1511 matches found
SUSE CVE-2021-4037
A vulnerability was found in the fs/inode.c:inodeinitowner function logic of the LInux kernel that allows local users to create files for the XFS file-system with an unintended group ownership and with group execution and SGID permission bits set, in a scenario where a directory is SGID and belon...
SUSE CVE-2021-38171
adtsdecodeextradata in libavformat/adtsenc.c in FFmpeg 4.4 does not check the initgetbits return value, which is a necessary step because the second argument to initgetbits can be crafted...
SUSE CVE-2021-43533
When parsing internationalized domain names, high bits of the characters in the URLs were sometimes stripped, resulting in inconsistencies that could lead to user confusion or attacks such as phishing. This vulnerability affects Firefox 94...
SUSE CVE-2022-2085
A NULL pointer dereference vulnerability was found in Ghostscript, which occurs when it tries to render a large number of bits in memory. When allocating a buffer device, it relies on an initdeviceprocs defined for the device that uses it as a prototype that depends upon the number of bits per...
Exploit for Externally Controlled Reference to a Resource in Another Sphere in Linux Linux_Kernel
Bypassing Spectre-BTI User Space Mitigations on Linux Th...
Exploit for Externally Controlled Reference to a Resource in Another Sphere in Linux Linux_Kernel
Bypassing Spectre-BTI User Space Mitigations on Linux Th...
GSD-2023-1001731 netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
netfilter: nftpayload: incorrect arithmetics when fetching VLAN header bits This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.7 by commit...
GSD-2023-1000783 drm/msm/dsi: Prevent signed BPG offsets from bleeding into adjacent bits
drm/msm/dsi: Prevent signed BPG offsets from bleeding into adjacent bits This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...
CVE-2023-0247
Uncontrolled Search Path Element in GitHub repository bits-and-blooms/bloom prior to 3.3.1...
PT-2023-16110 · Bits And Blooms · Bloom
Name of the Vulnerable Software and Affected Versions: bits-and-blooms/bloom versions prior to 3.3.1 Description: The issue is related to an Uncontrolled Search Path Element in the GitHub repository bits-and-blooms/bloom. Recommendations: For versions prior to 3.3.1, update to version 3.3.1 or...
CVE-2023-0247
CVE-2023-0247 affects the Go library bits-and-blooms/bloom, with versions prior to 3.3.1 vulnerable to an Uncontrolled Search Path Element. The issue originates from how the application resolves search paths, enabling potential path hijacking. Affected product/version: bits-and-blooms/bloom befor...
CVE-2023-0247: Uncontrolled Search Path Element
Uncontrolled Search Path Element in GitHub repository bits-and-blooms/bloom prior to 3.3.1...
Single-step process for critical ownership transfer/renounce is risky
Lines of code Vulnerability details Single-step process for critical ownership transfer/renounce is risky Impact The following contracts and functions, allow owners to interact with core functions such as: execute, rawExecute and setApproval in OwnableSmartWallet registerKnotsToSyndicate,...
PT-2022-36774 · Git +1 · Ghostscript
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow WRITE 7 crash type. The crash state involves several functions: bytes copy rectangle zero padding, cmd put...
kernel: dm mirror log: round up region bitmap size to BITS_PER_LONG
In the Linux kernel, the following vulnerability has been resolved: dm mirror log: round up region bitmap size to BITSPERLONG The code in dm-log rounds up bitsetsize to 32 bits. It then uses findnextzerobitle on the allocated region. findnextzerobitle accesses the bitmap using unsigned long...
kernel: dm mirror log: round up region bitmap size to BITS_PER_LONG
In the Linux kernel, the following vulnerability has been resolved: dm mirror log: round up region bitmap size to BITSPERLONG The code in dm-log rounds up bitsetsize to 32 bits. It then uses findnextzerobitle on the allocated region. findnextzerobitle accesses the bitmap using unsigned long...
curl: CVE-2022-43552: HTTP Proxy deny use-after-free
Issues reported by Trail of Bits. This is either one or two issues. Summary: ./src/curl 0 -x0:80 telnet:/j-uj-u//0 -m 01 ./src/curl 0 -x0:80 smb:/j-uj-u//0 -m 01 Both command line ends up having libcurl access and use already freed heap-memory. For read and write. Steps To Reproduce: See above, r...
HCL Technologies HCL Verse 加密问题漏洞
HCL Technologies HCL Verse is a mobile application for accessing emails and life plan management from HCL Technologies, USA. A security vulnerability exists in HCL Technologies HCL Verse prior to version 12.0.15, which stems from the application being signed using a key length less than or equal ...
PT-2022-26778 · Tsmuxer · Tsmuxer
Name of the Vulnerable Software and Affected Versions: tsMuxer version 2.6.16 Description: A heap overflow issue was discovered in the function BitStreamWriter::flushBits located at /tsMuxer/bitStream.h. Recommendations: For tsMuxer version 2.6.16, consider disabling the BitStreamWriter::flushBit...
