CVE-2022-29237: Improper Authentication

Opencast is a free and open source solution for automated video capture and distribution at scale. Prior to Opencast 10.14 and 11.7, users could pass along URLs for files belonging to organizations other than the user's own, which Opencast would then import into the current organization, bypassin...

Speculative Load Disordering

Bulletin ID: AMD-SB-1035 Potential Impact: Data Leakage Severity: Low Summary AMD processors may speculatively re-order load instructions which can result in stale data being observed when multiple processors are operating on shared memory, resulting in potential data leakage. CVE Details...

GSD-2022-1000616 USB: core: Fix hang in usb_kill_urb by adding memory barriers

USB: core: Fix hang in usbkillurb by adding memory barriers This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.5 by commit...

GSD-2022-1000251 USB: core: Fix hang in usb_kill_urb by adding memory barriers

USB: core: Fix hang in usbkillurb by adding memory barriers This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.19 by commit...

GSD-2022-1000152 USB: core: Fix hang in usb_kill_urb by adding memory barriers

USB: core: Fix hang in usbkillurb by adding memory barriers This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.176 by commit...

GSD-2022-1000123 USB: core: Fix hang in usb_kill_urb by adding memory barriers

USB: core: Fix hang in usbkillurb by adding memory barriers This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.228 by commit...

GSD-2022-1000099 USB: core: Fix hang in usb_kill_urb by adding memory barriers

USB: core: Fix hang in usbkillurb by adding memory barriers This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.265 by commit...

GSD-2022-1000081 USB: core: Fix hang in usb_kill_urb by adding memory barriers

USB: core: Fix hang in usbkillurb by adding memory barriers This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.300 by commit...

PT-2022-28377

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.265 Description A potential issue in the USB core of the Linux Kernel may cause a hang in usb kill urb due to missing memory barriers. The actual impact and attack plausibility have not yet been proven...

PT-2022-28430

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.176 Description A potential issue in the USB core of the Linux Kernel may cause a hang in usb kill urb due to missing memory barriers. The actual impact and attack plausibility have not yet been proven...

PT-2022-28529

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.19 Description A potential issue in the USB core of the Linux Kernel may cause a hang in usb kill urb due to missing memory barriers. The actual impact and attack plausibility have not yet been proven...

PT-2022-28469

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.96 Description A potential issue in the USB core of the Linux Kernel may cause a hang in usb kill urb due to missing memory barriers. The actual impact and attack plausibility have not yet been proven...

PT-2022-28401

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.228 Description A potential issue in the USB core of the Linux Kernel may cause a hang in usb kill urb due to missing memory barriers. The actual impact and attack plausibility have not yet been proven...

PT-2022-28359

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.300 Description A potential issue exists in the USB core of the Linux Kernel, which could cause a hang in usb kill urb due to missing memory barriers. The actual impact and attack plausibility have not yet...

CVE-2021-42076

An issue was discovered in Barrier before 2.3.4. An attacker can cause memory exhaustion in the barriers component aka the server-side implementation of Barrier and barrierc by sending long TCP messages...

CVE-2021-42075

An issue was discovered in Barrier before 2.3.4. The barriers component aka the server-side implementation of Barrier does not correctly close file descriptors for established TCP connections. An unauthenticated remote attacker can thus cause file descriptor exhaustion in the server process,...

CVE-2021-42074

An issue was discovered in Barrier before 2.3.4. An unauthenticated attacker can cause a segmentation fault in the barriers component aka the server-side implementation of Barrier by quickly opening and closing TCP connections while sending a Hello message for each TCP session...

CVE-2021-42072

An issue was discovered in Barrier before 2.4.0. The barriers component aka the server-side implementation of Barrier does not sufficiently verify the identify of connecting clients. Clients can thus exploit weaknesses in the provided protocol to cause denial-of-service or stage further attacks...

CVE-2021-42074: Use After Free

An issue was discovered in Barrier before 2.3.4. An unauthenticated attacker can cause a segmentation fault in the barriers component aka the server-side implementation of Barrier by quickly opening and closing TCP connections while sending a Hello message for each TCP session...

CVE-2021-42073

An issue was discovered in Barrier before 2.4.0. An attacker can enter an active session state with the barriers component aka the server-side implementation of Barrier simply by supplying a client label that identifies a valid client configuration. This label is "Unnamed" by default but could...