14601 matches found
CVE-2021-47212 net/mlx5: Update error handler for UCTX and UMEM
In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Update error handler for UCTX and UMEM In the fast unload flow, the device state is set to internal error, which indicates that the driver started the destroy process. In this case, when a destroy command is being...
CVE-2021-47212
CVE-2021-47212 affects the Linux kernel in the mlx5/ib stack. The issue arises in the fast unload flow where the device state enters internal error during a destroy command, causing a call path that would return EIO. The fix updates MLX5_CMD_OP_DESTROY_UCTX and MLX5_CMD_OP_DESTROY_UMEM to return ...
CVE-2021-47197 net/mlx5e: nullify cq->dbg pointer in mlx5_debug_cq_remove()
In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: nullify cq-dbg pointer in mlx5debugcqremove Prior to this patch in case mlx5coredestroycq failed it proceeds to rest of destroy operations. mlx5coredestroycq could be called again by user and cause additional call of...
DEBIAN-CVE-2024-3119
A buffer overflow vulnerability exists in all versions of sngrep since v0.4.2, due to improper handling of 'Call-ID' and 'X-Call-ID' SIP headers. The functions sipgetcallid and sipgetxcallid in sip.c use the strncpy function to copy header contents into fixed-size buffers without checking the dat...
UBUNTU-CVE-2024-3119
A buffer overflow vulnerability exists in all versions of sngrep since v0.4.2, due to improper handling of 'Call-ID' and 'X-Call-ID' SIP headers. The functions sipgetcallid and sipgetxcallid in sip.c use the strncpy function to copy header contents into fixed-size buffers without checking the dat...
CVE-2024-30729
This CVE entry is rejected/not used and does not represent an active vulnerability entry.
CVE-2024-29444
This CVE entry is rejected/not used and does not represent an active vulnerability.
CVE-2024-3119 Stack-Buffer Overflow in 'Call-ID' and 'X-Call-ID' SIP Header Processing in sngrep
A buffer overflow vulnerability exists in all versions of sngrep since v0.4.2, due to improper handling of 'Call-ID' and 'X-Call-ID' SIP headers. The functions sipgetcallid and sipgetxcallid in sip.c use the strncpy function to copy header contents into fixed-size buffers without checking the dat...
CVE-2024-20678
Remote Procedure Call Runtime Remote Code Execution Vulnerability...
CVE-2024-20678
Remote Procedure Call Runtime Remote Code Execution Vulnerability...
CVE-2024-20678 Remote Procedure Call Runtime Remote Code Execution Vulnerability
...
CVE-2024-20678 Remote Procedure Call Runtime Remote Code Execution Vulnerability
...
CVE-2024-20678
Public documents in the Connected set do not provide concrete technical details (affected product, root cause, impact, or remediation) for CVE-2024-20678; monitor for updates.
PT-2024-2806 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue is related to a Remote Procedure Call Runtime Remote Code Execution problem, which is associated with accessing a resource through incompatible types. This can allow a...
Microsoft Windows Remote Procedure Call Runtime 安全漏洞
Microsoft Windows Remote Procedure Call Runtime is a powerful technology for creating distributed client/server programs from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Remote Procedure Call Runtime. An attacker could exploit the vulnerability to remotely...
PT-2024-23575 · Ros2 · Ros2
Name of the Vulnerable Software and Affected Versions: ROS2 Galactic Geochelone versions 2 Description: A remote code execution issue exists due to an OS command injection vulnerability in the command processing or system call components of ROS2, including External Command Execution Modules, Syst...
Improper Access Control
github.com/mattermost/mattermost-server is vulnerable to Improper Access Control. The vulnerability is due to a flaw that allows an attacker in a channel with an active call to remain in the call even after being removed from the channel...
CVE-2024-27897
Input verification vulnerability in the call module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...