Mozilla Firefox ESR < 102.10

The version of Firefox ESR installed on the remote Windows host is prior to 102.10. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2023-14 advisory. - Mozilla developers Andrew Osmond, Sebastian Hengst, Andrew McCreight, and the Mozilla Fuzzing Team reported memor...

Denial Of Service (DoS)

Snappier is vulnerable to Denial Of Service DoS. The vulnerability exists because the Short-lived stack references to locations outside buffers may become invalid if they exist during a GC compaction, which leads to an attacker causing an application crash by providing a malicious input...

Snappier vulnerable to buffer overrun due to improper restriction of operations within the bounds of a memory buffer

Impact This is a buffer overrun vulnerability that can affect any user of Snappier 1.1.0. In this release, much of the code was rewritten to use byte references rather than pointers to pinned buffers. This change generally improves performance and reduces workload on the garbage collector. Howeve...

Buffer overflow

Snappier is a high performance C implementation of the Snappy compression algorithm. This is a buffer overrun vulnerability that can affect any user of Snappier 1.1.0. In this release, much of the code was rewritten to use byte references rather than pointers to pinned buffers. This change...

CVE-2023-28638 Stack references to locations outside buffers may become invalid if they exist during a GC compaction in Snappier

Snappier is a high performance C implementation of the Snappy compression algorithm. This is a buffer overrun vulnerability that can affect any user of Snappier 1.1.0. In this release, much of the code was rewritten to use byte references rather than pointers to pinned buffers. This change...

GSD-2023-1001298 mm, compaction: fix fast_isolate_around() to stay within boundaries

mm, compaction: fix fastisolatearound to stay within boundaries This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.163 by commit...

GSD-2023-1000955 mm, compaction: fix fast_isolate_around() to stay within boundaries

mm, compaction: fix fastisolatearound to stay within boundaries This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.87 by commit...

GSD-2023-1000505 mm, compaction: fix fast_isolate_around() to stay within boundaries

mm, compaction: fix fastisolatearound to stay within boundaries This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.17 by commit...

GSD-2022-1003744 mm, compaction: fast_find_migrateblock() should return pfn in the target zone

mm, compaction: fastfindmigrateblock should return pfn in the target zone This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.198 by commit...

GSD-2022-1003552 mm, compaction: fast_find_migrateblock() should return pfn in the target zone

mm, compaction: fastfindmigrateblock should return pfn in the target zone This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.121 by commit...

GSD-2022-1003010 mm, compaction: fast_find_migrateblock() should return pfn in the target zone

mm, compaction: fastfindmigrateblock should return pfn in the target zone This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.14 by commit...

GSD-2022-1002666 mm, compaction: fast_find_migrateblock() should return pfn in the target zone

mm, compaction: fastfindmigrateblock should return pfn in the target zone This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.3 by commit...

PT-2022-32267

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.35 through 4.14.282 Description A potential security issue exists due to a compaction sysfs file leak in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2022-32330

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.318 Description The issue is related to a compaction sysfs file leak in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior t...

PT-2022-31815

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.121 Description The issue is related to the fast find migrateblock function in the mm, compaction module. It is mentioned that this function should return pfn in the target zone. The actual impact and attac...

PT-2022-31331

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.14 Description A potential security issue exists due to a compaction sysfs file leak in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-31569

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.46 Description The issue is related to the fast find migrateblock function in the memory management compaction code. It is noted that this function should return the page frame number pfn in the target zone...

PT-2022-31273

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.14 Description The issue is related to the fast find migrateblock function in the memory management compaction code. It is noted that this function should return the page frame number pfn in the target zone...

RLSA-2021:3447 Important: kernel security and bug fix update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: powerpc: KVM guest OS users can cause host OS memory corruption CVE-2021-37576 kernel: slab-out-of-bounds access in xdrsetpagebase in net/sunrpc/xdr.c CVE-2021-38201 For more details abou...

ALSA-2021:3447 Important: kernel security and bug fix update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: powerpc: KVM guest OS users can cause host OS memory corruption CVE-2021-37576 kernel: slab-out-of-bounds access in xdrsetpagebase in net/sunrpc/xdr.c CVE-2021-38201 For more details abou...