11 matches found
CVE-2025-38399 scsi: target: Fix NULL pointer dereference in core_scsi3_decode_spec_i_port()
In the Linux kernel, the following vulnerability has been resolved: scsi: target: Fix NULL pointer dereference in corescsi3decodespeciport The function corescsi3decodespeciport, in its error code path, unconditionally calls corescsi3lunaclundependitem passing the destsedeve pointer, which may be...
GSD-2023-1001028 ACPICA: Fix error code path in acpi_ds_call_control_method()
ACPICA: Fix error code path in acpidscallcontrolmethod This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.86 by commit...
GSD-2023-1000603 ACPICA: Fix error code path in acpi_ds_call_control_method()
ACPICA: Fix error code path in acpidscallcontrolmethod This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...
PT-2023-34646
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.337 Description The issue is related to an error code path in the acpi ds call control method function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...
PT-2023-33680
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v6.0.16 Description The issue is related to an error code path in the acpi ds call control method function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...
PT-2023-34105
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.86 Description The issue is related to an error code path in the acpi ds call control method function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...
PT-2023-34429
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.163 Description The issue is related to an error code path in the acpi ds call control method function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...
PT-2019-17504
Name of the Vulnerable Software and Affected Versions Shadowsocks-libev version 3.3.2 Description A denial-of-service issue exists in the UDPRelay functionality. When using a Stream Cipher and a local address, arbitrary UDP packets can cause a FATAL error code path and exit. An attacker can send...
CVE-2016-9534
tifwrite.c in libtiff 4.0.6 has an issue in the error code path of TIFFFlushData1 that didn't reset the tifrawcc and tifrawcp members. Reported as MSVR 35095, aka "TIFFFlushData1 heap-buffer-overflow."...
Heap overflow
tifwrite.c in libtiff 4.0.6 has an issue in the error code path of TIFFFlushData1 that didn't reset the tifrawcc and tifrawcp members. Reported as MSVR 35095, aka "TIFFFlushData1 heap-buffer-overflow."...
CVE-2016-9534
tifwrite.c in libtiff 4.0.6 has an issue in the error code path of TIFFFlushData1 that didn't reset the tifrawcc and tifrawcp members. Reported as MSVR 35095, aka "TIFFFlushData1 heap-buffer-overflow."...