16621 matches found
CVE-2023-4515
In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate command request size In commit 2b9b8f3b68ed "ksmbd: validate command payload size", except for SMB2OPLOCKBREAKHE command, the request size of other commands is not checked, it's not expected. Fix it by add check f...
kernel: nfsd: don't ignore the return code of svc_proc_register()
In the Linux kernel, the following vulnerability has been resolved: nfsd: don't ignore the return code of svcprocregister Currently, nfsdprocstatinit ignores the return value of svcprocregister. If the procfile creation fails, then the kernel will WARN when it tries to remove the entry later. Fix...
CVE-2025-38546
In the Linux kernel, the following vulnerability has been resolved: atm: clip: Fix memory leak of struct clipvcc. ioctlATMARPMKIP allocates struct clipvcc and set it to vcc-userback. The code assumes that vccdestroysocket passes NULL skb to vcc-push when the socket is closed, and then clippush...
kernel: nfsd: don't ignore the return code of svc_proc_register()
In the Linux kernel, the following vulnerability has been resolved: nfsd: don't ignore the return code of svcprocregister Currently, nfsdprocstatinit ignores the return value of svcprocregister. If the procfile creation fails, then the kernel will WARN when it tries to remove the entry later. Fix...
Linux Distros Unpatched Vulnerability : CVE-2024-52867
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - guix-daemon in GNU Guix before 5ab3c4c allows privilege escalation because build outputs are accessible by local users before file metadata concerns e.g., for...
Linux Distros Unpatched Vulnerability : CVE-2020-1763
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An out-of-bounds buffer read flaw was found in the pluto daemon of libreswan from versions 3.27 till 3.31 where, an unauthenticated attacker could use this flaw...
DEBIAN-CVE-2023-3866
In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate session id and tree id in the compound request This patch validate session id and tree id in compound request. If first operation in the compound is SMB2 ECHO request, ksmbd bypass session and tree validation. So...
CVE-2023-4130 ksmbd: fix wrong next length validation of ea buffer in smb2_set_ea()
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix wrong next length validation of ea buffer in smb2setea There are multiple smb2eainfo buffers in FILEFULLEAINFORMATION request from client. ksmbd find next smb2eainfo using -NextEntryOffset of current smb2eainfo. ksmbd...
CVE-2025-38501
In the Linux kernel, the following vulnerability has been resolved: ksmbd: limit repeated connections from clients with the same IP Repeated connections from clients with the same IP address may exhaust the max connections and prevent other normal client connections. This patch limit repeated...
Linux Distros Unpatched Vulnerability : CVE-2024-33601
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nscd: netgroup cache may terminate daemon on memory allocation failure The Name Service Cache Daemon's nscd netgroup cache uses xmalloc or xrealloc and these...
Malicious code in module-daemon-sun-stub-lambda (npm)
The package module-daemon-sun-stub-lambda was found to contain malicious code...
Malicious code in csp-daemon-notifications-queue (npm)
The package csp-daemon-notifications-queue was found to contain malicious code...
Malicious code in secure-daemon-bash-code-array (npm)
The package secure-daemon-bash-code-array was found to contain malicious code...
Malicious code in uglify-validate-daemon-emulate-module (npm)
The package uglify-validate-daemon-emulate-module was found to contain malicious code...
Malicious code in theta-encode-daemon-rho-rain (npm)
The package theta-encode-daemon-rho-rain was found to contain malicious code...
MAL-2025-20781 Malicious code in fork-daemon-container-wind-boolean (npm)
The package fork-daemon-container-wind-boolean was found to contain malicious code...
Malicious code in fork-daemon-container-wind-boolean (npm)
The package fork-daemon-container-wind-boolean was found to contain malicious code...
MAL-2025-36803 Malicious code in theta-encode-daemon-rho-rain (npm)
The package theta-encode-daemon-rho-rain was found to contain malicious code...