovery This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.150 by commit...
GSD-2022-1007127 f2fs: fix to do sanity check on destination blkaddr during recovery
f2fs: fix to do sanity check on destination blkaddr during recovery This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.75 by commit...
GSD-2022-1006890 f2fs: fix to do sanity check on destination blkaddr during recovery
f2fs: fix to do sanity check on destination blkaddr during recovery This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...
PT-2022-35145 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.3 Description: The issue concerns a fix for a sanity check on destination blkaddr during recovery in the f2fs component. The actual impact and attack plausibility have not yet been proven. Recommendations:...
EulerOS 2.0 SP9 : dpdk (EulerOS-SA-2022-2726)
According to the versions of the dpdk packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A permissive list of allowed inputs flaw was found in DPDK. This issue allows a remote attacker to cause a denial of service triggered by sending ...
PT-2022-35382 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.75 Description: The issue concerns a lack of sanity check on destination blkaddr during recovery in the f2fs component. This could potentially lead to security vulnerabilities, although the actual impact a...
PT-2022-35568 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.150 Description: The issue concerns a fix for a sanity check on destination blkaddr during recovery in the f2fs component. The actual impact and attack plausibility have not yet been proven. Recommendation...
EulerOS 2.0 SP9 : dpdk (EulerOS-SA-2022-2761)
According to the versions of the dpdk packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A permissive list of allowed inputs flaw was found in DPDK. This issue allows a remote attacker to cause a denial of service triggered by sending ...
Omron NJ/NX-series Machine Automation Controllers
1. EXECUTIVE SUMMARY CVSS v3 8.3 ATTENTION: Exploitable remotely, public exploits are available Vendor: Omron Equipment: NJ/NX-series Machine Automation Controllers Vulnerability: Active Debug Code 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to obtain...
PT-2022-27249 · Huawei · Huawei Recovery
Name of the Vulnerable Software and Affected Versions: Huawei Recovery affected versions not specified Description: The issue is related to a race condition vulnerability in SD upgrade mode, which may affect data confidentiality. There is no information provided about the estimated number of...
Low: Red Hat Security Advisory: container-tools:rhel8 security, bug fix, and enhancement update
An update for the container-tools:rhel8 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
kernel: ath11k: fix the warning of dev_wake in mhi_pm_disable_transition()
In the Linux kernel, the following vulnerability has been resolved: ath11k: fix the warning of devwake in mhipmdisabletransition When test device recovery with below command, it has warning in message as below. echo assert /sys/kernel/debug/ath11k/wcn6855\ hw2.0/simulatefwcrash echo assert...
Microsoft Windows BitLocker 安全漏洞
Microsoft Windows BitLocker is a BitLocker by Microsoft Corporation USA Ensure secure backup of recovery keys before activating protection. Microsoft Windows BitLocker has a security vulnerability. The following products and editions are affected: Windows 10 Version 1809 for ARM64-based...
PT-2022-24913 · Microsoft · Azure Rtos Filex
Name of the Vulnerable Software and Affected Versions: Azure RTOS FileX versions prior to 6.2.0 Description: The Fault Tolerant feature of Azure RTOS FileX includes integer under and overflows which may be exploited to achieve buffer overflow and modify memory contents. When a valid log file with...
CVE-2022-39343 Azure RTOS FileX vulnerable to Buffer Offerflow
Azure RTOS FileX is a FAT-compatible file system that’s fully integrated with Azure RTOS ThreadX. In versions before 6.2.0, the Fault Tolerant feature of Azure RTOS FileX includes integer under and overflows which may be exploited to achieve buffer overflow and modify memory contents. When a vali...
Some cases maybe cause the bids unable to get their funds back.
Lines of code Vulnerability details Impact All of the following there cases maybe cause the bids unable to get their funds back. Details case1: If sellerwho is a bad man does not reveal in the reveal period, then all the bids will be unable to get their funds back. case2: If sellerwho is a bad ma...
PT-2022-5528 · Cisco · Cisco Email Security Appliance +1
Name of the Vulnerable Software and Affected Versions: Cisco Email Security Appliance ESA affected versions not specified Description: A vulnerability in Cisco AsyncOS Software for Cisco Email Security Appliance ESA could allow an unauthenticated remote attacker to cause a denial of service DoS...