The vulnerability of the Linux operating system’s driver/usb/typec/ucsi/ucsi.c code allows a hacker to cause a service failure.

The vulnerability of the Linux operating system’s driver/usb/typec/ucsi/ucsi.c code relates to pointer aliasing. Exploiting this vulnerability can allow an attacker to cause a service failure...

DEBIAN-CVE-2025-21997

In the Linux kernel, the following vulnerability has been resolved: xsk: fix an integer overflow in xpcreateandassignumem Since the i and pool-chunksize variables are of type 'u32', their product can wrap around and then be cast to 'u64'. This can lead to two different XDP buffers pointing to the...

Vulnerability of the vhost_scsi_get_req() function (driver/vhost/scsi.c) in the Linux kernel, allowing a hacker to cause a service failure

The vulnerability of the vhostscsigetreq function driver/vhost/scsi.c in the Linux kernel is related to pointer aliasing. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the nf_tproxy_laddr4() function in the module net/ipv4/netfilter/nf_tproxy_ipv4.c, which is part of the IPv4 protocol implementation in Linux kernel, allows a attacker to cause a service failure.

The vulnerability of the nftproxyladdr4 function in the net/ipv4/netfilter/nftproxyipv4.c module of the Linux operating system’s IPv4 protocol implementation is related to pointer aliasing. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the Intel Memory Latency Checker’s measurement tool, related to pointer swapping, allows a hacker to trigger a service failure.

The vulnerability of the Intel Memory Latency Checker’s measurement tool relates to pointer aliasing. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the Intel PROSet/Wireless WiFi networking connectivity tool, related to pointer swapping, allows a hacker to trigger a service failure.

The vulnerability of the Intel PROSet/Wireless WiFi networking connectivity tool is related to pointer aliasing. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability of the Core Messaging component in Windows operating systems allows attackers to escalate their privileges.

The vulnerability of the Core Messaging component in Windows operating systems is related to unreliable pointer aliasing. Exploiting this vulnerability can allow an attacker to gain increased privileges...

The vulnerability of components such as DRM, AMDGPU, and CPU cores in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of DRM/amdgpu/PM components in the Linux operating system is related to pointer aliasing. Exploiting this vulnerability can allow a hacker to trigger a service failure...

HPESBHF04774 rev.1 - Certain HPE ProLiant Servers using AMD 3rd Generation and 4th Generation EPYC Processors, AMD-SB-3015, Undermining Integrity Features of SEV-SNP with Memory Aliasing (BadRAM)

Potential Security Impact: Local: Compromise of System Integrity SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DL145 Gen11 - Prior to v1.40 HPE ProLiant DL325 Gen11 Server - Prior to v2.30 HPE ProLiant DL345 Gen11 Server - Prior to v2.30 HPE ProLiant DL365 Gen11...

The vulnerability of the Adobe Bridge file manager, related to pointer aliasing errors, allows a hacker to trigger a service failure.

The vulnerability of the Adobe Bridge file manager is related to pointer naming errors. Exploiting this vulnerability can allow an attacker to trigger a service failure using a specially created file...

The vulnerability of the Intel Raid Web Console web console, related to pointer swapping errors, allows a hacker to trigger a service failure.

The vulnerability of the Intel Raid Web Console web console is related to pointer aliasing errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

SUSE SLES15: libQt5Quick3D5 / libQt5Quick3DAssetImport5 / libqt5-qtquick3d-devel / etc (SUSE-SU-2024:3078-1)

The remote SUSE Linux SLES15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:3078-1 advisory. - CVE-2024-40724: Fixed heap-based buffer overflow in the PLY importer class in assimp bsc1228199 Other fixes: - Fix progressive...

SUSE-SU-2024:3078-1 Security update for libqt5-qtquick3d

This update for libqt5-qtquick3d fixes the following issues: - CVE-2024-40724: Fixed heap-based buffer overflow in the PLY importer class in assimp bsc1228199 Other fixes: - Fix progressive anti-aliasing, which doesn't work if any object in the scene used a PrincipledMaterial - Skip processing...

PT-2024-31561 · Oracle +1 · Mysql Server +1

Name of the Vulnerable Software and Affected Versions: HedgeDoc versions prior to 1.10.0 Description: HedgeDoc is an open source, real-time, collaborative, markdown notes application. When using HedgeDoc with MySQL or MariaDB, it is possible to create notes with an alias matching the ID of existi...

SUSE SLES15 Security Update : libqt5-qtquick3d (SUSE-SU-2024:2985-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2024:2985-1 advisory. - CVE-2024-40724: Fixed a heap-based buffer overflow in the PLY importer class bsc1228199 - Fixed progressive anti-aliasing, which doesn't work if any...

SUSE-SU-2024:2985-1 Security update for libqt5-qtquick3d

This update for libqt5-qtquick3d fixes the following issues: - CVE-2024-40724: Fixed a heap-based buffer overflow in the PLY importer class bsc1228199 - Fixed progressive anti-aliasing, which doesn't work if any object in the scene used a PrincipledMaterial - Fixed a crash when a custom...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that originates in the drm/amd/display module in dmlcoremodeprogramming, where &modelib-p.Watermark and &locals-Watermark ar...

UBUNTU-CVE-2024-35917

In the Linux kernel, the following vulnerability has been resolved: s390/bpf: Fix bpfplt pointer arithmetic Kui-Feng Lee reported a crash on s390x triggered by the dummystops/dummyinitptrarg test 1: 0x2 bpfstructopstestrun+0x156/0x250 sysbpf+0xa1a/0xd00 s390xsysbpf+0x44/0x50 dosyscall+0x244/0x300...

The vulnerability in the upload_firmware.cgi function of D-Link DIR-823G router software allows a hacker to induce a service failure.

The vulnerability of the uploadfirmware.cgi function in D-Link DIR-823G router microprogramming software is related to pointer aliasing errors. Exploiting this vulnerability can allow a malicious actor to cause service failure remotely...

The vulnerability of the SAML components in Ivanti Connect Secure and Ivanti Policy Secure network access control tools allows a perpetrator to trigger a service failure.

The vulnerability of the SAML components in Ivanti Connect Secure and Ivanti Policy Secure network access control tools is related to pointer aliasing errors. Exploiting this vulnerability could allow a malicious actor to trigger service failure remotely...