Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from ext4 not properly handling reserved GDT blocks when resizing the filesystem, which could lead to null pointer...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that originates from the qgroup reserve of btrfs overflowing the qgroup limit, resulting in an insufficient number of bytes...

CVE-2022-31631

In PHP versions 8.0. before 8.0.27, 8.1. before 8.1.15, 8.2. before 8.2.2 when using PDO::quote function to quote user-supplied data for SQLite, supplying an overly long string may cause the driver to incorrectly quote the data, which may further lead to SQL injection vulnerabilities...

CVE-2022-31631

In PHP versions 8.0. before 8.0.27, 8.1. before 8.1.15, 8.2. before 8.2.2 when using PDO::quote function to quote user-supplied data for SQLite, supplying an overly long string may cause the driver to incorrectly quote the data, which may further lead to SQL injection vulnerabilities...

CVE-2022-3180

The CVE-2022-3180 issue affects the WordPress WPGateway plugin (versions up to and including 3.5). The root cause is an unauthenticated privilege-escalation flaw that lets an attacker insert a malicious administrator account, enabling full site control as described across multiple sources. Exploi...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: net: nexthop: All fields in the dumped nexthops structures need to be initialized. The struct nexthopgrp structure contains two reserved fields that are not initialized by nlaputnhgroup. These fields contain garbage values. This...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: nilfs2: Fixing inode number range checks The patch series “nilfs2: Fixing potential issues related to reserved inodes” addresses several issues. This series fixes a “use-after-free” issue reported by syzbot, which was caused b...

Azure Linux 3.0 Security Update: hyperv-daemons (CVE-2024-26947)

The version of hyperv-daemons installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-26947 advisory. - In the Linux kernel, the following vulnerability has been resolved: ARM: 9359/1: flush: check if the...

CVE-2021-27017

CVE-2021-27017 describes a deserialization vulnerability in Puppet Agent prior to 7.4.0 caused by using a module that accepts untrusted user data. The CVSS-based impact indicates high confidentiality, integrity, and availability with network access, high attack complexity, and high privileges req...

CVE-2021-27017

Utilization of a module presented a security risk by allowing the deserialization of untrusted/user supplied data. This is resolved in the Puppet Agent 7.4.0 release...

CVE-2022-26388

A use of hard-coded password vulnerability may allow authentication abuse.This issue affects ELI 380 Resting Electrocardiograph: Versions 2.6.0 and prior; ELI 280/BUR280/MLBUR 280 Resting Electrocardiograph: Versions 2.3.1 and prior; ELI 250c/BUR 250c Resting Electrocardiograph: Versions 2.1.2 an...

CVE-2023-6386

GitLab CE/EE is affected by CVE-2023-6386. A denial-of-service arises from allocation of resources without limits/throttling, impacting all versions 15.11 up to but not including 16.6.7, 16.7 up to but not including 16.7.5, and 16.8 up to but not including 16.8.2. Remediation is to upgrade to fix...

CVE-2024-33035

Memory corruption while calculating total metadata size when a very high reserved size is requested by gralloc clients...

CVE-2022-1736

CVE-2022-1736 affects Ubuntu systems where the gnome-control-center configuration allowed Remote Desktop Sharing to be enabled by default. The root cause is the gnome-control-center setup permitting RDP sharing to be active upon login, resulting in potential unauthorized remote access with high i...

CVE-2021-3978

CVE-2021-3978 affects Cloudflare CFRPKI’s octorpki. The root cause is that copying files with rsync uses the “-a” flag 0, causing binaries with the SUID bit to be copied as root. The service definition defaults to root, creating a potential local privilege escalation vector if a malicious TAL fil...

CVE-2018-9373

CVE-2018-9373 is a vulnerability in the Mediatek WLAN TDLS path (TdlsexRxFrameHandle) of the MTK WLAN driver. The issue is an out-of-bounds write caused by a missing bounds check, enabling remote escalation of privilege with no additional privileges and no user interaction. Documents consistently...

CVE-2024-27256

CVE-2024-27256 affects IBM MQ Container images: CD v3.0.0, v3.0.1, v3.1.0–3.1.3; LTS v2.0.0–2.0.22; and 2.4.0–2.4.8, 2.3.0–2.3.3, 2.2.0–2.2.2. Description: use of weaker than expected cryptographic algorithms could allow an attacker to decrypt highly sensitive information. Connected sources corro...

CVE-2019-15690

LibVNCServer 0.9.12 release and earlier contains heap buffer overflow vulnerability within the HandleCursorShape function in libvncclient/cursor.c. An attacker sends cursor shapes with specially crafted dimensions, which can result in remote code execution...

CVE-2018-9389

CVE-2018-9389 affects the Linux kernel IPv6 code path, specifically ip6_append_data in ip6_output.c. The vulnerability is described as a heap-based buffer overflow that could enable local code execution, resulting in privilege escalation with no additional privileges required and no user interact...

CVE-2018-9434

CVE-2018-9434 is evidenced by a Binder Parcel overlap flaw in Android: Parcel data can overlap binder-object metadata, causing kernel pointers to be inserted into attacker-controlled buffers during unmarshalling. This enables information disclosure and an ASLR bypass, potentially allowing local p...