CVE-2024-36918 bpf: Check bloom filter map value size

In the Linux kernel, the following vulnerability has been resolved: bpf: Check bloom filter map value size This patch adds a missing check to bloom filter creating, rejecting values above KMALLOCMAXSIZE. This brings the bloom map in line with many other map types. The lack of this protection can...

CVE-2024-36918

In CVE-2024-36918, the Linux kernel’s bloom_filter_map creation path lacked a guard for bloom filter value sizes, allowing values larger than KMALLOC_MAX_SIZE to slip through. The patch adds a check during bloom filter creation to reject oversized values, aligning behavior with other map types an...

Linux kernel security vulnerabilities

Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. A security vulnerability exists in the Linux kernel, which stems from a lack of checking of the size of values in the Bloom filter in the bpf module when it is created, which may cause the kernel to cras...

PT-2024-20757 · Redis · Redisbloom

Name of the Vulnerable Software and Affected Versions: RedisBloom versions 2.0.0 through 2.4.6 RedisBloom versions 2.6.0 through 2.6.9 Description: RedisBloom adds a set of probabilistic data structures to Redis. Specially crafted CF.LOADCHUNK commands may be used by authenticated users to perfor...

PT-2024-27208

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a missing check in the bloom filter map value size, which can cause kernel crashes for value sizes that overflow int's. A patch has been added to reject values...

LeakedSource Owner Quit Ashley Madison a Month Before 2015 Hack

This is Part III in a series on research conducted for a recent Hulu documentary on the 2015 hack of marital infidelity website AshleyMadison.com. In 2019, a Canadian company called Defiant Tech Inc. pleaded guilty to running LeakedSource.com, a service that sold access to billions of passwords a...

SUSE CVE-2022-0433

A NULL pointer dereference flaw was found in the Linux kernel's BPF subsystem in the way a user triggers the mapgetnextkey function of the BPF bloom filter. This flaw allows a local user to crash the system. This flaw affects Linux kernel versions prior to 5.17-rc1...

Bloom Uncontrolled Search Path Element vulnerability

Uncontrolled Search Path Element in GitHub repository bits-and-blooms/bloom prior to 3.3.1...

GHSA-FGWP-PWQQ-G3W4 Bloom Uncontrolled Search Path Element vulnerability

Uncontrolled Search Path Element in GitHub repository bits-and-blooms/bloom prior to 3.3.1...

CVE-2023-0247

Uncontrolled Search Path Element in GitHub repository bits-and-blooms/bloom prior to 3.3.1...

Bloom filters 代码问题漏洞

Bloom filters is a Golang-based implementation of Bloom filters. A code issue vulnerability exists in Bloom filters versions prior to 3.3.1 that stems from uncontrolled search path elements...

CVE-2023-0247

CVE-2023-0247 affects the Go library bits-and-blooms/bloom, with versions prior to 3.3.1 vulnerable to an Uncontrolled Search Path Element. The issue originates from how the application resolves search paths, enabling potential path hijacking. Affected product/version: bits-and-blooms/bloom befor...

bloom-travel.nl Cross Site Scripting vulnerability OBB-3113665

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

bloom-med.com Cross Site Scripting vulnerability OBB-2994685

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

A NULL pointer dereference flaw was found in the Linux kernel's BPF subsystem in the way a user triggers the map_get_next_key function of the BPF bloom filter. This flaw allows a local user to crash the system. This flaw affects Linux kernel versions prior to 5.17-rc1.

...

CVE-2022-0433

A NULL pointer dereference flaw was found in the Linux kernel's BPF subsystem in the way a user triggers the mapgetnextkey function of the BPF bloom filter. This flaw allows a local user to crash the system. This flaw affects Linux kernel versions prior to 5.17-rc1...

CVE-2022-0433

A NULL pointer dereference flaw was found in the Linux kernel's BPF subsystem in the way a user triggers the mapgetnextkey function of the BPF bloom filter. This flaw allows a local user to crash the system. This flaw affects Linux kernel versions prior to 5.17-rc1...

CVE-2022-0433

A NULL pointer dereference flaw was found in the Linux kernel's BPF subsystem in the way a user triggers the mapgetnextkey function of the BPF bloom filter. This flaw allows a local user to crash the system. This flaw affects Linux kernel versions prior to 5.17-rc1...

UBUNTU-CVE-2022-0433

A NULL pointer dereference flaw was found in the Linux kernel's BPF subsystem in the way a user triggers the mapgetnextkey function of the BPF bloom filter. This flaw allows a local user to crash the system. This flaw affects Linux kernel versions prior to 5.17-rc1...

Friday Squid Blogging: Climate Change Causing “Squid Bloom” along Pacific Coast

The oceans are warmer, which means more squid. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Read my blog posting guidelines here...