Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS due to a memory leak in VFRRT.cpp. Details Denial of Service DoS describes a family of attacks, all aimed at making a system inaccessible to its intended and legitimate users. Unlike other vulnerabilities, DoS...

FreeType commit 1e2eb65048f75c64b68708efed6ce904c31f3b2f was discovered to contain a heap buffer overflow via the function sfnt_init_face.

...

PT-2022-19906 · Mediawiki +1 · Mediawiki Nimbus Skin +1

Name of the Vulnerable Software and Affected Versions: MediaWiki Nimbus skin versions through 1.37.2 Description: The issue allows XSS in Advertise link messages. Recommendations: For MediaWiki Nimbus skin versions through 1.37.2, update to a version after 6f9c8fb868345701d9544a54d9752515aace39df...

PT-2022-19903 · Mediawiki +1 · Mediawiki Semanticdrilldown Extension +1

Name of the Vulnerable Software and Affected Versions: MediaWiki SemanticDrilldown extension versions through 1.37.2 Description: The issue allows SQL injection with certain '-' and ' ' constraints. Recommendations: For MediaWiki SemanticDrilldown extension versions through 1.37.2, update to a...

Fedora: Security Advisory for commit-stream (FEDORA-2022-5cbd6de569)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for commit-stream (FEDORA-2022-3a63897745)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 34 Update: commit-stream-0.1.2-6.fc34

OSINT tool for finding Github repositories by extracting commit logs in real time from the Github event API...

[SECURITY] Fedora 35 Update: commit-stream-0.1.2-6.fc35

OSINT tool for finding Github repositories by extracting commit logs in real time from the Github event API...

RUSTSEC-2022-0017 `array!` macro is unsound when its length is impure constant

Affected versions of this crate did substitute the array length provided by an user at compile-time multiple times. When an impure constant expression is passed as an array length such as a result of an impure procedural macro, this can result in the initialization of an array with uninitialized...

`array!` macro is unsound when its length is impure constant

Affected versions of this crate did substitute the array length provided by an user at compile-time multiple times. When an impure constant expression is passed as an array length such as a result of an impure procedural macro, this can result in the initialization of an array with uninitialized...

GSD-2022-1002517 netfilter: nf_tables: initialize registers in nft_do_chain()

netfilter: nftables: initialize registers in nftdochain This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.309 by commit...

GSD-2022-1002516 mac80211: fix potential double free on mesh join

mac80211: fix potential double free on mesh join This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.309 by commit...

GSD-2022-1002514 jffs2: fix use-after-free in jffs2_clear_xattr_subsystem

jffs2: fix use-after-free in jffs2clearxattrsubsystem This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.311 by commit...

GSD-2022-1002510 NFSD: prevent underflow in nfssvc_decode_writeargs()

NFSD: prevent underflow in nfssvcdecodewriteargs This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.311 by commit...

GSD-2022-1002506 ALSA: firewire-lib: fix uninitialized flag for AV/C deferred transaction

ALSA: firewire-lib: fix uninitialized flag for AV/C deferred transaction This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.311 by commit...

GSD-2022-1002505 ASoC: atmel: Add missing of_node_put() in at91sam9g20ek_audio_probe

ASoC: atmel: Add missing ofnodeput in at91sam9g20ekaudioprobe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.311 by commit...

GSD-2022-1002504 ASoC: mxs: Fix error handling in mxs_sgtl5000_probe

ASoC: mxs: Fix error handling in mxssgtl5000probe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.311 by commit...

GSD-2022-1002501 scsi: pm8001: Fix abort all task initialization

scsi: pm8001: Fix abort all task initialization This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.311 by commit...

GSD-2022-1002500 drm/tegra: Fix reference leak in tegra_dsi_ganged_probe

drm/tegra: Fix reference leak in tegradsigangedprobe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.311 by commit...

GSD-2022-1002492 net/x25: Fix null-ptr-deref caused by x25_disconnect

net/x25: Fix null-ptr-deref caused by x25disconnect This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.311 by commit...