UVI-2021-1000147 btrfs: fix race between transaction aborts and fsyncs leading to use-after-free

btrfs: fix race between transaction aborts and fsyncs leading to use-after-free This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.36 by comm...

GSD-2021-1000113 btrfs: fix race between transaction aborts and fsyncs leading to use-after-free

btrfs: fix race between transaction aborts and fsyncs leading to use-after-free This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.11.20 by comm...

UVI-2021-1000113 btrfs: fix race between transaction aborts and fsyncs leading to use-after-free

btrfs: fix race between transaction aborts and fsyncs leading to use-after-free This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.11.20 by comm...

GSD-2021-1000073 btrfs: fix race between transaction aborts and fsyncs leading to use-after-free

btrfs: fix race between transaction aborts and fsyncs leading to use-after-free This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.3 by commi...

PT-2021-28540

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.7 through v5.12.2 Description A race condition between transaction aborts and fsyncs can lead to a use-after-free issue. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2021-28614

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.36 Description A race condition exists between transaction aborts and fsyncs, potentially leading to a use-after-free issue. The actual impact and attack plausibility have not yet been proven. Recommendatio...

PT-2021-28580

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.11.20 Description A race condition exists between transaction aborts and fsyncs, potentially leading to a use-after-free issue. The actual impact and attack plausibility have not yet been proven. Recommendatio...

PT-2021-24620

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.36 Description A race condition between transaction aborts and fsyncs can lead to a use-after-free issue. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-24546

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.7 through v5.12.2 Description: A race condition exists between transaction aborts and fsyncs, potentially leading to a use-after-free issue. The actual impact and attack plausibility have not yet been proven...

PT-2021-24586

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.11.20 Description A race condition between transaction aborts and fsyncs can lead to a use-after-free issue. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

CVE-2021-29543

TensorFlow is an end-to-end open source platform for machine learning. An attacker can trigger a denial of service via a CHECK-fail in tf.rawops.CTCGreedyDecoder. This is because the...

CVE-2020-29562

The iconv function in the GNU C Library aka glibc or libc6 2.30 to 2.32, when converting UCS4 text containing an irreversible character, fails an assertion in the code path and aborts the program, potentially resulting in a denial of service...

CVE-2017-17840

CVE-2017-17840 : In Open-iSCSI up to 2.0.875, the iscsiuio server (process_iscsid_broadcast in iscsiuio/src/unix/iscsid_ipc.c) does not validate the payload length before a write, enabling a local attacker to cause a buffer overflow and potentially abort or execute code. Public details describe t...

Qemu: qemu-nbd: server breaks with SIGPIPE upon client abort

Quick Emulator QEMU built with the Network Block Device NBD Server support is vulnerable to a crash via a SIGPIPE signal. The crash can occur if a client aborts a connection due to any failure during negotiation or read operation. A remote user/process could use this flaw to crash the qemu-nbd...

Qemu: qemu-nbd: server breaks with SIGPIPE upon client abort

Quick Emulator QEMU built with the Network Block Device NBD Server support is vulnerable to a crash via a SIGPIPE signal. The crash can occur if a client aborts a connection due to any failure during negotiation or read operation. A remote user/process could use this flaw to crash the qemu-nbd...

DEBIAN-CVE-2016-9816

Xen through 4.7.x allows local ARM guest OS users to cause a denial of service host crash via vectors involving an asynchronous abort while at EL2...

DOS due to malformed frames in HTTP/2 — Mozilla

Security researcher Stuart Larsen reported two issues with HTTP/2 resulting in integer underflows that lead to intentional aborts when the errors are detected...

python -- buffer overrun in repr() for unicode strings

Benjamin C. Wiley Sittler reports: I discovered a buffer overrun in repr for unicode strings. This causes an unpatched non-debug wide UTF-32/UCS-4 build of python to abort. Ubuntu security team reports: If an application uses repr on arbitrary untrusted data, this bug could be exploited to execut...