398 matches found
CVE-2013-3393
The Precision Video Engine component in Cisco Jabber for Windows and Cisco Virtualization Experience Media Engine allows remote attackers to cause a denial of service process crash and call disconnection via crafted RTP packets, aka Bug IDs CSCuh60706 and CSCue21117...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a failure to clear the USB device pointer when a Type-C partner is disconnected, which could result in the u...
Race Condition
Overview rack-session is a session implementation for Rack. Affected versions of this package are vulnerable to Race Condition in Rack::Session::Pool middleware, which allows an attacker to restore and use a deleted session. The attacker must be in possession of a valid session cookie and the...
SUSE CVE-2022-49909
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
CVE-2025-37756
In the Linux kernel, the following vulnerability has been resolved: net: tls: explicitly disallow disconnect syzbot discovered that it can disconnect a TLS socket and then run into all sort of unexpected corner cases. I have a vague recollection of Eric pointing this out to us a long time ago...
CVE-2025-37756
CVE-2025-37756 relates to the Linux kernel TLS stack. The vulnerability arises from allowing a TLS socket disconnect, which can trigger unexpected corner cases in the TLS receive path. The fix is a kernel patch that explicitly disallows disconnect in net/tls, reducing the risk of abusive disconne...
SUSE CVE-2025-22027
In the Linux kernel, the following vulnerability has been resolved: media: streamzap: fix race between device disconnection and urb callback Syzkaller has reported a general protection fault at function irraweventstorewithfilter. This crash is caused by a NULL pointer dereference of dev-raw...
CVE-2025-22027
In the Linux kernel, the following vulnerability has been resolved: media: streamzap: fix race between device disconnection and urb callback Syzkaller has reported a general protection fault at function irraweventstorewithfilter. This crash is caused by a NULL pointer dereference of dev-raw...
CVE-2025-22027
CVE-2025-22027 affects the Linux kernel, specifically the media: streamzap component. The issue is a race between device disconnection and urb callback that leads to a NULL pointer dereference of dev->raw in ir_raw_event_store_with_filter, even though NULL checks exist in the function. The roo...
CVE-2025-22027 media: streamzap: fix race between device disconnection and urb callback
In the Linux kernel, the following vulnerability has been resolved: media: streamzap: fix race between device disconnection and urb callback Syzkaller has reported a general protection fault at function irraweventstorewithfilter. This crash is caused by a NULL pointer dereference of dev-raw...
CVE-2025-22027
In the Linux kernel, the following vulnerability has been resolved: media: streamzap: fix race between device disconnection and urb callback Syzkaller has reported a general protection fault at function irraweventstorewithfilter. This crash is caused by a NULL pointer dereference of dev-raw...
CVE-2025-22027 media: streamzap: fix race between device disconnection and urb callback
In the Linux kernel, the following vulnerability has been resolved: media: streamzap: fix race between device disconnection and urb callback Syzkaller has reported a general protection fault at function irraweventstorewithfilter. This crash is caused by a NULL pointer dereference of dev-raw...
Citrix Virtual Apps and Desktop 2402 - Citrix applications could not be maximized after minimizing
Users with multiple monitors might find that after minimizing a Citrix published application on an external screen, then disconnecting and reconnecting that screen, the application fails to maximize correctly. It might appear small, in the wrong place, or seem frozen...
Linux Distros Unpatched Vulnerability : CVE-2022-49297
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nbd: fix io hung while disconnecting device In our tests, qemu-nbd triggers a io hung: INFO: task qemu- nbd:11445 blocked for more than 368 seconds. Not tainted...
SUSE CVE-2022-49111
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix use after free in hcisendacl This fixes the following trace caused by receiving HCIEVDISCONNPHYLINKCOMPLETE which does call hciconndel without first checking if conn-type is in fact AMPLINK and in case it is do...
UBUNTU-CVE-2022-49111
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix use after free in hcisendacl This fixes the following trace caused by receiving HCIEVDISCONNPHYLINKCOMPLETE which does call hciconndel without first checking if conn-type is in fact AMPLINK and in case it is do...
WordPress WP Job Portal plugin <= 2.2.8 - Insecure Direct Object Reference to Authenticated (Subscriber+) User Photo Disconnection vulnerability
Insecure Direct Object Reference to Authenticated Subscriber+ User Photo Disconnection vulnerability discovered by thevietronin in WordPress Plugin WP Job Portal versions = 2.2.8...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: ALSA: Fixed deadlocks that occurred during the removal of kctl elements at disconnection. In sndcarddisconnect, we set the card-shutdown flag at the beginning, called callbacks, and performed synchronization for the...
CVE-2022-25710
Denial of service due to null pointer dereference when GATT is disconnected in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music...
CVE-2024-27942
A vulnerability has been identified in RUGGEDCOM CROSSBOW All versions V5.5. The affected systems allow any unauthenticated client to disconnect any active user from the server. An attacker could use this vulnerability to prevent any user to perform actions in the system, causing a denial of...