16280 matches found
Important: kernel
Issue Overview: Placeholder CVE. Details forthcoming CVE-2024-10929 In the Linux kernel, the following vulnerability has been resolved: uprobe: avoid out-of-bounds memory access of fetching args CVE-2024-50067 In the Linux kernel, the following vulnerability has been resolved: udf: fix uninit-val...
Important: kernel-livepatch-5.10.233-223.887
Issue Overview: In the Linux kernel, the following vulnerability has been resolved: gfs2: Fix slab-use-after-free in gfs2qddealloc CVE-2023-52760 In the Linux kernel, the following vulnerability has been resolved: gpiolib: cdev: Fix use after free in lineinfochangednotify CVE-2024-36899 In the...
suricata:fuzz_sigpcap_aware: Use-of-uninitialized-value in DetectEngineContentInspectionInternal
Project: https://github.com/OISF/suricata.git Detailed Report: https://oss-fuzz.com/testcase?key=4765048639127552 Project: suricata Fuzzing Engine: libFuzzer Fuzz Target: fuzzsigpcapaware Job Type: libfuzzermsansuricata Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Cras...
CVE-2024-57968
Advantive VeraCore before 2024.4.2.1 allows remote authenticated users to upload files to unintended folders e.g., ones that are accessible during web browsing by other users. upload.aspx can be used for this. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed...
ntpsec:FuzzServer: Use-of-uninitialized-value in next_uint16
Detailed Report: https://oss-fuzz.com/testcase?key=6175290369310720 Project: ntpsec Fuzzing Engine: libFuzzer Fuzz Target: FuzzServer Job Type: libfuzzermsanntpsec Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: nextuint16 ntskeprocessreceive FuzzServer.c...
suricata:fuzz_applayerprotodetectgetproto: Use-of-uninitialized-value in AppLayerProtoDetectGetProto
Project: https://github.com/OISF/suricata.git Detailed Report: https://oss-fuzz.com/testcase?key=4979269805867008 Project: suricata Fuzzing Engine: libFuzzer Fuzz Target: fuzzapplayerprotodetectgetproto Job Type: libfuzzermsansuricata Platform Id: linux Crash Type: Use-of-uninitialized-value Cras...
llvm:llvm-dwarfdump-fuzzer: Use-of-uninitialized-value in llvm::dwarf::UnwindTable::parseRows
Detailed Report: https://oss-fuzz.com/testcase?key=4799607615324160 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: llvm-dwarfdump-fuzzer Job Type: libfuzzermsanllvm Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: llvm::dwarf::UnwindTable::parseRows...
CVE-2023-6195: Server-Side Request Forgery (SSRF)
An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.5 prior to 16.9.7, starting from 16.10 prior to 16.10.5, and starting from 16.11 prior to 16.11.2. GitLab was vulnerable to Server Side Request Forgery when an attacker uses a malicious URL in the markdown image...
CVE-2023-6195 Server-Side Request Forgery (SSRF) in GitLab
An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.5 prior to 16.9.7, starting from 16.10 prior to 16.10.5, and starting from 16.11 prior to 16.11.2. GitLab was vulnerable to Server Side Request Forgery when an attacker uses a malicious URL in the markdown image...
CVE-2023-6195
An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.5 prior to 16.9.7, starting from 16.10 prior to 16.10.5, and starting from 16.11 prior to 16.11.2. GitLab was vulnerable to Server Side Request Forgery when an attacker uses a malicious URL in the markdown image...
AZL-56195 CVE-2024-10603 affecting package podman 4.1.1-26
Weaknesses in the generation of TCP/UDP source ports and some other header values in Google's gVisor allowed them to be predicted by an external attacker in some circumstances...
AZL-56204 CVE-2024-10603 affecting package podman for versions less than 5.6.1-2
Weaknesses in the generation of TCP/UDP source ports and some other header values in Google's gVisor allowed them to be predicted by an external attacker in some circumstances...
CLSA-2025-1738265190 Fix CVE(s): CVE-2024-44070
SECURITY UPDATE: Improper handling of TLV values in bgpattrencap - debian/patches/CVE-2024-44070.patch: check actual remaining stream length before taking TLV value - CVE-2024-44070...
Security update for buildah
This update for buildah fixes the following issues: Update to version 1.35.5 CVE-2024-11218: Fix TOCTOU error when bind and cache mounts use "src" values. bsc1236272 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper...
Google gVisor 安全漏洞
Google gVisor is a user-space kernel written in the Go language for use in Linux systems. A security vulnerability exists in Google gVisor that stems from a weak mechanism for generating TCP/UDP source port equivalents, which makes it susceptible to the Port and Header Value Predictability...
PT-2025-1598 · Google · Gvisor
Name of the Vulnerable Software and Affected Versions: gVisor affected versions not specified Description: The issue concerns weaknesses in the generation of TCP/UDP source ports and some other header values in Google's gVisor. This allowed an external attacker to predict these values in certain...
pinctrl: apple: check devm_kasprintf() returned value
...
pinctrl: stm32: check devm_kasprintf() returned value
...