PT-2021-1517

Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is caused by a race condition in the unix scm to skb function of af unix.c, leading to a possible use after free bug. This could result in local escalation of privilege with System execution privileges...

CVE-2021-37600

An integer overflow in util-linux through 2.37.1 can potentially cause a buffer overflow if an attacker were able to use system resources in a way that leads to a large number in the /proc/sysvipc/sem file. NOTE: this is unexploitable in GNU C Library environments, and possibly in all realistic...

CVE-2021-37600

An integer overflow in util-linux through 2.37.1 can potentially cause a buffer overflow if an attacker were able to use system resources in a way that leads to a large number in the /proc/sysvipc/sem file. NOTE: this is unexploitable in GNU C Library environments, and possibly in all realistic...

PT-2021-3737 · Unknown +2 · Util-Linux +2

Name of the Vulnerable Software and Affected Versions: util-linux versions through 2.37.1 Description: The issue is related to an integer overflow in the util-linux package, specifically in the ipcutils.c file. This overflow can potentially cause a buffer overflow if an attacker is able to...

CVE-2021-37600

An integer overflow in util-linux through 2.37.1 can potentially cause a buffer overflow if an attacker were able to use system resources in a way that leads to a large number in the /proc/sysvipc/sem file. NOTE: this is unexploitable in GNU C Library environments, and possibly in all realistic...

Fedora: Security Advisory for kernel-headers (FEDORA-2021-07dc0b3eb1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for kernel-headers (FEDORA-2021-4786624190)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-32794

ArchiSteamFarm (ASF) is affected by a bug in the POST /Api/ASF endpoint that updates the global ASF config and incorrectly removes IPCPassword when the caller does not specify it. This can allow unauthorized IPC interface access after a config update. The issue has been fixed in ASF v5.1.2.4 and ...

JustArchiNET ArchiSteamFarm 输入验证错误漏洞

ArchiSteamFarm is a C application whose main purpose is to idle Steam cards from multiple accounts simultaneously. An input validation error vulnerability exists in JustArchiNET ArchiSteamFarm. No information about this vulnerability is available at this time, so stay tuned to CNNVD or vendor...

5GAA & Global Certification Forum Connect on New Cert.

The Global Certification Forum GCF and the 5G Automotive Association 5GAA announced their collaboration on a new program that will support the drive for interoperability, reliability, and safety of up and coming C-V2X systems...

Leptonica: Multiple vulnerabilities

Background Leptonica is a C library for image processing and analysis. Description Multiple vulnerabilities have been discovered in Leptonica. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details. Workaround There is no...

AvosLocker enters the ransomware scene, asks for partners

This blog post was authored by Hasherezade In mid-July we responded to an incident that involved an attack on a Microsoft Exchange server. The threat actor used this entry point to get into a Domain Controller and then leveraged it as a springboard to deploy ransomware. While examining the...

CVE-2021-35942

The wordexp function in the GNU C Library aka glibc through 2.33 may crash or read arbitrary memory in parseparam in posix/wordexp.c when called with an untrusted, crafted pattern, potentially resulting in a denial of service or disclosure of information. This occurs because atoi was used but...

Design/Logic Flaw

The wordexp function in the GNU C Library aka glibc through 2.33 may crash or read arbitrary memory in parseparam in posix/wordexp.c when called with an untrusted, crafted pattern, potentially resulting in a denial of service or disclosure of information. This occurs because atoi was used but...

UBUNTU-CVE-2021-35942

The wordexp function in the GNU C Library aka glibc through 2.33 may crash or read arbitrary memory in parseparam in posix/wordexp.c when called with an untrusted, crafted pattern, potentially resulting in a denial of service or disclosure of information. This occurs because atoi was used but...

CVE-2021-35942

The wordexp function in the GNU C Library aka glibc through 2.33 may crash or read arbitrary memory in parseparam in posix/wordexp.c when called with an untrusted, crafted pattern, potentially resulting in a denial of service or disclosure of information. This occurs because atoi was used but...

[SECURITY] Fedora 33 Update: kernel-headers-5.13.3-100.fc33

Kernel-headers includes the C header files that specify the interface between the Linux kernel and userspace libraries and programs. The header files define structures and constants that are needed for building most standard programs and are also needed for rebuilding the glibc package...

[SECURITY] Fedora 34 Update: kernel-headers-5.13.3-200.fc34

Kernel-headers includes the C header files that specify the interface between the Linux kernel and userspace libraries and programs. The header files define structures and constants that are needed for building most standard programs and are also needed for rebuilding the glibc package...

matio integer overflow vulnerability

matio is a C library for reading and writing MATLAB MAT files. matio version 1.5.17 has an integer overflow vulnerability in mat5.c in MatVarReadNextInfo5. An attacker could exploit this vulnerability to cause a denial of service...

CVE-2021-35942

The wordexp function in the GNU C Library aka glibc through 2.33 may crash or read arbitrary memory in parseparam in posix/wordexp.c when called with an untrusted, crafted pattern, potentially resulting in a denial of service or disclosure of information. This occurs because atoi was used but...