2930 matches found
CVE-2021-39643
In icstartRetrieveEntryValue of acropora/app/identity/ic.c, there is a possible bypass of defense-in-depth due to missing validation of the return value. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for...
PT-2021-22688
Name of the Vulnerable Software and Affected Versions: Android kernel Description: The issue is related to a possible bypass of defense-in-depth due to missing validation of the return value in the ic startRetrieveEntryValue function of acropora/app/identity/ic.c. This could lead to local...
Grafana -- Directory Traversal
GitHub Security Labs reports: A vulnerability through which authenticated users could read out fully lowercase or fully uppercase .md files through directory traversal. Doing our own follow-up investigation we found a related vulnerability through which authenticated users could read out arbitrar...
Grafana -- Directory Traversal
GitHub Security Labs reports: A vulnerability through which authenticated users could read out fully lowercase or fully uppercase .md files through directory traversal. Doing our own follow-up investigation we found a related vulnerability through which authenticated users could read out arbitrar...
OverlayV1UniswapV3Market computes wrong market liquidity
Handle cmichel Vulnerability details The OverlayV1UniswapV3Market.fetchPricePoint tries to compute the market depth in OVL terms as marketLiquidity in ETH / ovlPrice in ETH per OVL. To get the market liquidity in ETH and not the other token pair, it uses the ethIs0 boolean. marketLiquidity = ethI...
GSD-2021-1002110 mm, slub: fix mismatch between reconstructed freelist depth and cnt
mm, slub: fix mismatch between reconstructed freelist depth and cnt This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.15 by commit...
PT-2021-26518
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.76 Description The issue is related to a mismatch between reconstructed freelist depth and cnt in the slub component of the Linux Kernel. The actual impact and attack plausibility have not yet been proven...
PT-2021-30513
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.76 Description The issue is related to a mismatch between reconstructed freelist depth and cnt in the slub component of the Linux Kernel. The actual impact and attack plausibility have not yet been proven...
PT-2021-30475
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.156 Description The issue is related to a mismatch between reconstructed freelist depth and cnt in the slub component of the Linux Kernel. The actual impact and attack plausibility have not yet been proven...
PT-2021-30575
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.15 Description The issue is related to a mismatch between reconstructed freelist depth and count in the slub allocator. The actual impact and attack plausibility have not yet been proven. Recommendations Fo...
PT-2021-30447
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.214 Description The issue is related to a mismatch between reconstructed freelist depth and cnt in the slub allocator. The actual impact and attack plausibility have not yet been proven. Recommendations For...
PT-2021-26480
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.156 Description The issue is related to a mismatch between reconstructed freelist depth and cnt in the slub allocator. The actual impact and attack plausibility have not yet been proven. Recommendations For...
PT-2021-26452
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.214 Description A potential issue exists in the Linux Kernel, specifically related to a mismatch between reconstructed freelist depth and count in the slub module. The actual impact and attack plausibility...
PT-2021-26649
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 4.17 through 5.14 Description: A potential issue exists in the Linux Kernel, specifically related to a mismatch between reconstructed freelist depth and count in the slub allocator. The actual impact and attack...
PT-2021-30644
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15 Description The issue is related to a mismatch between reconstructed freelist depth and count in the slub allocator. It was introduced in version v4.17 and fixed in version v5.15. The actual impact and atta...
PT-2021-26580
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.15 Description The issue is related to a mismatch between reconstructed freelist depth and cnt in the slub allocator. The actual impact and attack plausibility have not yet been proven. Recommendations For...
DEBIAN-CVE-2021-3908
OctoRPKI does not limit the depth of a certificate chain, allowing for a CA to create children in an ad-hoc fashion, thereby making tree traversal never end...
CVE-2021-3908
OctoRPKI does not limit the depth of a certificate chain, allowing for a CA to create children in an ad-hoc fashion, thereby making tree traversal never end...
