SUSE CVE-2020-27825

A use-after-free flaw was found in kernel/trace/ringbuffer.c in Linux kernel before 5.10-rc1. There was a race problem in traceopen and resize of cpu buffer running parallely on different cpus, may cause a denial of service problem DOS. This flaw could even allow a local attacker with special use...

SUSE CVE-2021-38202

fs/nfsd/trace.h in the Linux kernel before 5.13.4 might allow remote attackers to cause a denial of service out-of-bounds read in strlen by sending NFS traffic when the trace event framework is being used for nfsd...

SUSE CVE-2022-45411

Cross-Site Tracing occurs when a server will echo a request back via the Trace method, allowing an XSS attack to access to authorization headers and cookies inaccessible to JavaScript such as cookies protected by HTTPOnly. To mitigate this attack, browsers placed limits on fetch and XMLHttpReques...

CVE-2023-24499: Undefined Security Weakness

Butterfly Button plugin may leave traces of its use on user's device. Since it is used for reporting domestic problems, this may lead to spouse knowing about its use...

PT-2023-36776

Уязвимость функции rb check bpage модуля kernel/trace/ring buffer.c поддержки трассировки ядра операционной системы Linux связана с неправильным подтверждением значения проверки целостности. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

PT-2024-14697

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a kernel warning that occurs when sending a SYN message. The warning is caused by a lack of copy direction from the iterator viewpoint, which leads to a kernel...

Intel® Trace Analyzer and Collector Advisory

Summary: Potential security vulnerabilities in the Intel® Trace Analyzer and Collector software may allow escalation of privilege. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2022-34843 Description: Integer overflow in the...

PT-2023-35141 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.91 Description: The issue concerns the trace printk function, which is related to tracing functionality. The actual impact and potential for attack have not been proven yet. Recommendations: For versions...

PT-2023-34987 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.9 Description: A potential security issue exists due to the lack of a return value check for the create hist field function in the trace events hist module. The actual impact and attack plausibility have no...

PT-2023-34989 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.9 Description: The issue concerns the trace printk function, which may not output as soon as it can be used. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

PT-2023-35328 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.272 Description: The issue concerns the trace printk function, which is related to tracing functionality. The actual impact and potential for attack have not been proven yet. Recommendations: For versions...

PT-2023-35224 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.166 Description: The issue concerns the trace printk function, which is related to tracing functionality. It is noted that the actual impact and attack plausibility have not yet been proven. The estimated...

PT-2023-35223

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 4.17 through 5.10.165 Description A potential security issue exists due to the lack of a return value check for the create hist field function in the trace events hist module. The actual impact and attack plausibility hav...

PT-2023-35140

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.91 Description A potential security issue exists due to the lack of a return value check for the create hist field function in the trace events hist module. The actual impact and attack plausibility have no...

PT-2023-35327

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.272 Description A potential security issue exists due to the lack of a return value check for the create hist field function in the trace events hist module. The actual impact and attack plausibility have n...

PT-2023-35286

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.231 Description The issue concerns the trace printk function, which is related to tracing functionality. The actual impact and potential for attacks have not been proven yet. Recommendations For Linux Kernel...

PT-2023-35355

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.305 Description The issue concerns the trace printk function, which is related to tracing functionality. The actual impact and potential for attacks have not been proven yet. Recommendations For versions...

PT-2023-35285

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.231 Description A potential security issue exists due to the lack of a return value check for the create hist field function in the trace events hist module. The actual impact and attack plausibility have no...

Privilege Escalation

jeecg-boot-base-core is vulnerable to Privilege Escalation. The vulnerability exists due to the lack of library permission checks, allowing an attacker to gain escalated privilege and view sensitive information via the HTTP trace interface...

PT-2023-2055

Name of the Vulnerable Software and Affected Versions Grafana versions 7.0 through 8.5.20 Grafana versions 9.2.0 through 9.2.12 Grafana versions 9.3.0 through 9.3.7 Description Grafana has a stored XSS vulnerability in the trace view visualization. The vulnerability is possible due to the value o...