UBUNTU-CVE-2023-52506

In the Linux kernel, the following vulnerability has been resolved: LoongArch: Set all reserved memblocks on Node0 at initialization After commit 61167ad5fecdea "mm: pass nid to reservebootmemregion" we get a panic if DEFERREDSTRUCTPAGEINIT is enabled: 0.000000 CPU 0 Unable to handle kernel pagin...

CVE-2023-52561 arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved

In the Linux kernel, the following vulnerability has been resolved: arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved Adding a reserved memory region for the framebuffer memory the splash memory region set up by the bootloader. It fixes a kernel panic arm-smmu: Unhandled...

CVE-2023-52561 arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved

In the Linux kernel, the following vulnerability has been resolved: arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved Adding a reserved memory region for the framebuffer memory the splash memory region set up by the bootloader. It fixes a kernel panic arm-smmu: Unhandled...

CVE-2023-52561 arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved

In the Linux kernel, the following vulnerability has been resolved: arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved Adding a reserved memory region for the framebuffer memory the splash memory region set up by the bootloader. It fixes a kernel panic arm-smmu: Unhandled...

CVE-2023-52506 LoongArch: Set all reserved memblocks on Node#0 at initialization

In the Linux kernel, the following vulnerability has been resolved: LoongArch: Set all reserved memblocks on Node0 at initialization After commit 61167ad5fecdea "mm: pass nid to reservebootmemregion" we get a panic if DEFERREDSTRUCTPAGEINIT is enabled: 0.000000 CPU 0 Unable to handle kernel pagin...

CVE-2020-40750

CVE-2020-40750 is referenced in IBM security bulletins for IBM WebSphere Application Server: cross-site scripting in the Admin Console. Affected products/versions include WebSphere Application Server 9.0, 8.5, 8.0, and 7.0. The IBM bulletin also notes additional references to related issues (e.g....

CVE-2023-2331486

Technical details for CVE-2023-2331486 are not publicly available in the provided documents. Monitor for updates.

CAN-2005-2475

The CVE-2005-2475 entry is confirmed through multiple connected documents: unzip contains a race condition in file permission handling during extraction that could let a local attacker modify permissions of extracted files. The issue is tied to the unzip utility and is addressed by the backported...

CAN-2004-0017

CVE-2004-0017 is for phpGroupWare and covers multiple SQL injection vulnerabilities in the calendar and infolog modules caused by insufficient sanitization/non-escaping of user-supplied data. Affected software is phpGroupWare (around version 0.9.14). Debian DSA-419-1 notes fixes in woody (0.9.14-...

CAN-2004-0008

CVE-2004-0005 to CVE-2004-0008 pertain to the gaim instant messaging client (GAIM). The connected documents describe multiple overflow-type flaws in GAIM, including: (1) overflows in Yahoo Messenger handling and MIME/email notification decoding, (2) buffer overflows when parsing Yahoo HTTP cookie...

CAN-2004-0178

Technical details for CVE-2004-0178 are not publicly provided in the supplied documents; no affected products, root cause, impact, or fixes are disclosed here. Monitor for updates from connected advisories.

CAN-2004-0232

CVE-2004-0232 is referenced in multiple security feeds as a vulnerability in Midnight Commander (mc). Connected documents describe the issue as involving buffer overflows, format string bugs, and insecure temporary file handling within mc, with CVE-2004-0226/0231/0232 grouped together in advisori...

CAN-2004-0458

CVE-2004-0458 affects mah-jong (server component) prior to version 1.6.2. A missing argument can trigger a NULL pointer dereference, allowing remote attackers to cause a denial of service (server crash). Public advisories reference Debian (DSA-503), Ubuntu, and CVE records; the mitigation is to u...

CAN-2004-0457

CVE-2004-0457 relates to a vulnerability in the MySQL mysqlhotcopy script that creates temporary files insecurely. Documentation notes that MySQL versions older than 4.0.21 are affected, enabling a local attacker to potentially perform symbolic link/file overwrite attacks via predictable temporar...

CAN-2004-0755

CVE-2004-0755 relates to Ruby CGI::Session's FileStore creating session files with insecure permissions, potentially allowing session information leakage. The JVN entry describes the issue, noting improper file permissions in CGI::Session FileStore. Fedo ra advisories mention a security fix and p...

CAN-2004-0689

CVE-2004-0689 is referenced across multiple security advisories in connected documents related to KDE/kdelibs and kdebase. The OpenVAS entries (Slackware SSA:2004-247-01; SLES9 KDE update; Gentoo GLSA 200408-13; FreeBSD ports; Debian DSA-539) indicate the affected components are KDE libraries (kd...

CAN-2004-0788

CVE-2004-0788 is confirmed in gdk-pixbuf/gtk+ stack. The ICO image loader decodes ICO headers with an integer overflow in DecodeHeader(), exposeable to remote attackers via crafted ICO files, potentially causing a denial of service (and, per some sources, possible arbitrary code execution in cont...

CAN-2004-0563

The CVE CAN-2004-0563 (CVE-2004-0563) relates to freenet6 where the tspc.conf file is world-readable, exposing potential sensitive data (e.g., username and password) to local users. Connected advisories confirm Debian’s DSA-555-1 and related Debian security notices describe a local information-le...

CAN-2004-0881

CVE-2004-0881 affects getmail: getmail 4.x before 4.2.0 and other versions before 3.2.5. When run as root, it allows local users to overwrite arbitrary files via a symlink attack on subdirectories of the maildir. Impact is local file writes. Remediation: upgrade to getmail 4.2.0 or newer (or 3.2....

CAN-2004-0833

CVE-2004-0833 affects sendmail on Debian GNU/Linux where the sasl-bin integration leaves a fixed username/password in the SASL database configuration. This misconfiguration could allow remote attackers to use Sendmail as an open mail relay and send spam messages. Public references include Debian ...