10268 matches found
CVE-2021-29649
An issue was discovered in the Linux kernel before 5.11.11. The user mode driver UMD has a copyprocess memory leak, related to a lack of cleanup steps in kernel/usermodedriver.c and kernel/bpf/preload/bpfpreloadkern.c, aka CID-f60a85cad677...
AZL-6552 CVE-2021-29649 affecting package kernel for versions less than 5.10.78.1-1
An issue was discovered in the Linux kernel before 5.11.11. The user mode driver UMD has a copyprocess memory leak, related to a lack of cleanup steps in kernel/usermodedriver.c and kernel/bpf/preload/bpfpreloadkern.c, aka CID-f60a85cad677...
CVE-2021-29649
An issue was discovered in the Linux kernel before 5.11.11. The user mode driver UMD has a copyprocess memory leak, related to a lack of cleanup steps in kernel/usermodedriver.c and kernel/bpf/preload/bpfpreloadkern.c, aka CID-f60a85cad677...
Memory corruption
An issue was discovered in the Linux kernel before 5.11.11. The user mode driver UMD has a copyprocess memory leak, related to a lack of cleanup steps in kernel/usermodedriver.c and kernel/bpf/preload/bpfpreloadkern.c, aka CID-f60a85cad677...
ClearURLs - An Add-On Based On The New WebExtensions Technology And Will Automatically Remove Tracking Elements From URLs To Help Protect Your Privacy
ClearURLs is an add-on based on the new WebExtensions technology and is optimized for Firefox and Chrome based browsers. This extension will automatically remove tracking elements from URLs to help protect your privacy when browse through the Internet, which is regularly updated by us and can be...
The vulnerability of Trend Micro’s Virus Scan API (VSAPI) and Advanced Threat Scan Engine (ATSE) lies in improper resource cleanup or release mechanisms. This allows attackers to cause the software to crash or fail to perform its functions.
The vulnerability of Trend Micro’s Virus Scan API VSAPI and Advanced Threat Scan Engine ATSE lies in improper resource cleanup or release. Exploiting this vulnerability can allow an attacker to cause the software to crash or experience service failures due to a specially created file...
PT-2021-8002 · Linux +4 · Linux Kernel +4
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the use of memory after it has been freed in the Direct Rendering Manager DRM subsystem of the Linux kernel. This occurs due to an incorrect cleanup procedure i...
GitLab Code Execution Vulnerability
GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. A security vulnerability exists in GitLab 13.8 and later,...
The vulnerability of the Intel PROSet/Wireless WiFi connection utility arises from incomplete cleaning of temporary or auxiliary resources. This allows a malicious actor to disclose protected information or cause service failures.
The vulnerability of the Intel PROSet/Wireless WiFi networking connectivity tool exists due to incomplete cleanup of temporary or auxiliary resources. Exploiting this vulnerability can allow a malicious actor to disclose protected information or cause service failures...
Input validation
Incomplete cleanup in some IntelR PROSet/Wireless WiFi and Killer TM drivers before version 22.0 may allow a privileged user to potentially enable information disclosure and denial of service via adjacent access...
Intel PROSet Wireless Information Disclosure Vulnerability
Intel PROSet Wireless is a driver for the Intel PROSet wireless network card from Intel Corporation USA. An information disclosure vulnerability exists in Intel PROSet Wireless, which stems from an incomplete cleanup that could allow a privileged user to enable information disclosure and denial o...
OESA-2021-1018 php security update
PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is...
Cleaning up after Emotet: the law enforcement file
This blog post was authored by Hasherezade and Jérôme Segura Emotet has been the most wanted malware for several years. The large botnet is responsible for sending millions of spam emails laced with malicious attachments. The once banking Trojan turned into loader was responsible for costly...
Pow! Emotet’s down. Is it out?
In a coordinated action, multiple law enforcement agencies have seized control of the Emotet botnet. Agencies from eight countries worked together to deliver what they hope will be a decisive blow against one of the worlds most dangerous and sophisticated computer security threats. The Emotet...
openSUSE Security Update : cobbler (openSUSE-2021-46)
This update for cobbler fixes the following issues : - Add cobbler-tests subpackage for unit testing for openSUSE/SLE - Adds LoadModule definitions for openSUSE/SLE - Switch to new refactored auth module. - use systemctl to restart cobblerd on logfile rotation boo1169207 Mainline logrotate conf...
openSUSE Security Update : PackageKit (openSUSE-2020-2292)
This update for PackageKit fixes the following issue : - CVE-2020-16121: Fixed an Information disclosure in InstallFiles, GetFilesLocal and GetDetailsLocal bsc1176930. - Notify service manager when it shutdown and cleanup temporary files when PackageKit quits. bsc1169739 This update was imported...
openSUSE Security Update : xen (openSUSE-2020-2331)
This update for xen fixes the following issues : - CVE-2020-29480: Fixed an issue which could have allowed leak of non-sensitive data to administrator guests bsc117949 XSA-115. - CVE-2020-29481: Fixed an issue which could have allowd to new domains to inherit existing node permissions bsc1179498...
Security update for cobbler (moderate)
openSUSE Security Update: Security update for cobbler Announcement ID: openSUSE-SU-2021:0058-1 Rating: moderate References: 1020376 1029276 1048183 1074594 1075014 1081714 1081739 1090205 1097733 1101670 1104189 1104190 1104287 1105440 1105442 1113747 1128754 1128926 1130658 1134588 1149075 11518...
SUSE SLED15 / SLES15 Security Update : libzypp, zypper (SUSE-SU-2021:0109-1)
This update for libzypp, zypper fixes the following issues : Update zypper to version 1.14.41 Update libzypp to 17.25.4 CVE-2017-9271: Fixed information leak in the log file bsc1050625 bsc1177583 RepoManager: Force refresh if repo url has changed bsc1174016 RepoManager: Carefully tidy up the...
