220 matches found
SUSE CVE-2020-25598
An issue was discovered in Xen 4.14.x. There is a missing unlock in the XENMEMacquireresource error path. The RCU Read, Copy, Update mechanism is a synchronisation primitive. A buggy error path in the XENMEMacquireresource exits without releasing an RCU reference, which is conceptually similar to...
SUSE CVE-2020-25665
The PALM image coder at coders/palm.c makes an improper call to AcquireQuantumMemory in routine WritePALMImage because it needs to be offset by 256. This can cause a out-of-bounds read later on in the routine. The patch adds 256 to bytesperrow in the call to AcquireQuantumMemory. This could cause...
Linux kernel 资源管理错误漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel, which stems from a post-release reuse in lockacquire that could cause a system crash...
PT-2022-30463
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.189 Description The issue is related to an off-by-one error in the amdgpu gfx kiq acquire function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versio...
PT-2022-29300
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.3 Description The issue is related to an off-by-one error in the amdgpu gfx kiq acquire function. The actual impact and attack plausibility have not yet been proven. It was introduced in version v4.13 and...
PT-2022-30676
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.276 Description The issue is related to an off-by-one error in the amdgpu gfx kiq acquire function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...
PT-2022-29648
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.20 Description The issue is related to an off-by-one error in the amdgpu gfx kiq acquire function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versio...
PT-2022-29975
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.34 Description The issue is related to an off-by-one error in the amdgpu gfx kiq acquire function. The actual impact and attack plausibility have not yet been proven. It was introduced in version v4.13 and...
PT-2022-30586
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.238 Description The issue is related to an off-by-one error in the amdgpu gfx kiq acquire function. The actual impact and attack plausibility have not yet been proven. Recommendations For versions prior to...
PT-2022-30260
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.111 Description The issue is related to an off-by-one error in the amdgpu gfx kiq acquire function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...
Iranian state-sponsored APT group MuddyWater targeting organizations via malicious executables
THREAT LEVEL: Red. United States Cyber Command USCYBERCOM has warned of an ongoing cyber attack by Iranian state sponsored actor named as MuddyWater. This APT group is currently targeting Middle Eastern countries and has also targeted European and North American nations. The Iranian-backed...
PT-2021-8278
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the locking mechanism in the Linux kernel, specifically in the queued write lock slowpath function. A reader can acquire the lock without holding the wait lock,...
UBUNTU-CVE-2020-25665
The PALM image coder at coders/palm.c makes an improper call to AcquireQuantumMemory in routine WritePALMImage because it needs to be offset by 256. This can cause a out-of-bounds read later on in the routine. The patch adds 256 to bytesperrow in the call to AcquireQuantumMemory. This could cause...
Imagemagick Studio ImageMagick::WriteOnePNGImage() Code Issue Vulnerability
Imagemagick Studio ImageMagick is a suite of open source image processing software from ImageMagick Studio Imagemagick Studio, an American company. The software can read, convert or write images in many formats. A code issue vulnerability exists in ImageMagick versions 6.9.10-68 through 7.0.8-68,...
ImageMagick Studio ImageMagick 缓冲区错误漏洞
Imagemagick Studio ImageMagick is a suite of open source image processing software from ImageMagick Studio Imagemagick Studio, an American company. The software can read, convert or write images in many formats. A security vulnerability exists in versions prior to ImageMagick 7.0.8-68, which stem...
ALPINE-CVE-2020-25598
An issue was discovered in Xen 4.14.x. There is a missing unlock in the XENMEMacquireresource error path. The RCU Read, Copy, Update mechanism is a synchronisation primitive. A buggy error path in the XENMEMacquireresource exits without releasing an RCU reference, which is conceptually similar to...
DEBIAN-CVE-2019-16710
ImageMagick 7.0.8-35 has a memory leak in coders/dot.c, as demonstrated by AcquireMagickMemory in MagickCore/memory.c...
UBUNTU-CVE-2019-16710
ImageMagick 7.0.8-35 has a memory leak in coders/dot.c, as demonstrated by AcquireMagickMemory in MagickCore/memory.c...