47 matches found
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-409370)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-409370 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: fully validate NFTDATAVALUE on store to data registers register store...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-385539)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-385539 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: fully validate NFTDATAVALUE on store to data registers register store...
Admin Audit Trail - Less critical - Denial of Service - SA-CONTRIB-2025-068
The Admin Audit Trail module tracks logs of specific events that you'd like to review. When the submodule Admin Audit Trail: User Authentication is enabled, it logs user authentication events login, logout, and password reset requests. The module does not sufficiently limit some large values befo...
Data Is on the Menu — and AI’s Market Price Is High
...
kernel: netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
A flaw was found in the Netfilter nftables subsystem of the Linux kernel. A local user can exploit this vulnerability due to improper validation when storing values into data registers, allowing internal chain object pointers to be exposed. This issue results in information disclosure, which can...
kernel: netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
A flaw was found in the Netfilter nftables subsystem of the Linux kernel. A local user can exploit this vulnerability due to improper validation when storing values into data registers, allowing internal chain object pointers to be exposed. This issue results in information disclosure, which can...
kernel: netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
A flaw was found in the Netfilter nftables subsystem of the Linux kernel. A local user can exploit this vulnerability due to improper validation when storing values into data registers, allowing internal chain object pointers to be exposed. This issue results in information disclosure, which can...
netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
...
SUSE CVE-2024-42070
In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: fully validate NFTDATAVALUE on store to data registers register store validation for NFTDATAVALUE is conditional, however, the datatype is always either NFTDATAVALUE or NFTDATAVERDICT. This only requires a ne...
AZL-47154 CVE-2024-42070 affecting package kernel for versions less than 6.6.43.1-7
In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: fully validate NFTDATAVALUE on store to data registers register store validation for NFTDATAVALUE is conditional, however, the datatype is always either NFTDATAVALUE or NFTDATAVERDICT. This only requires a ne...
DEBIAN-CVE-2024-42070
In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: fully validate NFTDATAVALUE on store to data registers register store validation for NFTDATAVALUE is conditional, however, the datatype is always either NFTDATAVALUE or NFTDATAVERDICT. This only requires a ne...
UBUNTU-CVE-2024-42070
In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: fully validate NFTDATAVALUE on store to data registers register store validation for NFTDATAVALUE is conditional, however, the datatype is always either NFTDATAVALUE or NFTDATAVERDICT. This only requires a ne...
SUSE CVE-2017-18005
Exiv2 0.26 has a Null Pointer Dereference in the Exiv2::DataValue::toLong function in value.cpp, related to crafted metadata in a TIFF file...
A CISOs Practical Guide to Storage and Backup Ransomware Resiliency
One thing is clear. The "business value" of data continues to grow, making it an organization's primary piece of intellectual property. From a cyber risk perspective, attacks on data are the most prominent threat to organizations. Regulators, cyber insurance firms, and auditors are paying much...
IBM Spectrum Virtualize Access Control Error Vulnerability
IBM Spectrum Virtualize is a block storage virtualization system from IBM USA. It improves data value, security, and simplicity for new and existing storage infrastructures.An access control error vulnerability exists in IBM Spectrum Virtualize versions 8.2, 8.3, and 8.4. The vulnerability stems...
Command Execution Vulnerability in the Enterprise-Side Internet Integrated Management Platform of Beijing Yahong Century Technology Development Co.
Ltd. is a high-tech company specializing in Internet spatial data governance, network and information security and data value-added solutions and services. A command execution vulnerability exists in the enterprise-side Internet integrated management platform of Beijing Yahong Century Science and...
Exiv2::DataValue::read Heap Buffer Overflow DoS
The vulnerability of the Exiv2::DataValue::read function in the value.cpp library of the Exiv2 media metadata management library is related to incorrect memory address manipulation. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...
Enterprise Data Security: It’s Time to Flip the Established Approach
There’s an old saying when it comes to big undertakings: Don’t boil the ocean. Well, there’s hardly any bigger project in information security than trying to protect corporate data. But the reality is that too many organizations today are, in fact, “boiling the ocean” when it comes to their...
exiv2: null pointer dereference in the Exiv2::DataValue::toLong function in value.cpp
Exiv2 0.26 has a Null Pointer Dereference in the Exiv2::DataValue::toLong function in value.cpp, related to crafted metadata in a TIFF file...
exiv2: NULL pointer dereference in Exiv2::DataValue::copy in value.cpp leading to application crash
An issue was discovered in Exiv2 v0.26. The function Exiv2::DataValue::copy in value.cpp has a NULL pointer dereference...