EUVD-2010-3718

Malware in sbrugna...

CVE-2010-3739

The audit facility in the Security component in IBM DB2 UDB 9.5 before FP6a uses instance-level audit settings to capture connection aka CONNECT and AUTHENTICATION events in certain circumstances in which database-level audit settings were intended, which might make it easier for remote attackers...

CVE-2022-49139

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: fix null ptr deref on hcisyncconncompleteevt This event is just specified for SCO and eSCO link types. On the reception of a HCISynchronousConnectionComplete for a BDADDR of an existing LE connection, LE link type and ...

DEBIAN-CVE-2022-49138

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcievent: Ignore multiple conn complete events When one of the three connection complete events is received multiple times for the same handle, the device is registered multiple times which leads to memory corruptions...

CVE-2022-49138

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcievent: Ignore multiple conn complete events When one of the three connection complete events is received multiple times for the same handle, the device is registered multiple times which leads to memory corruptions...

CVE-2022-49701

CVE-2022-49701 affects the Linux kernel ibmvfc SCSI driver. The issue arises because sub-queues and event pool resources were allocated/freed for every CRQ connection event (e.g., reset, LPM) instead of only during probe/remove, creating a race window and potential list corruption when queues are...

CVE-2022-49138

CVE-2022-49138 affects the Linux kernel Bluetooth stack, specifically the hci_event path. The issue arises when multiple conn_complete events for the same handle can cause memory corruption due to repeated registrations; the kernel introduces HCI_CONN_HANDLE_UNSET and checks against HCI_CONN_HAND...

CVE-2022-49138 Bluetooth: hci_event: Ignore multiple conn complete events

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcievent: Ignore multiple conn complete events When one of the three connection complete events is received multiple times for the same handle, the device is registered multiple times which leads to memory corruptions...

CVE-2022-49138 Bluetooth: hci_event: Ignore multiple conn complete events

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcievent: Ignore multiple conn complete events When one of the three connection complete events is received multiple times for the same handle, the device is registered multiple times which leads to memory corruptions...

Zephyr 资源管理错误漏洞

Zephyr is an extensible real-time operating system RTOS open-sourced by the Zephyr Project. A resource management error vulnerability exists in Zephyr 3.3 and earlier versions that stems from not clearing global references to state pointers after processing connection events, which could allow a...