UVI-2021-1000984 ethtool: strset: fix message length calculation

ethtool: strset: fix message length calculation This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.46 by commit...

PT-2021-25536

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.6 through v5.12.13 Description: The issue concerns a message length calculation in ethtool's strset. It was introduced in version v5.6 and fixed in version v5.12.13. The actual impact and attack plausibility have not...

PT-2021-25455

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.6 through v5.10.45 Description: The issue concerns a message length calculation in ethtool. It was introduced in version v5.6 and fixed in version v5.10.46. The actual impact and attack plausibility have not yet been...

PT-2021-29449

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.6 through v5.10.45 Description The issue concerns a message length calculation in ethtool. It was introduced in version v5.6 and fixed in version v5.10.46. The actual impact and attack plausibility have not yet been...

PT-2021-29530

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.6 through v5.12.13 Description The issue concerns a message length calculation in the strset function of ethtool. It was introduced in version v5.6 and fixed in version v5.12.13. The actual impact and attack plausibili...

BadgerYieldSource balanceOfToken share calculation seems wrong

Handle cmichel Vulnerability details When suppling to the BadgerYieldSource, some amount of badger is deposited to badgerSett and one receives badgerSett share tokens in return which are stored in the balances mapping of the user. So far this is correct. The balanceOfToken function should then...

Yearn vault withdrawals in redeems will always fail leading to lock/loss of user deposits

Handle 0xRajeev Vulnerability details Impact The withdrawFromVault calculates the token balance of contract before withdrawal and saves it in previousBalance. It then withdraws from the Yearn vault and calculates the token balance after withdrawal to save it in currentBalance. So currentBalance...

CVE-2021-34386

Trusty TLK contains a vulnerability in the NVIDIA TLK kernel where an integer overflow in the calloc size calculation can cause the multiplication of count and size can overflow, which might lead to heap overflows...

Integer overflow

Trusty TLK contains a vulnerability in the NVIDIA TLK kernel where an integer overflow in the calloc size calculation can cause the multiplication of count and size can overflow, which might lead to heap overflows...

Function foreclosureTimeUser returns a shorter user's foreclosure time than expected

Handle shw Vulnerability details Impact The function foreclosureTimeUser of RCTreasury underestimates the user's foreclosure time if the current time is not the user's last rent calculation time. The underestimation of the foreclosure time could cause wrong results when determining the new owner ...

[ASA-202106-32] vivaldi: multiple issues

Arch Linux Security Advisory ASA-202106-32 ========================================== Severity: Critical Date : 2021-06-15 CVE-ID : CVE-2021-30544 CVE-2021-30545 CVE-2021-30546 CVE-2021-30547 CVE-2021-30548 CVE-2021-30549 CVE-2021-30550 CVE-2021-30551 CVE-2021-30552 CVE-2021-30553 Package : vival...

[ASA-202106-31] chromium: multiple issues

Arch Linux Security Advisory ASA-202106-31 ========================================== Severity: Critical Date : 2021-06-15 CVE-ID : CVE-2021-30544 CVE-2021-30545 CVE-2021-30546 CVE-2021-30547 CVE-2021-30548 CVE-2021-30549 CVE-2021-30550 CVE-2021-30551 CVE-2021-30552 CVE-2021-30553 Package :...

SUSE: Security Advisory (SUSE-SU-2016:0334-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Siemens SIMATIC NET CP 443-1 OPC UA

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Siemens Equipment: SIMATIC NET CP 443-1 OPC UA Vulnerabilities: Improper Input Validation, Improper Restriction of Operations within the Bounds of a Memory Buffer, Incorrect Calculation, Classic Buffer...

[ASA-202106-19] keycloak: incorrect calculation

Arch Linux Security Advisory ASA-202106-19 ========================================== Severity: Low Date : 2021-06-01 CVE-ID : CVE-2021-3461 Package : keycloak Type : incorrect calculation Remote : Yes Link : https://security.archlinux.org/AVG-1994 Summary ======= The package keycloak before...

[ASA-202106-1] opera: multiple issues

Arch Linux Security Advisory ASA-202106-1 ========================================= Severity: High Date : 2021-06-01 CVE-ID : CVE-2021-30506 CVE-2021-30507 CVE-2021-30508 CVE-2021-30509 CVE-2021-30510 CVE-2021-30511 CVE-2021-30512 CVE-2021-30513 CVE-2021-30514 CVE-2021-30515 CVE-2021-30516...

PT-2021-24616

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.36 Description The issue concerns the use of a local variable for calculating the final log size in the EFI TPM module. The actual impact and attack plausibility have not yet been proven. Recommendations Fo...

PT-2021-28641

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.118 Description The issue concerns the use of a local variable for calculating the final log size in the EFI TPM module. The actual impact and attack plausibility have not yet been proven. Recommendations Fo...

PT-2021-24578

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.11.20 Description The issue concerns the use of a local variable for calculating the final log size in the EFI TPM module. The actual impact and attack plausibility have not yet been proven. Recommendations Fo...

Withdrawable.withdraw does not decrease pendingWithdrawals

Handle cmichel Vulnerability details Vulnerability Details The name pendingWithdrawals indicates that this storage variable tracks the withdrawals that need yet to be paid out which also matches the behavior in increaseWithdrawal. So it should be decreased when withdrawing in withdraw but it is...