SUSE CVE-2021-38202

fs/nfsd/trace.h in the Linux kernel before 5.13.4 might allow remote attackers to cause a denial of service out-of-bounds read in strlen by sending NFS traffic when the trace event framework is being used for nfsd...

SUSE CVE-2022-45411

Cross-Site Tracing occurs when a server will echo a request back via the Trace method, allowing an XSS attack to access to authorization headers and cookies inaccessible to JavaScript such as cookies protected by HTTPOnly. To mitigate this attack, browsers placed limits on fetch and XMLHttpReques...

PT-2024-14697

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a kernel warning that occurs when sending a SYN message. The warning is caused by a lack of copy direction from the iterator viewpoint, which leads to a kernel...

Intel® Trace Analyzer and Collector Advisory

Summary: Potential security vulnerabilities in the Intel® Trace Analyzer and Collector software may allow escalation of privilege. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2022-34843 Description: Integer overflow in the...

PT-2023-34987 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.9 Description: A potential security issue exists due to the lack of a return value check for the create hist field function in the trace events hist module. The actual impact and attack plausibility have no...

PT-2023-35328 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.272 Description: The issue concerns the trace printk function, which is related to tracing functionality. The actual impact and potential for attack have not been proven yet. Recommendations: For versions...

PT-2023-34989 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.9 Description: The issue concerns the trace printk function, which may not output as soon as it can be used. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

PT-2023-35141 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.91 Description: The issue concerns the trace printk function, which is related to tracing functionality. The actual impact and potential for attack have not been proven yet. Recommendations: For versions...

PT-2023-35224 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.166 Description: The issue concerns the trace printk function, which is related to tracing functionality. It is noted that the actual impact and attack plausibility have not yet been proven. The estimated...

Privilege Escalation

jeecg-boot-base-core is vulnerable to Privilege Escalation. The vulnerability exists due to the lack of library permission checks, allowing an attacker to gain escalated privilege and view sensitive information via the HTTP trace interface...

PT-2023-2055 · Grafana +2 · Grafana +2

Name of the Vulnerable Software and Affected Versions: Grafana versions 7.0 through 8.5.20 Grafana versions 9.2.0 through 9.2.12 Grafana versions 9.3.0 through 9.3.7 Description: Grafana has a stored XSS vulnerability in the trace view visualization. The vulnerability is possible due to the value...

PT-2023-7464 · Intel · Intel Trace Analyzer/Collector

Name of the Vulnerable Software and Affected Versions: IntelR Trace Analyzer and Collector versions prior to 2021.8.0 Description: The issue is related to a stack-based buffer overflow in IntelR Trace Analyzer and Collector software. This may allow an authenticated user to potentially enable...

PT-2024-14719

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue occurs when a corrupted snap trace is received, and it is not clear what happened on the MDS side. To prevent potential corruption or incorrect content access, the patch blocks...

CVE-2023-21546

creationtimestamp| type| source ---|---|--- 2023-01-19 07:20:23+00:00| seen| https://t.me/GithubRedTeam/3694...

PT-2023-33475 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.19 Description: The issue allows sleep in qed mcp trace dump. The actual impact and attack plausibility have not yet been proven. It was introduced in version v4.9 and fixed in Linux Kernel version v6.0.19...

PT-2025-40216

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.4.182+ 202104120910+6d1da174272d.61x Description The Linux kernel contains a flaw within the qed driver related to the qed mcp trace dump function. The qed mcp cmd and union function can cause delays exceeding ...

PT-2025-49731

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel related to out-of-bound memory access within the xhci-dbc driver. Specifically, if the xdbc bulk write function fails, the buffer used by the xdbc trace...

club.mrxiao:express-java-common (>=1.0.0 <=1.0.2), club.mrxiao:express-java-jdl (>=1.0.0 <=1.0.2) +263 more potentially affected by CVE-2022-45689 via cn.hutool:hutool-json (>=4.0.0 <=5.8.10)

cn.hutool:hutool-json MAVEN version =4.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =2.0.3, =2.0.5, =2.0.1.B, =2.0.1.B, =2.0.1.B, =1.0.1, =1.0.3 and more Source cves: CVE-2022-45689 Source advisory: OSV:GHSA-FXRC-HG6J-6V3X...

GSD-2022-1008095 tracing: kprobe: Fix memory leak in test_gen_kprobe/kretprobe_cmd()

tracing: kprobe: Fix memory leak in testgenkprobe/kretprobecmd This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.154 by commit...

Security Bulletin: IBM MQ Internet Pass-Thru traces sensitive data (CVE-2022-35719)

Summary An issue was found within IBM MQ Internet Pass-Thru which causes sensitive data to be written to trace files when trace is enabled. Vulnerability Details CVEID:CVE-2022-35719 DESCRIPTION: IBM MQ Internet Pass-Thru 2.1, 9.2 LTS and 9.2 CD stores potentially sensitive information in trace...