Linux kernel post-release reuse vulnerability (CNVD-2021-39544)

The Linux kernel is a computer operating system kernel written in C and assembly language, compliant with the POSIX standard, and distributed under the GNU General Public License. A post-release reuse vulnerability exists in isotpsetsockopt in net/can/isotp.c in Linux kernel versions 5.11 through...

Adobe Acrobat/Reader post-release reuse vulnerability (CNVD-2021-49203)

Adobe Acrobat is a PDF editing software developed by Adobe.Adobe Reader also known as Acrobat Reader is a PDF file reader developed by Adobe. Adobe Acrobat/Reader has a post-release reuse vulnerability. An attacker can exploit this vulnerability to execute arbitrary code...

Adobe Acrobat/Reader post-release reuse vulnerability (CNVD-2021-49202)

Adobe Acrobat is a PDF editing software developed by Adobe.Adobe Reader also known as Acrobat Reader is a PDF file reader developed by Adobe. Adobe Acrobat/Reader has a post-release reuse vulnerability. An attacker can exploit this vulnerability to execute arbitrary code...

Linux kernel 资源管理错误漏洞

The Linux kernel is a computer operating system kernel written in C and assembly language, compliant with the POSIX standard, and distributed under the GNU General Public License. A post-release reuse vulnerability exists in the nfc socket in Linux Kernel versions prior to 5.12.2. A local attacke...

CVE-2021-21822

A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 10.1.3.37598. A specially crafted PDF document can trigger the reuse of previously free memory, which can lead to arbitrary code execution. An attacker needs to trick the user into opening a...

CVE-2021-21822

CVE-2021-21822 is a use-after-free in Foxit Software’s PDF Reader JavaScript engine (notably around Foxit Reader/PhantomPDF, versions including 10.1.3.37598). A specially crafted PDF can reuse freed memory, enabling arbitrary code execution when the user opens a malicious file or site with the br...

Updated ceph packages fix a security vulnerability

An authentication flaw was found in ceph. When the monitor handles CEPHXGETAUTHSESSIONKEY requests, it doesn't sanitize otherkeys, allowing key reuse. An attacker who can request a globalid can exploit the ability of any user to request a globalid previously associated with another user, as ceph...

openSUSE: Security Advisory for ceph (openSUSE-SU-2021:0672-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

OPENSUSE-SU-2021:0672-1 Security update for ceph

This update for ceph fixes the following issues: - ceph was updated to 15.2.11-83-g8a15f484c2: CVE-2021-20288: Fixed unauthorized globalid reuse bsc1183074. disk gets replaced with no rocksdb/wal bsc1184231. BlueStore handles huge4GB writes from RocksDB to BlueFS poorly, potentially causing data...

libxml2 资源管理错误漏洞

libxml2 is an open source library used to parse XML documents . It is written in C, and can be called for a variety of languages , such as C, C++, XSH. A resource management error vulnerability exists in libxml2 versions prior to 2.9.11. This vulnerability can be exploited to trigger post-release...

SUSE SLED15 / SLES15 Security Update : ceph (SUSE-SU-2021:1474-1)

This update for ceph fixes the following issues : ceph was updated to 15.2.11-83-g8a15f484c2 : - CVE-2021-20288: Fixed unauthorized globalid reuse bsc1183074. - disk gets replaced with no rocksdb/wal bsc1184231. - BlueStore handles huge4GB writes from RocksDB to BlueFS poorly, potentially causing...

SUSE SLES15 Security Update : ceph (SUSE-SU-2021:1473-1)

This update for ceph fixes the following issues : ceph was updated to 14.2.20-402-g6aa76c6815 : - CVE-2021-20288: Fixed unauthorized globalid reuse bsc1183074. - CVE-2020-25678: Do not add sensitive information in Ceph log files bsc1178905. - CVE-2020-27839: Use secure cookies to store JWT Token...

SUSE-SU-2021:1474-1 Security update for ceph

This update for ceph fixes the following issues: - ceph was updated to 15.2.11-83-g8a15f484c2: CVE-2021-20288: Fixed unauthorized globalid reuse bsc1183074. disk gets replaced with no rocksdb/wal bsc1184231. BlueStore handles huge4GB writes from RocksDB to BlueFS poorly, potentially causing data...

SUSE-SU-2021:1473-1 Security update for ceph

This update for ceph fixes the following issues: - ceph was updated to 14.2.20-402-g6aa76c6815: CVE-2021-20288: Fixed unauthorized globalid reuse bsc1183074. CVE-2020-25678: Do not add sensitive information in Ceph log files bsc1178905. CVE-2020-27839: Use secure cookies to store JWT Token...

SUSE-SU-2021:1472-1 Security update for ceph, deepsea

This update for ceph, deepsea fixes the following issues: - ceph was updated to 14.2.20-402-g6aa76c6815: CVE-2021-20288: Fixed unauthorized globalid reuse bsc1183074. CVE-2020-25678: Do not add sensitive information in Ceph log files bsc1178905. CVE-2020-27839: Use secure cookies to store JWT Tok...

Google Android 资源管理错误漏洞

Google Android is a Linux-based open source operating system from the Google Open Handheld Consortium Google. Google Android suffers from an elevation of privilege vulnerability. The vulnerability stems from a memory corruption in the memory management driver due to reuse after release. An attack...

Google Android 资源管理错误漏洞

Google Android is a Linux-based open source operating system of the Google Open Handheld Consortium Google. Google Android suffers from an elevation of privilege vulnerability. The vulnerability stems from a memory corruption in the memory management driver due to reuse after release. An attacker...

The vulnerability of the Johnson Controls Metasys building automation and control system, related to the repeated use of a cryptographic pair in encryption, allows a intruder to compromise the confidentiality and integrity of the protected information.

The vulnerability of the Johnson Controls Metasys building automation system lies in the repeated use of a cryptographic pair in encryption processes. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and integrity of the protected information...

GStreamer Reuse After Release Vulnerability

GStreamer is an open source multimedia framework library . Use it to build a range of media processing modules , including from simple ogg playback functions to complex audio mixing and video non-linear editing processing . A post-release reuse vulnerability exists in versions of GStreamer prior ...

DEBIAN-CVE-2021-20288

An authentication flaw was found in ceph in versions before 14.2.20. When the monitor handles CEPHXGETAUTHSESSIONKEY requests, it doesn't sanitize otherkeys, allowing key reuse. An attacker who can request a globalid can exploit the ability of any user to request a globalid previously associated...