251 matches found
Astra Linux – Vulnerability in Linux, Linux 5.10
The FireWire subsystem in the Linux kernel up to version 5.14.13 has a buffer overflow issue related to the drivers/media/FireWire/firedtv-avc.c and drivers/media/FireWire/firedtv-ci.c files. This issue arises due to improper handling of bounds checking by the avccapmt function...
PT-2026-87436
Use after free in Audio Video Control Transport Protocol allows an authorized attacker to elevate privileges locally...
frr security, bug fix, and enhancement update
8.5.3-15.1 - Resolves: RHEL-193234 - input validation fixes for EVPN NLRI and ENCAP/VNC packet parsing 8.5.3-15 - Resolves: RHEL-176258 - AVC when reading user's site-packages 8.5.3-14 - Resolves: RHEL-152300 - ignored route in the kernel after flapping interface...
Moderate: Red Hat Security Advisory: container-selinux and crun security, bug fix, and enhancement update
An update for multiple packages is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
DEBIAN-CVE-2025-15667
A vulnerability was determined in GPAC up to 2.5-DEV. This vulnerability affects the function gfisomnalusamplerewrite of the file src/isomedia/avcext.c of the component MP4Box. This manipulation of the argument naluoutbs causes double free. It is possible to launch the attack on the local host. T...
UBUNTU-CVE-2025-15667
A vulnerability was determined in GPAC up to 2.5-DEV. This vulnerability affects the function gfisomnalusamplerewrite of the file src/isomedia/avcext.c of the component MP4Box. This manipulation of the argument naluoutbs causes double free. It is possible to launch the attack on the local host. T...
CVE-2025-15667
A vulnerability was determined in GPAC up to 2.5-DEV. This vulnerability affects the function gfisomnalusamplerewrite of the file src/isomedia/avcext.c of the component MP4Box. This manipulation of the argument naluoutbs causes double free. It is possible to launch the attack on the local host. T...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerability has been resolved: SELinux: Use sk blob accessor in socket permission helpers. The SELinux socket state is stored in the composite LSM socket blob. The functions sockhasperm and nlmsgsockhasextendedperms currently dereference sk-sksecurity directly...
EUVD-2025-210150
A heap buffer overflow in the gfisomvpconfignew function isomedia/avcext.c of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...
CVE-2025-55652
A heap buffer overflow in the gfisomvpconfignew function isomedia/avcext.c of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...
The vulnerability of the fcp_avcTransaction() function in the sound/firewire/fcp.c module of the Linux kernel’s audio subsystem allows a hacker to cause a service failure.
The vulnerability of the fcpavcTransaction function in the sound/firewire/fcp.c module of the Linux kernel’s audio subsystem is related to access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to cause a system failure...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001449)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001449 advisory. The firewire subsystem in the Linux kernel through 5.14.13 has a buffer overflow related to drivers/media/firewire/firedtv-avc.c and...
MiracleLinux 4 : setroubleshoot-3.0.47-6.1.0.1.AXS4 (AXSA:2015-107:01)
The remote MiracleLinux 4 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2015-107:01 advisory. Description: setroubleshoot GUI. Application that allows you to view setroubleshoot-server messages. Provides tools to help diagnose SELinux problems. When AV...
Malicious code in modiov-kian-avc (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 796cd89360bdc0f721879daa60d63c05e1216b80a0ba098e36ee739dc784fc9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2009-0447
Malware in sbrugna...
EUVD-2019-2299
Malware in sbrugna...
EUVD-2009-1354
Malware in sbrugna...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414526)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414526 advisory. The firewire subsystem in the Linux kernel through 5.14.13 has a buffer overflow related to drivers/media/firewire/firedtv-avc.c and...