348 matches found
UVI-2021-1001359 ubifs: Fix races between xattr_{set|get} and listxattr operations
ubifs: Fix races between xattrset|get and listxattr operations This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.133 by commit...
GSD-2021-1001294 ubifs: Fix races between xattr_{set|get} and listxattr operations
ubifs: Fix races between xattrset|get and listxattr operations This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.51 by commit...
UVI-2021-1001294 ubifs: Fix races between xattr_{set|get} and listxattr operations
ubifs: Fix races between xattrset|get and listxattr operations This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.51 by commit...
GSD-2021-1001226 ubifs: Fix races between xattr_{set|get} and listxattr operations
ubifs: Fix races between xattrset|get and listxattr operations This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.13.3 by commit...
UVI-2021-1001226 ubifs: Fix races between xattr_{set|get} and listxattr operations
ubifs: Fix races between xattrset|get and listxattr operations This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.13.3 by commit...
PT-2021-25696
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.13.3 Description: The issue is related to races between xattr set|get and listxattr operations in ubifs. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...
PT-2021-29824
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.133 Description The issue is related to races between xattr set|get and listxattr operations in ubifs. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...
PT-2021-29759
Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.27 through 5.10.50 Description The issue is related to races between xattr set|get and listxattr operations in the ubifs filesystem. The actual impact and attack plausibility have not yet been proven. Recommendations...
PT-2021-25829
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.133 Description The issue concerns a race condition between xattr set|get and listxattr operations in the ubifs filesystem. This problem was introduced in version v2.6.27 and fixed in version v5.4.133. The...
PT-2021-25764
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.51 Description The issue is related to races between xattr set|get and listxattr operations in the ubifs filesystem. The actual impact and attack plausibility have not yet been proven. Recommendations For...
PT-2021-29691
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.13.3 Description The issue is related to races between xattr set|get and listxattr operations in the ubifs filesystem. The actual impact and attack plausibility have not yet been proven. Recommendations For...
CVE-2019-18824
Barco ClickShare Button R9861500D01 devices before 1.10.0.13 have Missing Support for Integrity Check. The ClickShare Button does not verify the integrity of the mutable content on the UBIFS partition before being used...
CVE-2019-18824
Barco ClickShare Button R9861500D01 devices before 1.10.0.13 have Missing Support for Integrity Check. The ClickShare Button does not verify the integrity of the mutable content on the UBIFS partition before being used...
Design/Logic Flaw
Barco ClickShare Button R9861500D01 devices before 1.10.0.13 have Missing Support for Integrity Check. The ClickShare Button does not verify the integrity of the mutable content on the UBIFS partition before being used...
CVE-2019-18824
Barco ClickShare Button R9861500D01 devices before 1.10.0.13 have Missing Support for Integrity Check. The ClickShare Button does not verify the integrity of the mutable content on the UBIFS partition before being used...
CVE-2019-18824: Insufficient Verification of Data Authenticity
Barco ClickShare Button R9861500D01 devices before 1.10.0.13 have Missing Support for Integrity Check. The ClickShare Button does not verify the integrity of the mutable content on the UBIFS partition before being used...
PT-2019-15681
Name of the Vulnerable Software and Affected Versions Barco ClickShare Button R9861500D01 versions prior to 1.10.0.13 Description The issue is related to missing support for integrity checks in the ClickShare Button. Specifically, it does not verify the integrity of mutable content on the UBIFS...
CVE-2017-7374
Use-after-free vulnerability in fs/crypto/ in the Linux kernel before 4.10.7 allows local users to cause a denial of service NULL pointer dereference or possibly gain privileges by revoking keyring keys being used for ext4, f2fs, or ubifs encryption, causing cryptographic transform objects to be...
CVE-2017-7374
Use-after-free vulnerability in fs/crypto/ in the Linux kernel before 4.10.7 allows local users to cause a denial of service NULL pointer dereference or possibly gain privileges by revoking keyring keys being used for ext4, f2fs, or ubifs encryption, causing cryptographic transform objects to be...
Null pointer dereference
Use-after-free vulnerability in fs/crypto/ in the Linux kernel before 4.10.7 allows local users to cause a denial of service NULL pointer dereference or possibly gain privileges by revoking keyring keys being used for ext4, f2fs, or ubifs encryption, causing cryptographic transform objects to be...