The vulnerability of the nf_tables_delrule() function in the /net/netfilter/nf_tables_api.c file of the Linux kernel’s netfilter network interface layer allows a hacker to trigger a service failure.

The vulnerability of the nftablesdelrule function in the /net/netfilter/nftablesapi.c file of the Linux kernel’s netfilter network interface layer is related to improper handling of usage counters, which can lead to a memory leak. Exploiting this vulnerability could allow an attacker to cause a...

The vulnerability of the console-based graphic editor ImageMagick, related to buffer overflow in dynamic memory, allows a hacker to cause a system failure.

The vulnerability of the console-based graphic editor ImageMagick is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to cause a system failure...

The vulnerability of the qcom_cpufreq_hw_cpu_exit() function in the drivers/cpufreq/qcom-cpufreq-hw.c module of the cpufreq subsystem of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the qcomcpufreqhwcpuexit function in the drivers/cpufreq/qcom-cpufreq-hw.c module, within the cpufreq subsystem CPU Frequency scaling of the Linux kernel, relates to the re-release of previously released memory when a device is removed. Exploiting this vulnerability could all...

CVE-2023-34240

Cloudexplorer-lite is an open source cloud software stack. Weak passwords can be easily guessed and are an easy target for brute force attacks. This can lead to an authentication system failure and compromise system security. Versions of cloudexplorer-lite prior to 1.2.0 did not enforce strong...

The vulnerability of the importmultispectralquantum() function in the ImageMagick console-based graphics editor allows a hacker to trigger a service failure.

The vulnerability of the importmultispectralquantum function in the ImageMagick console-based graphics editor is caused by a buffer overflow in the dynamic memory. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the memory_tier_init() function (mm/memory-tiers.c) in the Linux kernel’s memory management subsystem allows a attacker to trigger a service failure.

The vulnerability of the memorytierinit function mm/memory-tiers.c in the Linux kernel’s memory management subsystem is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the brcmf_cfg80211_mgmt_tx function in the Linux kernel’s drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c file allows a hacker to cause system failures or gain increased privileges.

The vulnerability of the brcmfcfg80211mgmttx function in the Linux kernel’s drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c file is related to buffer overflow attacks. Exploiting this vulnerability can allow attackers to cause system failures or gain increased privileges...

K20087443: BIG-IP APM VPN vulnerability CVE-2017-6129

Security Advisory Description In F5 BIG-IP APM software version 13.0.0 and 12.1.2, in some circumstances, APM tunneled VPN flows can cause a VPN/PPP connflow to be prematurely freed or cause TMM to stop responding with a "flow not in use" assertion. An attacker may be able to disrupt traffic or...

K44020030: BIG-IP Client SSL Security Advisory CVE-2020-5936

Security Advisory Description The Traffic Management Microkernel TMM process may consume excessive resources when processing SSL traffic and client authentication are enabled on the client SSL profile. Impact TMM memory may eventually become exhausted and may result in the system producing a core...

The vulnerability of the Video Driver in Linux kernel allows a local attacker to trigger a system failure.

The vulnerability of the Video Driver in Linux operating systems is related to insufficient checking of user data. Exploiting this vulnerability can allow an attacker to cause service failures...

Dated, Vulnerable, Insecure Tech Is All Over the News. Hooray.

Save the links. Pass them around. And consider getting your copy of the new 2023 XDR Buyer’s Guide—because if this isn’t a time for reckoning and progress, what is? The news: on Wednesday, the United States grounded all flights coast-to-coast for the first time since 9/11. The Federal Aviation...

The vulnerability of the dxhdcp2 component in Android operating systems of LG devices allows a hacker to trigger a service failure.

The vulnerability of the dxhdcp2 component in Android operating systems on LG devices arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a hacker to cause a system failure...

The vulnerability of the lkdtm_ARRAY_BOUNDS function in the drivers/misc/lkdtm/bugs.c module of the Linux kernel allows a attacker to cause a system failure or gain increased privileges.

The vulnerability of the lkdtmARRAYBOUNDS function in the drivers/misc/lkdtm/bugs.c module of the Linux kernel is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause system failures or gain increased privileges...

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service. The vulnerability exists due to a lack of validation of the FakeQuantWithMinMaxVarsPerChannel input allowing an attacker to bring the system into a failed 'CHECK' resulting in the system stalling...

The vulnerability of the fs/io_uring.c component in Linux operating systems allows a hacker to cause a service failure.

The vulnerability of the fs/iouring.c component in Linux operating systems is related to pointer dereferencing errors. Exploiting this vulnerability can allow an attacker to cause a system failure...

The vulnerability of the ION subsystem in Qualcomm’s embedded software architecture allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the ION subsystem in embedded Qualcomm chips relates to insufficient validation of input data during command processing. Exploiting this vulnerability can allow attackers to cause system failures or execute arbitrary code...

The vulnerability of the vmxnet3 network card emulator, a component of the QEMU hardware emulation software, allows a hacker to induce a service failure.

The vulnerability of the vmxnet3 network card emulator, a component of the QEMU hardware emulation software, is related to a numerical overflow vulnerability. Exploiting this vulnerability allows an attacker to cause a system failure...

The vulnerability of the QEMU hardware emulation software, related to the provision of unlimited memory, allows a hacker to trigger a service failure.

The vulnerability of the QEMU hardware emulation software is related to the allocation of unlimited memory. Exploiting this vulnerability allows a hacker to cause a system failure...

The vulnerability of the SCSI am53c974 adapter driver in the hardware emulation software QEMU allows a hacker to induce a service failure.

The vulnerability of the SCSI am53c974 adapter driver in the QEMU hardware emulation software is related to pointer assignment errors. Exploiting this vulnerability allows an attacker to cause a system failure...

CVE-2022-1778

CVE-2022-1778 describes an improper input validation that causes a buffer overflow during startup while reading a specific configuration file in Hitachi Energy MicroSCADA X SYS600. Affected products are SYS600 versions 10 through 10.3.1; the configuration file is accessible only to administrators...