19873 matches found
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414471)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414471 advisory. In bdiput and bdiunregister of backing-dev.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414448)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414448 advisory. drivers/usb/gadget/legacy/inode.c in the Linux kernel through 5.16.8 mishandles dev-buf release. Tenable has extracted the preceding description block directly from...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414382)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414382 advisory. An issue was discovered in the Linux kernel through 5.18.14. xfrmexpandpolicies in net/xfrm/xfrmpolicy.c can cause a refcount to be dropped twice. Tenable has...
CVE-2025-61670: Missing Release of Resource after Effective Lifetime
Wasmtime is a runtime for WebAssembly. Wasmtime 37.0.0 and 37.0.1 have memory leaks in the C/C++ API when using bindings for the anyref or externref WebAssembly values. This is caused by a regression introduced during the development of 37.0.0 and all prior versions of Wasmtime are unaffected. If...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414473)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414473 advisory. In ipcheckmcrcu of igmp.c, there is a possible use after free due to improper locking. This could lead to local escalation of privilege when opening and closing inet...
Unity Linux 20.1070e Security Update: yasm (UTSA-2025-984690)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-984690 advisory. yasm commit 9defefae was discovered to contain a NULL pointer dereference via the yasmsectionbcsappend function at section.c. Tenable has extracted the preceding...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414326)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414326 advisory. In the Linux kernel 6.0.8, there is an out-of-bounds read in ntfsattrfind in fs/ntfs/attrib.c. Tenable has extracted the preceding description block directly from th...
Wasmtime 安全漏洞
wasmtime is a lightweight WebAssembly runtime open-sourced by the Bytecode Alliance. A security vulnerability exists in Wasmtime version 37.0.0 and 37.0.1, which stems from a memory management flaw in the C/C++ API for anyref or externref values that could lead to a memory leak...
USN-7801-2: Linux kernel (Oracle) vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - x86 architecture; - Compute Acceleration Framework; - Bus devices; - AM...
The vulnerability of component t2.c in the OpenJPEG image encoding and decoding library allows a attacker to cause a service failure.
The vulnerability of component t2.c in the OpenJPEG image encoding and decoding library is related to an uncontrolled resource consumption. Exploiting this vulnerability allows a malicious actor to cause service interruptions...
CVE-2023-53552 drm/i915: mark requests for GuC virtual engines to avoid use-after-free
In the Linux kernel, the following vulnerability has been resolved: drm/i915: mark requests for GuC virtual engines to avoid use-after-free References to i915requests may be trapped by userspace inside a syncfile or dmabuf dma-resv and held indefinitely across different proceses. To counter-act t...
glibc security update
An update is available for glibc. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The glibc packages provide the standard C libraries libc, POSIX thread librarie...
RLSA-2025:8655 Moderate: glibc security update
The glibc packages provide the standard C libraries libc, POSIX thread libraries libpthread, standard math libraries libm, and the name service cache daemon nscd used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly. Security Fixes: glibc:...
EUVD-2021-7680
Malicious code in bioql PyPI...
EUVD-2022-4730
Malicious code in bioql PyPI...
EUVD-2022-48204
Malicious code in bioql PyPI...
EUVD-2021-9853
Malicious code in bioql PyPI...
EUVD-2022-34312
Malicious code in bioql PyPI...