PT-2022-30659

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.276 Description The issue concerns a potential null return of kmalloc array in the drm/amdkfd component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-30028

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.33 Description A potential issue exists where the page array is not freed when the watch queue is dismantled. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2022-30151

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.11 through v5.15.32 Description The issue is related to accessing an array out of bounds for an enum type in the va-macro codec. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2022-29729

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.19 Description A bug in the imx-jpeg media module allows for accessing an array out of bounds. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2022-29607

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.13 through v5.17.1 Description The issue is related to the drm/virtio component, specifically in the virtio gpu array put free function, where it does not check if objs is NULL. This could potentially lead to security...

PT-2022-30216

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.32 Description The issue is related to the drm/virtio component, specifically in the virtio gpu array put free function, where it does not check if objs is NULL. This could potentially lead to security...

PT-2022-29843

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.12 through v5.16.18 Description The issue is related to accessing an array out of bounds for an enum type in the ASoC: codecs: rx-macro component. The actual impact and attack plausibility have not yet been proven...

PT-2022-30299

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.110 Description A potential security issue exists where the page array is not freed when the watch queue is dismantled. The actual impact and attack plausibility have not yet been proven. Recommendations Fo...

PT-2022-30229

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.112 Description The issue concerns a potential null return of kmalloc array in the drm/amdkfd component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-30436

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.190 Description The issue concerns a potential null return of kmalloc array in the drm/amdkfd component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-30150

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.33 Description The issue is related to accessing an array out of bounds for an enum type in the ASoC: codecs: wc938x module. The actual impact and attack plausibility have not yet been proven. Recommendatio...

PT-2022-29928

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.35 Description The issue concerns a potential null return of kmalloc array in the drm/amdkfd component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-29378

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.2 Description A potential security issue exists where the page array is not freed when the watch queue is dismantled. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2022-29247

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.4 Description A potential issue exists where kmalloc array could return null, which may have security implications. The actual impact and likelihood of an attack have not been confirmed. Recommendations For...

EulerOS 2.0 SP10 : gnupg2 (EulerOS-SA-2022-1486)

According to the versions of the gnupg2 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - GnuPG 2.2.21 and 2.2.22 and Gpg4win 3.1.12 has an array overflow, leading to a crash or possibly unspecified other impact, when a victim imports ...

Huawei EulerOS: Security Advisory for gnupg2 (EulerOS-SA-2022-1486)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP10 : gnupg2 (EulerOS-SA-2022-1505)

According to the versions of the gnupg2 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - GnuPG 2.2.21 and 2.2.22 and Gpg4win 3.1.12 has an array overflow, leading to a crash or possibly unspecified other impact, when a victim imports ...

PHP spl_array Heap Buffer Overflow DoS

The vulnerability of the ext/spl/splarray.c component of the PHP interpreter exists due to insufficient checking of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures or potentially have other adverse effects using specially created serialized data...

Exploit for Prototype Pollution in Qs_Project Qs

PoC exploit for CVE-2022-24999, a qs prototype poisoning vulnera...

Debian: Security Advisory (DLA-2983-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...