PT-2022-34906 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.7 Description: The issue is related to the mm/huge memory component, where the swp entry t is clobbered during the THP split process. This problem was introduced in version v5.19 and is fixed in version...

Revenue stream split can be bypassed

Lines of code Vulnerability details The Spigot.claimRevenue function allows anyone to claim revenue tokens from the spigot push and pull payments and escrows them for the owner to withdraw later. The revenue is automatically split between the treasury and escrow according to the settings in...

PT-2022-6166 · Cisco +6 · Cisco +6

Name of the Vulnerable Software and Affected Versions: Linux affected versions not specified Description: The issue is related to the Linux network backend, specifically the netback driver, where a guest can trigger a NIC interface reset, abort, or crash by sending certain kinds of packets. This ...

Double Free

Overview Affected versions of this package are vulnerable to Double Free in the split function in contrib/shpsort.c. This could allow information exposure or code execution via manipulation of malloc. Remediation Upgrade shapelib to version 1.6.0 or higher. References - GitHub Commit - GitHub Iss...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling. Go Vulnerability Report: via the Reader.Read function. An attacker can cause excessive memory allocation and trigger resource exhaustion or application panics by supplying a speciall...

Exploit for CVE-2022-21350

It is an offensive tool for Java-based web applications. The rep...

DEBIAN-CVE-2022-3049

Use after free in SplitScreen in Google Chrome on Chrome OS, Lacros prior to 105.0.5195.52 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via a crafted HTML page...

PT-2024-8455

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The vulnerability is related to the Linux kernel's enetc driver, which allows for the configuration of TSN features through a mix of command BD ring messages and port registers. However,...

splitRecipient resulting voting power tend to be overstated

Lines of code Vulnerability details When burn computes the contributor's share via getFinalContribution and contributor = splitRecipient it transfers the whole share to the splitRecipient in advance, even when not all the voting power were allocated. I.e. some contributors might not burn and the...

split-airport.hr Cross Site Scripting vulnerability OBB-2889560

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Google Chrome SplitScreen Disclosure

The vulnerability of Google Chrome’s SplitScreen display mode is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to disclose protected information...

Google Chrome competition condition issue vulnerability

Google Chrome is a web browser from Google, an American company. A memory misreference vulnerability exists in versions of Google Chrome prior to 105.0.5195.52, which stems from a mix-up in the instruction responsible for freeing memory in SplitScreen. An attacker could exploit this vulnerability...

Malware in @personio-internal/split-sdk-provider

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

GSD-2022-1004703 net: stmmac: dwc-qos: Disable split header for Tegra194

net: stmmac: dwc-qos: Disable split header for Tegra194 This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.207 by commit...

Fedora: Security Advisory for golang-github-vbatts-tar-split (FEDORA-2022-37aef44d1e)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2022-32668

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.56 Description The issue is related to the net: stmmac: dwc-qos component in the Linux Kernel. It involves disabling split header for Tegra194. The actual impact and attack plausibility have not yet been...

PT-2022-32451

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.13 Description The issue is related to the net: stmmac: dwc-qos component in the Linux Kernel. It involves disabling split header for Tegra194. The actual impact and attack plausibility have not yet been...

PT-2022-32965

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.207 Description The issue is related to the net: stmmac: dwc-qos component in the Linux Kernel. It involves disabling split header for Tegra194. The actual impact and attack plausibility have not yet been...

PT-2022-32839

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.132 Description The issue is related to the net: stmmac: dwc-qos component in the Linux Kernel. It involves disabling split header for Tegra194. The actual impact and attack plausibility have not yet been...

duckdb:parse_fuzz_test: Segv on unknown address in duckdb::StringUtil::Split

Project: https://github.com/duckdb/duckdb.git Detailed Report: https://oss-fuzz.com/testcase?key=5685636882890752 Project: duckdb Fuzzing Engine: libFuzzer Fuzz Target: parsefuzztest Job Type: libfuzzerasanduckdb Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State:...