59 matches found
GSD-2022-1002649 lkdtm/bugs: Don't expect thread termination without CONFIG_UBSAN_TRAP
lkdtm/bugs: Don't expect thread termination without CONFIGUBSANTRAP This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.4 by commit...
PT-2022-30912
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.4 Description The issue is related to thread termination without CONFIG UBSAN TRAP. The actual impact and attack plausibility have not yet been proven. It was introduced in version v5.15 and fixed in Linux...
PT-2022-31556
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.47 Description The issue is related to thread termination without CONFIG UBSAN TRAP. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...
PT-2022-31258
Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.15 through v5.17.14 Description The issue is related to thread termination without CONFIG UBSAN TRAP. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions v5.15...
libwebp: use-after-free in EmitFancyRGB() in dec/io_dec.c
A flaw was found in libwebp. A use-after-free was found due to a thread being killed too early. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...
libwebp: use-after-free in EmitFancyRGB() in dec/io_dec.c
A flaw was found in libwebp. A use-after-free was found due to a thread being killed too early. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...
libwebp: use-after-free in EmitFancyRGB() in dec/io_dec.c
A flaw was found in libwebp. A use-after-free was found due to a thread being killed too early. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...
libwebp: use-after-free in EmitFancyRGB() in dec/io_dec.c
A flaw was found in libwebp. A use-after-free was found due to a thread being killed too early. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...
A flaw was found in libwebp in versions before 1.0.1. A use-after-free was found due to a thread being killed too early. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
...
UBUNTU-CVE-2020-36329
A flaw was found in libwebp in versions before 1.0.1. A use-after-free was found due to a thread being killed too early. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...
CloudBees Jenkins Monitoring Plugin Cross-Site Request Forgery Vulnerability
CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software version of the release/testing project and some timed tasks . Monitoring Plugin is used in one of th...
CVE-2019-1003022
A denial of service vulnerability exists in Jenkins Monitoring Plugin 1.74.0 and earlier in PluginImpl.java that allows attackers to kill threads running on the Jenkins master...
PT-2017-12515
Name of the Vulnerable Software and Affected Versions IBM WebSphere MQ version 8.0 Description The issue could allow an authenticated user to cause a premature termination of a client application thread, potentially causing denial of service. Recommendations For IBM WebSphere MQ version 8.0, at t...
Ultra Mini HTTPD Stack Buffer Overflow
This module exploits a stack based buffer overflow in Ultra Mini HTTPD 1.21, allowing remote attackers to execute arbitrary code via a long resource name in an HTTP request. This exploit has to deal with the fact that the application's request handler thread is terminated after 60 seconds by a...
Code injection
An unspecified "logical programming mistake" in SMART SynchronEyes Student and Teacher 6.0, and possibly earlier versions, allows remote attackers to cause a denial of service via a large packet to the Teacher discovery port UDP port 5496, which causes a thread to terminate and prevents...
SMART Technologies SynchronEyes Remote Denial of Services
Title: SMART Technologies SynchronEyes Remote Denial of Services Release Date: 04. April 2006 Author: Dennis Elser dennis backtrace de Vendor: SMART Technologies Inc. http://www.smarttech.com Vendor Status: Notified, fixes scheduled for May Product: SynchronEyes Student and Teacher Affected...
CVE-2005-2827
The thread termination routine in the kernel for Windows NT 4.0 and 2000 NTOSKRNL.EXE allows local users to modify kernel memory and execution flow via steps in which a terminating thread causes Asynchronous Procedure Call APC entries to free the wrong data, aka the "Windows Kernel Vulnerability....
CVE-2005-2827
The thread termination routine in the kernel for Windows NT 4.0 and 2000 NTOSKRNL.EXE allows local users to modify kernel memory and execution flow via steps in which a terminating thread causes Asynchronous Procedure Call APC entries to free the wrong data, aka the "Windows Kernel Vulnerability....
CVE-2005-2827: Undefined Security Weakness
The thread termination routine in the kernel for Windows NT 4.0 and 2000 NTOSKRNL.EXE allows local users to modify kernel memory and execution flow via steps in which a terminating thread causes Asynchronous Procedure Call APC entries to free the wrong data, aka the "Windows Kernel Vulnerability....