UVI-2021-1001207 smackfs: restrict bytes count in smk_set_cipso()

smackfs: restrict bytes count in smksetcipso This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.13.3 by commit...

PT-2021-29672

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.13.3 Description The issue is related to the smackfs, where the bytes count in the smk set cipso function is not properly restricted. The actual impact and attack plausibility have not yet been proven...

PT-2021-25893

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.240 Description The issue is related to the smackfs, where the bytes count in the smk set cipso function is not properly restricted. The actual impact and attack plausibility have not yet been proven...

PT-2021-29888

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.240 Description The issue is related to the smackfs, where the bytes count in the smk set cipso function is not properly restricted. The actual impact and attack plausibility have not yet been proven...

PT-2021-25860

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.198 Description The issue is related to the smackfs, where the bytes count in the smk set cipso function is not properly restricted. The actual impact and attack plausibility have not yet been proven...

libfetch 缓冲区错误漏洞

libfetch is a browser extension that makes it easier to access the content of electronic resources subscribed to by the NIE Library. A buffer error vulnerability exists in libfetch that stems from incorrectly handling strings of numbers for the FTP and HTTP protocols. the FTP passive mode...

PT-2021-25677

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.13.3 Description: The issue is related to the smackfs, where the bytes count in the smk set cipso function is not properly restricted. The actual impact and attack plausibility have not yet been proven...

golang: net/http: panic in ReadRequest and ReadResponse when reading a very large header

A vulnerability was detected in net/http of the Go standard library when parsing very large HTTP header values, causing a crash and subsequent denial of service. This vulnerability affects both clients and servers written in Go, however, servers are only vulnerable if the value of MaxHeaderBytes...

ruby: NUL injection vulnerability of File.fnmatch and File.fnmatch?

A flaw was discovered in Ruby in the way certain functions handled strings containing NULL bytes. Specifically, the built-in methods File.fnmatch and its alias File.fnmatch? did not properly handle path patterns containing the NULL byte. A remote attacker could exploit this flaw to make a Ruby...

Miniaudio 安全漏洞

Miniaudio is a single-file audio playback and capture library written in C. A buffer overflow vulnerability exists in Miniaudio version 0.10.35. The vulnerability stems from an out-of-bounds left shift of drwavbytestou32 in miniaudio.h. No detailed vulnerability details are currently available."...

PT-2021-20396

Name of the Vulnerable Software and Affected Versions: Miniaudio version 0.10.35 Description: The issue is caused by an integer-based buffer overflow due to an out-of-bounds left shift in the drwav bytes to u32 function in miniaudio.h. Recommendations: For Miniaudio version 0.10.35, consider...

glib: integer overflow in g_bytes_new function on 64-bit platforms due to an implicit cast from 64 bits to 32 bits

An integer wraparound was discovered in glib due to passing a 64 bit sized value to function gmemdup which accepts a 32 bits number as argument. An attacker may abuse this flaw when an application linked against the glib library uses gbytesnew function or possibly other functions that use gmemdup...

SUSE: Security Advisory (SUSE-SU-2019:14163-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2021-29022

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v4.0 through v5.12.8 Description The issue is related to the corruption of the value of pg bytes written in the nfs do recoalesce function. The actual impact and attack plausibility have not yet been proven. Recommendatio...

PT-2021-29170

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.4.271 Description The issue is related to the corruption of the value of pg bytes written in the nfs do recoalesce function. The actual impact and attack plausibility have not yet been proven. Recommendations...

PT-2021-25105

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v4.0 through v5.4.123 Description The issue is related to the corruption of the value of pg bytes written in the nfs do recoalesce function. The actual impact and attack plausibility have not yet been proven...

PT-2021-25176

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.4.271 Description The issue is related to the corruption of the value of pg bytes written in the nfs do recoalesce function. The actual impact and attack plausibility have not yet been proven. Recommendations...

PT-2021-25072

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.42 Description The issue is related to the corruption of the value of pg bytes written in the nfs do recoalesce function. The actual impact and attack plausibility have not yet been proven. Recommendations...

PT-2021-25163

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.271 Description The issue is related to the corruption of the value of pg bytes written in the nfs do recoalesce function. The actual impact and attack plausibility have not yet been proven. Recommendations...

DEBIAN-CVE-2021-32027

A flaw was found in postgresql in versions before 13.3, before 12.7, before 11.12, before 10.17 and before 9.6.22. While modifying certain SQL array values, missing bounds checks let authenticated database users write arbitrary bytes to a wide area of server memory. The highest threat from this...