PT-2022-28192

Name of the Vulnerable Software and Affected Versions ctx affected versions not specified Description The ctx project on PyPI was compromised, and a malicious version was uploaded, which collects environment variables, including sensitive data like passwords and API keys, such as AWS ACCESS KEY I...

PYSEC-2022-199

The ctx hosted project on PyPI was taken over via user account compromise and replaced with a malicious project which contained runtime code which collected the content of os.environ.items when instantiating Ctx objects...

PYSEC-2022-199

The ctx hosted project on PyPI was taken over via user account compromise and replaced with a malicious project which contained runtime code which collected the content of os.environ.items when instantiating Ctx objects...

GSD-2022-1002521 backdoor in ctx version 0.1.2-1, 0.1.2-2, 0.1.4, 0.2, 0.2.1, 0.2.2, 0.2.2.1, 0.2.3, 0.2.4, 0.2.5, 0.2.6

In PyPI ctx version 0.1.2-1, 0.1.2-2, 0.1.4, 0.2, 0.2.1, 0.2.2, 0.2.2.1, 0.2.3, 0.2.4, 0.2.5, 0.2.6 a backdoor exists in the ctx package that can be attacked via a malicious package update resulting in credential theft from environment variables...

PT-2022-30155

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.33 Description A NULL pointer dereference issue exists in the cal ctx v4l2 init formats function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel version...

PT-2022-29539

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.2 Description A NULL pointer dereference issue was found in the cal ctx v4l2 init formats function. This issue was introduced in version v5.12 and fixed in version v5.17.2. The actual impact and attack...

PT-2022-29847

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.19 Description A NULL pointer dereference issue exists in the cal ctx v4l2 init formats function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel version...

PT-2022-7474

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a hung thread due to erroneous iotlb entries in the vhost component of the Linux kernel. Specifically, in vhost iotlb add range ctx, the range size can overflow t...

PT-2025-8182

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference issue was found in the Linux kernel, specifically in the cal ctx v4l2 init formats function. This issue occurs when devm kzalloc fails and assigns a NULL value...

PT-2022-36982

Name of the Vulnerable Software and Affected Versions blosc2 affected versions not specified Description The issue is related to a crash caused by a memcpy parameter overlap. Technical details about the crash include the function names ZSTD createDDict, blosc run decompression with context, and...

Important: Red Hat Security Advisory: kpatch-patch security update

An update for kpatch-patch is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

PT-2021-9100

Name of the Vulnerable Software and Affected Versions LibreSSL versions 2.9.1 through 3.2.1 Description The issue is a heap-based buffer over-read in the do print ex function, which is called from asn1 item print ctx and ASN1 item print. Recommendations For LibreSSL versions 2.9.1 through 3.2.1,...

PT-2021-9101

Name of the Vulnerable Software and Affected Versions LibreSSL versions 2.9.1 through 3.2.1 Description The issue is related to an out-of-bounds read in the asn1 item print ctx function, which is called from asn1 template print ctx. Recommendations For versions 2.9.1 through 3.2.1, consider...

Double free

An issue was discovered in the Linux kernel before 5.8.2. fs/iouring.c has a use-after-free related to ioasynctaskfunc and ctx reference holding, aka CID-6d816e088c35...

CVE-2020-36387

An issue was discovered in the Linux kernel before 5.8.2. fs/iouring.c has a use-after-free related to ioasynctaskfunc and ctx reference holding, aka CID-6d816e088c35...

DEBIAN-CVE-2020-36385

An issue was discovered in the Linux kernel before 5.10. drivers/infiniband/core/ucma.c has a use-after-free because the ctx is reached via the ctxlist in some ucmamigrateid situations where ucmaclose is called, aka CID-f5449e74802c...

CVE-2020-36387: Use After Free

An issue was discovered in the Linux kernel before 5.8.2. fs/iouring.c has a use-after-free related to ioasynctaskfunc and ctx reference holding, aka CID-6d816e088c35...

CVE-2021-29612

TensorFlow is an end-to-end open source platform for machine learning. An attacker can trigger a heap buffer overflow in Eigen implementation of tf.rawops.BandedTriangularSolve. The...

PT-2021-28214

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-use-after-free READ 4 crash has been reported. The crash involves the ZSTD freeDDict, blosc2 free ctx, and blosc2 schunk free functions...

PT-2021-28108

Name of the Vulnerable Software and Affected Versions blosc2 affected versions not specified Description The issue is related to a heap-buffer-overflow read, which can cause a crash. Technical details about the crash include the blosc d, blosc getitem, and blosc2 getitem ctx functions...