PT-2021-26583

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to 5.14.15 Description The issue is related to the isdn component, specifically the cpai function, where a check on ctr-cnr is necessary to prevent an array index out of bounds condition. The actual impact and...

PT-2021-26390

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.4.290 Description: The issue is related to the isdn component, specifically the cpai function, where a check on ctr-cnr is necessary to prevent an array index out of bounds condition. The actual impact and...

PT-2021-26409

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.288 Description The issue is related to the isdn component, specifically the cpai function, where a check on ctr-cnr is necessary to prevent an array index out of bounds error. The actual impact and potentia...

PT-2021-26482

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to 5.4.156 Description The issue is related to the isdn and cpai components, where a check on ctr-cnr is necessary to prevent an array index out of bounds condition. The actual impact and attack plausibility have no...

PT-2021-30578

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to 5.14.15 Description The issue is related to the isdn component, specifically the cpai function, where a check on ctr-cnr is necessary to prevent an array index out of bounds condition. The actual impact and...

PT-2021-30515

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to 5.10.76 Description The issue is related to the isdn component, specifically the cpai function, where a check on ctr-cnr is necessary to prevent an array index out of bounds error. The actual impact and attack...

Microsoft Office Microsoft 365 Apps for Enterprise Code Execution

The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages stems from errors in array indexing during syntax analysis of EMF files. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...

MGASA-2021-0507 Updated kernel packages fix security vulnerabilities

This kernel update is based on upstream 5.10.78 and fixes at least the following security issues: A use-after-free vulnerability in the NFC stack can lead to a threat to confidentiality, integrity, and system availability CVE-2021-3760. A flaw in the SCTP stack where a blind attacker may be able ...

Updated kernel-linus packages fix security vulnerabilities

This kernel-linus update is based on upstream 5.10.78 and fixes at least the following security issues: A use-after-free vulnerability in the NFC stack can lead to a threat to confidentiality, integrity, and system availability CVE-2021-3760. A flaw in the SCTP stack where a blind attacker may be...

Mozilla Firefox Security Advisory (MFSA2013-40) - Linux

This host is missing a security update for Mozilla Firefox. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...

Ubuntu 20.04 LTS : Linux kernel (OEM 5.10) vulnerabilities (USN-5139-1)

The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5139-1 advisory. Ilja Van Sprundel discovered that the SCTP implementation in the Linux kernel did not properly perform size validations on incoming packets in some...

Mozilla Firefox Security Advisory (MFSA2013-110) - Linux

This host is missing a security update for Mozilla Firefox. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...

Heap OOB read in `tf.raw_ops.SparseCountSparseOutput`

Impact The shape inference functions for SparseCountSparseOutput can trigger a read outside of bounds of heap allocated array: python import tensorflow as tf @tf.function def func: return tf.rawops.SparseCountSparseOutput indices=1, values=1, denseshape=10, weights=, binaryoutput= True func The...

An issue was discovered in the Linux kernel before 5.14.15. There is an array-index-out-of-bounds flaw in the detach_capi_ctr function in drivers/isdn/capi/kcapi.c.

...

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service. An attacker can crash the application through the shape inference code for tf.ragged.cross due to a read outside of bounds of the heap-allocated array...

Cross-site Scripting in bootstrap-table

This affects all versions of package bootstrap-table. A type confusion vulnerability can lead to a bypass of input sanitization when the input provided to the escapeHTML function is an array instead of a string even if the escape attribute is set...

Prototype Pollution in json-pointer

This affects versions of package json-pointer up to and including 0.6.1. A type confusion vulnerability can lead to a bypass of CVE-2020-7709 when the pointer components are arrays...

Google TensorFlow heap allocation array out-of-bounds read vulnerability (CNVD-2021-85885)

Google TensorFlow is an end-to-end open source machine learning platform. An out-of-bounds read vulnerability exists in the shape inference code of tf.ragged.cross in versions prior to TensorFlow 2.7.0 for heap allocation arrays. No details of the vulnerability are currently available...

Unable to claim vesting due to unbounded timelock loop

Handle nathaniel Vulnerability details Impact The timelocks for any beneficiary are unbounded, and can be vested by someone who is not the beneficiary. When the array becomes significantly big enough, the vestments will no longer be claimable for the beneficiary. The vest function in Vesting.sol...

Google TensorFlow heap allocation array out-of-bounds read vulnerability

Google TensorFlow is an end-to-end open source machine learning platform. an out-of-bounds read vulnerability exists in the shape inference function of the QuantizeAndDequantizeV operation in versions prior to TensorFlow 2.7.0 for heap allocation arrays. No detailed vulnerability details are...