PT-2022-36063 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.8 Description: The issue is related to the ext4 file system, where a directory entry with an invalid rec len can trigger a BUG ON condition. The actual impact and potential for exploitation have not been...

PT-2024-11825 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A memory leak issue has been resolved in the Linux kernel, specifically in the dpaa2-switch component. The issue occurred when an error happened in the dpaa2 switch acl entry add and...

FortiSandbox & FortiDeceptor - Insufficient logging and lack of limitation of failed authentication attempts

An insufficient logging CWE-778 vulnerability in FortiSandbox and FortiDeceptor may allow a remote attacker to repeatedly enter incorrect credentials without causing a log entry, and with no limit on the number of failed authentication attempts...

编号撤回

This CVE number has been withdrawn...

CVE-2021-32880

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2021. Notes: none...

CVE-2021-32871

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2021. Notes: none...

OESA-2022-2122 edk2 security update

EDK II is a modern, feature-rich, cross-platform firmware development environment for the UEFI and PI specifications. Security Fixes: Existing CommBuffer checks in SmmEntryPoint will not catch underflow when computing BufferSize.CVE-2021-38578...

Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read in the convertstrings function in tinfo/readentry.c, which allows attackers to crash the service when processing corrupt terminfo data. Remediation Upgrade ncurses to version 6.3 or higher. References - GitHub Commit ...

Search Made Easy: InsightIDR’s Secret Weapon for Efficiency and Efficacy

By Matt Heidet Matt is a Senior Information Security Engineer at a Regional Financial Institution. He is a Customer and Guest Blogger for Rapid7 Have you ever groaned when divvying up incidents from a pen-test amongst an overworked team? Or maybe you’ve struggled to present how you adhere to...

kernel: scsi: lpfc: Fix possible memory leak when failing to issue CMF WQE

A flaw was found in the lpfc module in the Linux kernel. A missing release of allocated memory when an error occurs will cause a memory leak, potentially impacting system performance and resulting in a denial of service...

GSD-2022-1007247 x86/entry: Work around Clang __bdos() bug

x86/entry: Work around Clang bdos bug This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.150 by commit...

GSD-2022-1007042 x86/entry: Work around Clang __bdos() bug

x86/entry: Work around Clang bdos bug This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.75 by commit 066b1302f2a9f07d268da73ef5557b886d4dee2...

PT-2022-35155 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.3 Description: The issue is related to a warning fix in the Linux Kernel without PTE MARKER UFFD WP compiled in. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linu...

PT-2022-34906 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.7 Description: The issue is related to the mm/huge memory component, where the swp entry t is clobbered during the THP split process. This problem was introduced in version v5.19 and is fixed in version...

PT-2022-35134 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.3 Description: The issue is related to a potential dir corruption in ext4 when the ext4 dx add entry function fails. The actual impact and attack plausibility have not yet been proven. Recommendations: For...

CVE-2022-41876 ezplatform-graphql GraphQL queries can expose password hashes

ezplatform-graphql is a GraphQL server implementation for Ibexa DXP and Ibexa Open Source. Versions prior to 2.3.12 and 1.0.13 are subject to Insecure Storage of Sensitive Information. Unauthenticated GraphQL queries for user accounts can expose password hashes of users that have created or...

AIPHONE GT-DB-VN和AIPHONE GT-DMB 安全漏洞

AIPHONE GT-DB-VN and AIPHONE GT-DMB are both products of AIPHONE CORPORATION Japan.AIPHONE GT-DB-VN is an audio module with NFC reader. For use with the GT Series Multi-Tenant Security Intercom, a multi-tenant video entry system.AIPHONE GT-DMB is a 3-in-1 video entry station with NFC reader for t...

CVE-2022-40223

creationtimestamp| type| source ---|---|--- 2022-11-08 23:18:38+00:00| seen| https://t.me/cibsecurity/52664...

kernel: netfilter: conntrack: re-fetch conntrack after insertion

In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack: re-fetch conntrack after insertion In case the conntrack is clashing, insertion can free skb-nfct and set skb-nfct to the already-confirmed entry. This wasn't found before because the conntrack entry and the...

kernel: scsi: qla2xxx: Fix crash during module load unload test

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix crash during module load unload test During purex packet handling the driver was incorrectly freeing a pre-allocated structure. Fix this by skipping that entry. System crashed with the following stack during a...