PT-2021-26619

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15 Description A potential issue exists where a request is queued to blk-mq during DM suspend. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prio...

kernel: out of bounds array access in drivers/md/dm-ioctl.c

An out-of-bounds OOB memory write flaw was found in listdevices in drivers/md/dm-ioctl.c in the Multi-device driver module in the Linux kernel. A bound check failure allows an attacker with special user CAPSYSADMIN privilege to gain access to out-of-bounds memory leading to a system crash, a leak...

dm-estates.co.uk Improper Access Control vulnerability OBB-2235031

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2021-26380

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.14.14 Description: A potential security issue exists due to a NULL pointer race when completing IO in the dm. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

PT-2021-30375

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.14 Description A potential security issue exists due to a NULL pointer race when completing IO in the dm. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-23571

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.14.15 Description The issue allows a heap-based buffer overflow by an attacker who can write a string to the AMD GPU display drivers debug filesystem. There are no checks on size within parse write buffer into...

OPENSUSE-SU-2021:1370-1 Security update for systemd

This update for systemd fixes the following issues: - CVE-2021-33910: Fixed use of strdupa on a path bsc1188063. - logind: terminate cleanly on SIGTERM/SIGINT bsc1188018. - Adopting BFQ to control I/O jscSLE-21032, bsc1134353. - Rules weren't applied to dm devices multipath bsc1188713. - Ignore...

CVE-2021-27561

CVE-2021-27561 affects Yealink Device Management (DM) platform, specifically DM 3.6.0.20. The vulnerability enables pre-auth, unauthenticated remote command execution via the URI /sm/api/v1/firewall/zone/services, yielding root access and high-severity impact (CVSS v3.1: 9.8, CRITICAL). The conne...

CVE-2021-27561: Improper Neutralization of Special Elements used in an OS Command

Yealink Device Management DM 3.6.0.20 allows command injection as root via the /sm/api/v1/firewall/zone/services URI, without authentication...

SUSE: Security Advisory (SUSE-SU-2021:3348-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OPENSUSE-SU-2021:3348-1 Security update for systemd

This update for systemd fixes the following issues: - CVE-2021-33910: Fixed use of strdupa on a path bsc1188063. - logind: terminate cleanly on SIGTERM/SIGINT bsc1188018. - Adopting BFQ to control I/O jscSLE-21032, bsc1134353. - Rules weren't applied to dm devices multipath bsc1188713. - Ignore...

SUSE-SU-2021:3348-1 Security update for systemd

This update for systemd fixes the following issues: - CVE-2021-33910: Fixed use of strdupa on a path bsc1188063. - logind: terminate cleanly on SIGTERM/SIGINT bsc1188018. - Adopting BFQ to control I/O jscSLE-21032, bsc1134353. - Rules weren't applied to dm devices multipath bsc1188713. - Ignore...

PT-2024-11431

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The vulnerability is related to a NULL pointer dereference in the Linux kernel when completing IO. The issue arises when dm io dec pending calls end io acct first, followed by decrementi...

Debian DLA-2735-1 : ceph - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2735 advisory. - It was found Ceph versions before 13.2.4 that authenticated ceph users with read only permissions could steal dm-crypt encryption keys used in ceph disk...

PT-2021-29813

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.133 Description The issue is related to the dm btree remove function, where a new root is assigned only when the removal is successful. The actual impact and attack plausibility have not yet been proven...

PT-2021-29949

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.4.276 Description The issue is related to the dm btree remove function, where a new root is assigned only when the removal is successful. The actual impact and attack plausibility have not yet been proven...

PT-2021-29920

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.276 Description The issue is related to the dm btree remove function, where a new root is assigned only when the removal is successful. The actual impact and attack plausibility have not yet been proven...

PT-2021-25954

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.4.276 Description The issue is related to the dm btree remove function, where a new root is assigned only when the removal is successful. The actual impact and attack plausibility have not yet been proven...

PT-2021-25925

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.276 Description The issue is related to the dm btree remove function, where a new root is assigned only when the removal operation is successful. The actual impact and potential for attack have not been prov...

PT-2021-25818

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.133 Description The issue is related to the dm btree remove function, where a new root is assigned only when the removal is successful. The actual impact and potential for attack have not been proven yet...