UBUNTU-CVE-2022-26359

IOMMU: RMRR VT-d and unity map AMD-Vi handling issues This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. Certain PCI devices in a system might be assigned Reserved Memory Regions specified via Reserved Memory Region...

UBUNTU-CVE-2022-26358

IOMMU: RMRR VT-d and unity map AMD-Vi handling issues This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. Certain PCI devices in a system might be assigned Reserved Memory Regions specified via Reserved Memory Region...

UBUNTU-CVE-2022-26361

IOMMU: RMRR VT-d and unity map AMD-Vi handling issues This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. Certain PCI devices in a system might be assigned Reserved Memory Regions specified via Reserved Memory Region...

UBUNTU-CVE-2022-26360

IOMMU: RMRR VT-d and unity map AMD-Vi handling issues This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. Certain PCI devices in a system might be assigned Reserved Memory Regions specified via Reserved Memory Region...

CVE-2022-26361

CVE-2022-26361 affects the Xen hypervisor via IOMMU handling (RMRR VT-d and Unity Mapping AMD-Vi). The issue arises when mappings for Reserved Memory Regions or Unity Mapping ranges must remain accessible and are violated, enabling unpredictable DMA/interrupt behavior and potential memory corrupt...

Xen 安全漏洞

Xen is an open source virtual machine monitor product from the University of Cambridge, UK. The product enables different and incompatible operating systems to run on the same computer and supports runtime migration to ensure uptime and avoid downtime. Xen suffers from a security vulnerability th...

CVE-2022-26360

CVE-2022-26360 affects Xen with IOMMU: RMRR (VT-d) and Unity Mapping (AMD-Vi). The issue arises when mappings for Reserved Memory Regions or Unity Mapping ranges remain accessible after a device activation, allowing subsequent DMA/interrupts to cause IOMMU faults or memory corruption. The connect...

PT-2022-17810 · Suse · Suse

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue concerns IOMMU: RMRR VT-d and unity map AMD-Vi handling problems. Certain PCI devices in a system might be assigned Reserved Memory Regions fo...

Xen 安全漏洞

Xen is an open source virtual machine monitor product from the University of Cambridge, UK. The product enables different and incompatible operating systems to run on the same computer and supports runtime migration to ensure uptime and avoid downtime. Xen suffers from a security vulnerability th...

PT-2022-17813 · Suse · Suse

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue relates to IOMMU: RMRR VT-d and unity map AMD-Vi handling issues. Certain PCI devices in a system might be assigned Reserved Memory Regions fo...

Xen 安全漏洞

Xen is an open source virtual machine monitor product from the University of Cambridge, UK. The product enables different and incompatible operating systems to run on the same computer and supports runtime migration to ensure uptime and avoid downtime. Xen suffers from a security vulnerability th...

Denial Of Service (DoS)

RESERVED This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided...

CVE-2010-0474

CVE-2010-0474 is listed as part of Debian WebKit vulnerabilities in DSA-2188-1. The affected package is webkit (GTK+ WebKit), with multiple CVEs including CVE-2010-0474. Debian states these problems were fixed in the stable distribution (squeeze) with version 1.2.7-0+squeeze1 (and 1.2.7-1 for whe...

CVE-2021-41741

CVE-2021-41741 is addressed in the openSUSE/OpenSSL Nextcloud updates. The issue is described as high memory usage when generating a preview for a broken image in Nextcloud Server. Affected software is Nextcloud Server (self-hosted cloud platform); the root cause is related to image preview handl...

CVE-2021-44597

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-43857. Reason: This candidate is a reservation duplicate of CVE-2021-43857. Notes: All CVE users should reference CVE-2021-43857 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

Denial Of Service (DoS)

RESERVED This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided...

CVE-2021-36814

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2021. Notes: none...

CVE-2016-3050

IBM OpenPages GRC Platform exposes sensitive information to authenticated users via error logs (CVE-2016-3050). Affected: OpenPages versions 7.1–7.3. Root cause: information disclosure through logging. Base CVSS 4.3. Remediation: apply fixes per version—7.3Fix Pack 1 (7.3.0.1) or later; 7.2Fix Pa...

CVE-2019-4232

The IBM Security Bulletin for CVE-2019-4232 discloses a vulnerability in IBM UrbanCode Deploy where an authenticated user could retrieve sensitive values from the REST API, enabling potential follow-on attacks. Affected products/versions include IBM UrbanCode Deploy 7.0–7.0.2.2 and 6.2–6.2.7.4. R...

CVE-2021-33517

CVE-2021-33517 and CVE-2021-36090 are vulnerabilities in Apache Commons Compress that affect IBM WebSphere Liberty (and WebSphere Liberty-based bundles) used in IBM Cloud Pak for Applications and IBM WebSphere Application Server families. The issues cause denial of service through memory-related ...