8388 matches found
kernel: netfilter: bridge: replace physindev with physinif in nf_bridge_info
CVE-2024-35839 is a flaw in the Linux kernel's Netfilter bridge functionality. It occurs when bridging certain packets, such as those involving destination NAT between virtual Ethernet interfaces. A mismatch between the network device associated with a packet and the neighbor's device can lead to...
kernel: xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create
A flaw was found in the Linux kernel in which a system crash can occur if there are certain errors establishing RPC-over-RDMA connections...
kernel: bpf: Fix overrunning reservations in ringbuf
An out-of-bounds memory access flaw was found in the Linux kernel’s BPF subsystem. This flaw allows a local user to crash the system...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel, which originates in the LoongArch architecture, where a task may call the stacktop function without a vDSO mapping, which...
RHEL 5 : kernel (RHSA-2018:3823)
The remote Redhat Enterprise Linux 5 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2018:3823 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: Use-after-free in sndseqioctlcreateport...
Medium: libdwarf
Issue Overview: A flaw was found in libdwarf. A possible memory leak allows an attacker to input a specially crafted file, leading to a crash. The highest threat from this vulnerability is to system availability. CVE-2020-27545 Affected Packages: libdwarf Note: This advisory is applicable to Amaz...
HashiCorp Vault 安全漏洞
HashiCorp Vault is a private key access management tool from HashiCorp Inc. in the United States. A security vulnerability exists in HashiCorp Vault that stems from a susceptible denial-of-service DoS attack, where an attacker may send a large number of requests to an endpoint causing Vault to...
The vulnerability of the UEFI Firmware component of Intel microprogramming systems, related to reading beyond the buffer in memory, allows a hacker to cause a system failure.
The vulnerability of the UEFI Firmware component of Intel microprocessors is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...
PT-2024-31060 · Apple · Ipados +5
Name of the Vulnerable Software and Affected Versions: macOS Sonoma versions prior to 14.7.1 macOS Ventura versions prior to 13.7.1 visionOS versions prior to 2.1 watchOS versions prior to 11.1 tvOS versions prior to 18.1 iOS versions prior to 17.7.1 and prior to 18.1 iPadOS versions prior to...
Realtek SD card reader driver 安全漏洞
The Realtek SD card reader driver is a card reader driver from China-based Realtek Semiconductor Realtek. A security vulnerability exists in Realtek SD card reader driver version 10.0.26100.21374 and prior versions, which stems from a lack of input validation, and could allow a privileged attacke...
Unspecified Vulnerability in Oracle MySQL Server (CNVD-2024-42453)
Oracle MySQL Server is a relational database from Oracle Corporation. A security vulnerability exists in Oracle MySQL Server, which can be exploited by attackers to cause MySQL Server to hang or crash frequently and repeatedly...
Linux kernel 资源管理错误漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a double release of shared channel descriptors by the armscmi transfer in the firmware subsystem, which coul...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from stopping cleaner kthread during uninstallation without waiting for the fixup job to complete, which could lead t...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the mishandling of the f2fs file system during fault injection without a free segment, which could lead to a...
http-proxy-middleware 安全漏洞
http-proxy-middleware is Node.js http proxy middleware for connect, express, next.js, and more. A security vulnerability exists in http-proxy-middleware versions prior to 2.0.7 and versions 3.0.0 through 3.0.3. An attacker exploiting this vulnerability could cause a system crash...
kernel: mlxsw: spectrum: Protect driver from buggy firmware
A vulnerability was found in the Linux kernel's mlxsw spectrum driver, where processing port up/down events leads to a NULL pointer dereference. This issue occurs when the driver fails to handle events for the CPU port, which exists but lacks a corresponding network device, resulting in system...
kernel: mlxsw: spectrum: Protect driver from buggy firmware
A vulnerability was found in the Linux kernel's mlxsw spectrum driver, where processing port up/down events leads to a NULL pointer dereference. This issue occurs when the driver fails to handle events for the CPU port, which exists but lacks a corresponding network device, resulting in system...
CBL Mariner 2.0 Security Update: kernel (CVE-2024-42287)
The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-42287 advisory. - In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Complete command early...
