Apache ZooKeeper Buffer Overflow

The vulnerability of the centralized service for supporting information about configuration, naming, distributed synchronization, and providing group services in Apache ZooKeeper is related to the use of the “cmd:” packet-mode syntax. Exploiting this vulnerability allows a malicious actor to...

Linux OID Handler Component Heap Buffer Overflow

The vulnerability of the nsVacmAccessTable function in the OID Handler component of the Net-SNMP software suite for the Linux operating system is related to the assignment of the NULL pointer. Exploitation of this vulnerability could allow an attacker to compromise data integrity...

Linux TCP Component Data Compromise

The vulnerability of the TCP component in the Linux operating system’s kernel is related to a division by zero in the tcprcvspaceadjust function. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

PMC-Sierra SPC 8001 SAS/SATA Kernel Heap Buffer Overflow DoS

The vulnerability of the pm8001execinternaltmftask function in the drivers/scsi/pm8001/pm8001sas.c file of the PMC-Sierra SPC 8001 SAS/SATA kernel for the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to...

amdgpu Data Compromise

The vulnerability of the amdgpu component in the Linux operating system is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow an attacker to compromise the integrity of data...

pgjdbc Input Validation

The vulnerability of the JDBC driver pgjdbc, which allows Java programs to connect to PostgreSQL databases, is related to the creation of arbitrary files. Exploiting this vulnerability can enable a malicious actor to compromise the confidentiality, integrity, and accessibility of protected...

Linux iommu Data Compromise

The vulnerability of the iommu component in the Linux operating system’s kernel is related to the use of memory after deallocation. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

Linux OID Handler Component Heap Buffer Overflow

The vulnerability of the nsVacmAccessTable function in the OID Handler component of the Net-SNMP software suite for the Linux operating system is related to the assignment of the NULL pointer. Exploitation of this vulnerability could allow an attacker to compromise data integrity...

netty: HTTP request smuggling

A HTTP smuggling flaw was found in HttpObjectDecoder.java in Netty in versions prior to version 4.1.44. HTTP headers with an invalid fold, in this case CRLF carriage return, line feed without being followed by SP space or HTAB horizontal tab, result in situations where headers can be misread. Dat...

Vim tagstack_clear_entry Heap Buffer Overflow DoS

The vulnerability of the tagstackclearentry function in the src/alloc.c file of the Vim text editor exists due to a mistake in pointer handling after memory deallocation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

SLPD Lite OpenBMC Data Compromise

The vulnerability of the SLP UDP server slpd-lite in the OpenBMC operating system is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows a remote attacker to compromise privacy, integrity, and accessibility by sending a specially...

Tenda i22 Router Data Compromise

The vulnerability of the formApPortalPhoneAuth function in the Tenda i22 router microprogramming software is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

Tenda i22 Router Data Compromise

The vulnerability of the formApPortalWebAuth function in the Tenda i22 router microprogramming system is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

Tenda i22 Router Data Compromise

The vulnerability of the formApPortalOneKeyAuth function in the Tenda i22 router microprogramming software is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

ROS-20240820-14

A vulnerability in the JavaFX component of Oracle GraalVM Enterprise Edition virtual machine and Oracle Java SE software platform is related to insufficient input validation. Oracle Java SE platform is related to insufficient input data validation. Exploitation of the vulnerability could allow an...

ROS-20240820-12

A vulnerability in the JavaFX component of Oracle GraalVM Enterprise Edition virtual machine and Oracle Java SE software platform is related to insufficient input validation. Oracle Java SE platform is related to insufficient input data validation. Exploitation of the vulnerability could allow an...

UBUNTU-CVE-2024-42279

In the Linux kernel, the following vulnerability has been resolved: spi: microchip-core: ensure TX and RX FIFOs are empty at start of a transfer While transmitting with rxlen == 0, the RX FIFO is not going to be emptied in the interrupt handler. A subsequent transfer could then read crap from the...

SUSE CVE-2023-31356

Incomplete system memory cleanup in SEV firmware could allow a privileged attacker to corrupt guest private memory, potentially resulting in a loss of data integrity...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a failure of the microchip-core component to ensure that the TX and RX FIFOs are empty at the start of a...

Linux NFS File System Server Buffer Overflow

The vulnerability of the nfsd4decodeBitmap4 function in the Linux kernel’s NFS file system is related to buffer out-of-bounds writing. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and integrity of the protected information...