4246 matches found
PT-2021-25540
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v4.9 through v5.12.12 Description: A memory leak issue exists in the ip mc add1 src function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions v4.9 through...
PT-2021-29453
Name of the Vulnerable Software and Affected Versions Linux Kernel versions 4.9 through 5.10.45 Description A memory leak issue exists in the ip mc add1 src function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions 4.9 through 5.10.45,...
PT-2024-11246 · Linux +2 · Linux Kernel +2
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A memory leak vulnerability has been resolved in the Linux kernel. The issue is related to the ip mc add1 src function, where an unreferenced object is created, leading to a memory lea...
CVE-2021-3588
CVE-2021-3588 affects BlueZ (BlueZ Bluetooth stack). The issue is in cli_feat_read_cb() in src/gatt-database.c where bounds checks on offset are missing before indexing an array, potentially exposing memory contents. Multiple advisories indicate downstream risk and mitigation via upgrading BlueZ ...
CVE-2021-3588
The clifeatreadcb function in src/gatt-database.c does not perform bounds checks on the 'offset' variable before using it as an index into an array for reading...
CVE-2021-3588: Access of Memory Location After End of Buffer
The clifeatreadcb function in src/gatt-database.c does not perform bounds checks on the 'offset' variable before using it as an index into an array for reading...
PT-2021-4915
Name of the Vulnerable Software and Affected Versions BlueZ affected versions not specified Description The issue is related to the cli feat read cb function in the src/gatt-database.c file of the Bluetooth protocol stack for Linux. It does not perform bounds checks on the offset variable before...
CVE-2021-31855: Cleartext Storage of Sensitive Information
KDE Messagelib through 5.17.0 reveals cleartext of encrypted messages in some situations. Deleting an attachment of a decrypted encrypted message stored on a remote server e.g., an IMAP server causes KMail to upload the decrypted content of the message to the remote server. With a crafted message...
PT-2021-24871
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.37 Description: The issue is related to the async xor function, where the src offs is increased when dropping the destination page. The actual impact and attack plausibility have not yet been proven...
PT-2021-24776
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.12.4 Description The issue is related to the async xor function, where the src offs is increased when dropping the destination page. The actual impact and attack plausibility have not yet been proven...
PT-2021-28865
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.37 Description The issue is related to the async xor function, where the src offs is increased when dropping the destination page. The actual impact and attack plausibility have not yet been proven...
CVE-2021-20237
An uncontrolled resource consumption memory leak flaw was found in ZeroMQ's src/xpub.cpp in versions before 4.3.3. This flaw allows a remote unauthenticated attacker to send crafted PUB messages that consume excessive memory if the CURVE/ZAP authentication is disabled on the server, causing a...
CVE-2021-20237: Uncontrolled Resource Consumption
An uncontrolled resource consumption memory leak flaw was found in ZeroMQ's src/xpub.cpp in versions before 4.3.3. This flaw allows a remote unauthenticated attacker to send crafted PUB messages that consume excessive memory if the CURVE/ZAP authentication is disabled on the server, causing a...
Denial Of Service (DoS)
libsolv.so is vulnerable to denial of service. An attacker may crash the application via the Solver testcasereadPool pool, FILE fp, const char testcase, Queue job, char resultp, int resultflagsp function at src/testcase.c: line 2334...
CVE-2020-23856
Use-after-Free vulnerability in cflow 1.6 in the void callchar name, int line function at src/parser.c, which could cause a denial of service via the pointer variable caller-callee...
CVE-2020-23856: Use After Free
Use-after-Free vulnerability in cflow 1.6 in the void callchar name, int line function at src/parser.c, which could cause a denial of service via the pointer variable caller-callee...
CVE-2020-21833
A heap based buffer overflow vulnerability exits in GNU LibreDWG 0.10 via: read2004sectionclasses ../../src/decode.c:2440...
CVE-2020-21844
GNU LibreDWG 0.10 is affected by: memcpy-param-overlap. The impact is: execute arbitrary code remote. The component is: read2004sectionheader ../../src/decode.c:2580...
