14968 matches found
GSD-2022-1004134 tcp/dccp: Fix a data-race around sysctl_tcp_fwmark_accept.
tcp/dccp: Fix a data-race around sysctltcpfwmarkaccept. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.15 by commit...
GSD-2022-1004133 ip: Fix a data-race around sysctl_ip_autobind_reuse.
ip: Fix a data-race around sysctlipautobindreuse. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.15 by commit...
GSD-2022-1004125 net: stmmac: fix dma queue left shift overflow issue
net: stmmac: fix dma queue left shift overflow issue This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.15 by commit...
GSD-2022-1004124 net: dsa: microchip: ksz_common: Fix refcount leak bug
net: dsa: microchip: kszcommon: Fix refcount leak bug This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.15 by commit...
GSD-2022-1004121 tcp: Fix data-races around sysctl_tcp_migrate_req.
tcp: Fix data-races around sysctltcpmigratereq. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.15 by commit...
GSD-2022-1004120 tcp: Fix a data-race around sysctl_tcp_notsent_lowat.
tcp: Fix a data-race around sysctltcpnotsentlowat. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.15 by commit...
GSD-2022-1004110 ip: Fix data-races around sysctl_ip_prot_sock.
ip: Fix data-races around sysctlipprotsock. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.15 by commit...
GSD-2022-1004104 tcp: Fix data-races around sysctl_tcp_slow_start_after_idle.
tcp: Fix data-races around sysctltcpslowstartafteridle. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.15 by commit...
GSD-2022-1004102 gpio: gpio-xilinx: Fix integer overflow
gpio: gpio-xilinx: Fix integer overflow This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.15 by commit...
GSD-2022-1004099 mm/mempolicy: fix uninit-value in mpol_rebind_policy()
mm/mempolicy: fix uninit-value in mpolrebindpolicy This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.15 by commit...
PT-2022-32741
Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.15 through 5.15.50 Description The issue concerns commit metadata in postsuspend after a worker stops. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions 3.15...
PT-2022-33011
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.202 Description The issue concerns commit metadata in postsuspend after a worker stops. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...
PT-2022-32899
Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.15 through 5.10.126 Description The issue concerns commit metadata in postsuspend after a worker stops. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions 3.15...
PT-2022-33202
Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.15 through 4.9.320 Description The issue concerns commit metadata in postsuspend after a worker stops. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions 3.15...
PT-2022-32538
Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.15 through 5.18.7 Description The issue concerns commit metadata in postsuspend after a worker stops. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions 3.15...
[SECURITY] Fedora 36 Update: commit-stream-0.1.2-8.fc36
OSINT tool for finding Github repositories by extracting commit logs in real time from the Github event API...
Ruby on Rails: Incomplete fix for CVE-2022-32209 (XSS in Rails::Html::Sanitizer under certain configurations)
While building a PoC for CVE-2022-32209, I noticed that I could not fix my vulnerable application by updating https://github.com/rails/rails-html-sanitizer from 1.4.2 to 1.4.3 even though the Hackerone report about this vulnerability suggested that this should fix it see here:...
CVE-2022-36234
SimpleNetwork TCP Server commit 29bc615f0d9910eb2f59aa8dff1f54f0e3af4496 was discovered to contain a double free vulnerability which is exploited via crafted TCP packets...
