Use After Free

qemu:sid is vulnerable to use after free. It allowed a remote attacker to potentially execute HW commands when shared buffers...

Tinyproxy 安全漏洞

Tinyproxy is a small, efficient HTTP/SSL proxy daemon from the Tinyproxy open source. A security vulnerability exists in Tinyproxy that stems from not handling HTTP request lines in the processrequest function and is using uninitialized buffers. An attacker could exploit the vulnerability to acce...

PT-2022-25392 · Tinyproxy +2 · Tinyproxy +2

Name of the Vulnerable Software and Affected Versions: Tinyproxy versions prior to commit 84f203f Description: The issue is related to a potential leak of left-over heap data when custom error page templates containing special non-standard variables are used. This occurs because Tinyproxy commit...

CVE-2022-40468

Potential leak of left-over heap data if custom error page templates containing special non-standard variables are used. Tinyproxy commit 84f203f and earlier use uninitialized buffers in processrequest function...

CVE-2022-40468

Potential leak of left-over heap data if custom error page templates containing special non-standard variables are used. Tinyproxy commit 84f203f and earlier use uninitialized buffers in processrequest function...

CVE-2022-40468

Potential leak of left-over heap data if custom error page templates containing special non-standard variables are used. Tinyproxy commit 84f203f and earlier use uninitialized buffers in processrequest function...

GSD-2022-1006018 intel_th: msu: Fix vmalloced buffers

intelth: msu: Fix vmalloced buffers This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.211 by commit b5d924cb4c7b952eaa61622f14427723a78137a3,...

GSD-2022-1005854 intel_th: msu: Fix vmalloced buffers

intelth: msu: Fix vmalloced buffers This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.137 by commit 6ae2881c1d1fa0e33f4763b7c786f8ef05a9c828...

GSD-2022-1005597 intel_th: msu: Fix vmalloced buffers

intelth: msu: Fix vmalloced buffers This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.61 by commit 566887bad7ff2297d6b3f9659c702ba075f3d62d,...

PT-2022-34276 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.211 Description: The issue concerns a fix for vmalloced buffers in the Linux Kernel. It was introduced in version v5.2 and fixed in version v5.4.211. The actual impact and attack plausibility have not yet...

PT-2022-33855 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.61 Description: The issue concerns a fix for vmalloced buffers in the Linux Kernel. It was introduced in version v5.2 and fixed in version v5.15.61. The actual impact and attack plausibility have not yet...

GSD-2022-1005408 btrfs: fix lockdep splat with reloc root extent buffers

btrfs: fix lockdep splat with reloc root extent buffers This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.65 by commit...

GSD-2022-1005248 intel_th: msu: Fix vmalloced buffers

intelth: msu: Fix vmalloced buffers This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit 4914c50670b6a531e2cb17cd984cc565b4681312, ...

USN-5616-1: Linux kernel (Intel IoTG) vulnerabilities

Asaf Modelevsky discovered that the IntelR 10GbE PCI Express ixgbe Ethernet driver for the Linux kernel performed insufficient control flow management. A local attacker could possibly use this to cause a denial of service. CVE-2021-33061 Moshe Kol, Amit Klein and Yossi Gilad discovered that the I...

OESA-2022-1920 wayland security update

Wayland is a protocol for a compositor to talk to its clients as well as a C library implementation of that protocol. The compositor can be a standalone display server running on Linux kernel modesetting and evdev input devices, an X application, or a wayland client itself. The clients can be...

The vulnerability of Mozilla Firefox, Firefox ESR, and the email client Thunderbird relates to the writing of data beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.

The vulnerability of Mozilla Firefox, Firefox ESR, and the email client Thunderbird lies in the writing of data beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

PT-2022-33666 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.65 Description: The issue is related to a lockdep splat with reloc root extent buffers in btrfs. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versio...

hw: cpu: incomplete clean-up of microarchitectural fill buffers (aka SBDS)

A flaw was found in hw. Incomplete cleanup of microarchitectural fill buffers on some Intel® Processors may allow an authenticated user to enable information disclosure via local access...

hw: cpu: incomplete clean-up of multi-core shared buffers (aka SBDR)

A flaw was found in hw. Incomplete cleanup of multi-core shared buffers for some Intel® Processors may allow an authenticated user to enable information disclosure via local access...

hw: cpu: incomplete clean-up of multi-core shared buffers (aka SBDR)

A flaw was found in hw. Incomplete cleanup of multi-core shared buffers for some Intel® Processors may allow an authenticated user to enable information disclosure via local access...