UBUNTU-CVE-2021-3908

OctoRPKI does not limit the depth of a certificate chain, allowing for a CA to create children in an ad-hoc fashion, thereby making tree traversal never end...

CVE-2021-3908

OctoRPKI does not limit the depth of a certificate chain, allowing for a CA to create children in an ad-hoc fashion, thereby making tree traversal never end...

Denial Of Service (DoS)

cmd/octorpki of github.com/cloudflare/cfrpki is vulnerable to denial of service. Due to lack of limitation in the depth of a certificate chain, when a CA creates children in an ad-hoc fashion, it results in never-ending tree traversal...

Mozilla Firefox Security Advisory (MFSA2015-107) - Linux

This host is missing a security update for Mozilla Firefox. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...

PT-2021-22373 · Octorpki · Octorpki

Name of the Vulnerable Software and Affected Versions: OctoRPKI affected versions not specified Description: The issue arises from OctoRPKI not limiting the depth of a certificate chain, allowing a Certificate Authority CA to create children in an ad-hoc manner. This results in tree traversal nev...

Angle 缓冲区错误漏洞

Angle is a graphics layer engine. It is used in the default WebGl backend of Google Chrome and Mozilla Firefox on Windows platforms. A security vulnerability exists in Angle, which arises when the program incorrectly calculates the depth spacing of data and reads the end of the buffer on upload...

CVE-2021-3908

OctoRPKI does not limit the depth of a certificate chain, allowing for a CA to create children in an ad-hoc fashion, thereby making tree traversal never end...

CVE-2021-0938

In memzeroexplicit of compiler-clang.h, there is a possible bypass of defense in depth due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...

UVI-2021-1001839 mm, slub: fix mismatch between reconstructed freelist depth and cnt

mm, slub: fix mismatch between reconstructed freelist depth and cnt This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.76 by commit...

GSD-2021-1001839 mm, slub: fix mismatch between reconstructed freelist depth and cnt

mm, slub: fix mismatch between reconstructed freelist depth and cnt This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.76 by commit...

PT-2021-26309

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.76 Description: The issue is related to a mismatch between reconstructed freelist depth and cnt in the slub component of the Linux Kernel. The actual impact and attack plausibility have not yet been proven...

PT-2021-30304

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.76 Description The issue is related to a mismatch between reconstructed freelist depth and cnt in the slub component of the Linux Kernel. The actual impact and attack plausibility have not yet been proven...

PT-2021-30264

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.214 Description The issue is related to a mismatch between reconstructed freelist depth and cnt in the slub component of the Linux Kernel. The actual impact and attack plausibility have not yet been proven...

PT-2021-30281

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.156 Description The issue is related to a mismatch between reconstructed freelist depth and cnt in the slub component of the Linux Kernel. The actual impact and attack plausibility have not yet been proven...

PT-2021-26344

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.14.15 Description: The issue is related to a mismatch between reconstructed freelist depth and cnt in the slub allocator. The actual impact and attack plausibility have not yet been proven. Recommendations: F...

PT-2021-30339

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.15 Description The issue is related to a mismatch between reconstructed freelist depth and count in the slub allocator. The actual impact and attack plausibility have not yet been proven. Recommendations Fo...

PT-2021-26286

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.156 Description: The issue is related to a mismatch between reconstructed freelist depth and cnt in the slub allocator. The actual impact and attack plausibility have not yet been proven. Recommendations: F...

PT-2021-26269

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.214 Description: A potential security issue exists due to a mismatch between reconstructed freelist depth and count. The actual impact and attack plausibility have not yet been proven. Recommendations: For...

CVE-2021-0938

In memzeroexplicit of compiler-clang.h, there is a possible bypass of defense in depth due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...

CVE-2021-0938

In memzeroexplicit of compiler-clang.h, there is a possible bypass of defense in depth due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...