147 matches found
CVE-2023-54251 net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
In the Linux kernel, the following vulnerability has been resolved: net/sched: taprio: Limit TCATAPRIOATTRSCHEDCYCLETIME to INTMAX. syzkaller found zero division error 0 in divs64rem called from getcycletimeelapsed, where sched-cycletime is the divisor. We have tests in parsetaprioschedule so tha...
Linux Distros Unpatched Vulnerability : CVE-2023-54251
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/sched: taprio: Limit TCATAPRIOATTRSCHEDCYCLETIME to INTMAX. syzkaller found zero division error 0 in divs64rem called from getcycletimeelapsed, where...
EUVD-2025-201651
In the Linux kernel, the following vulnerability has been resolved: iommufd: Don't overflow during division for dirty tracking If pgshift is 63 then BITSPERTYPEbitmap-bitmap pgsize will overflow to 0 and this triggers divide by 0. In this case the index should just be 0, so reorganize things to...
The vulnerability in the `usbnet_probe()` function of the `drivers/net/usb/usbnet.c` module of the Linux kernel’s USB driver support module allows a hacker to cause a service failure.
The vulnerability of the usbnetprobe function in the drivers/net/usb/usbnet.c module of the Linux kernel’s network adapter driver support framework is related to zero-division errors. Exploiting this vulnerability could allow an attacker to cause a service failure...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990779)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990779 advisory. In the Linux kernel, the following vulnerability has been resolved: net: stmmac: Fix zero-division error when disabling tc cbs The commit b8c43360f6e4 net: stmmac: N...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990440)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990440 advisory. In the Linux kernel, the following vulnerability has been resolved: tcp: fix tcpmtupprobesuccess vs wrong sndcwnd syzbot got a new report 1 finally pointing to a ver...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989538)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989538 advisory. In the Linux kernel, the following vulnerability has been resolved: tcp: fix tcpmtupprobesuccess vs wrong sndcwnd syzbot got a new report 1 finally pointing to a ver...
CVE-2025-23050
QLowEnergyController in Qt before 6.8.2 mishandles malformed Bluetooth ATT commands, leading to an out-of-bounds read or division by zero. This is fixed in 5.15.19, 6.5.9, and 6.8.2...
Siemens SIMATIC, SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-49977)
net: stmmac: porttransmitratekbps could be set to a value of 0, which is then passed to the divs64 function when tc-cbs is disabled. This leads to a zero-division error. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information...
EUVD-2021-0287
Malware in sbrugna...
EUVD-2021-0328
Malware in sbrugna...
EUVD-2023-44522
Malicious code in bioql PyPI...
CVE-2025-39742 RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask()
In the Linux kernel, the following vulnerability has been resolved: RDMA: hfi1: fix possible divide-by-zero in findhwthreadmask The function divides number of online CPUs by numcoresiblings, and later checks the divider by zero. This implies a possibility to get and divide-by-zero runtime error...
CVE-2025-55212
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-28 and 7.1.2-2, passing a geometry string containing only a colon ":" to montage -geometry leads GetGeometry to set width/height to 0. Later, ThumbnailImage divides by these zer...
CVE-2025-55212
CVE-2025-55212 (ImageMagick) affects ImageMagick prior to 6.9.13-28 and 7.1.2-2, where passing a geometry string containing only a colon (":") to montage -geometry sets width/height to 0. This causes ThumbnailImage() to divide by zero, triggering a crash (SIGFPE/abort) and a denial of service. Th...
CVE-2025-55212
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-28 and 7.1.2-2, passing a geometry string containing only a colon ":" to montage -geometry leads GetGeometry to set width/height to 0. Later, ThumbnailImage divides by these zer...
CVE-2025-55212 ImageMagick affected by divide-by-zero in ThumbnailImage via montage -geometry ":" leads to crash
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-28 and 7.1.2-2, passing a geometry string containing only a colon ":" to montage -geometry leads GetGeometry to set width/height to 0. Later, ThumbnailImage divides by these zer...
The vulnerabilities in the modules drivers/net/ethernet/stmicro/stmmac/stmmac_main.c and drivers/net/ethernet/stmicro/stmmac/stmmac_ptp.c of the Linux kernel allow a hacker to cause a service failure.
The vulnerability in the modules drivers/net/ethernet/stmicro/stmmac/stmmacmain.c and drivers/net/ethernet/stmicro/stmmac/stmmacptp.c of the Linux kernel is related to zero-division errors. Exploiting this vulnerability can allow an attacker to cause a service failure...
Linux Distros Unpatched Vulnerability : CVE-2024-27059
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - USB: usb-storage: Prevent divide-by-0 error in isd200atacommand The isd200 sub-driver in usb-storage uses the HEADS and SECTORS values in the ATA ID information...
CVE-2025-54581 vproxy is vulnerable to a divide by zero DoS attack
vproxy is an HTTP/HTTPS/SOCKS5 proxy server. In versions 2.3.3 and below, untrusted data is extracted from the user-controlled HTTP Proxy-Authorization header and passed to Extension::tryfrom and flows into parsettlextension where it is parsed as a TTL value. If an attacker supplies a TTL of zero...