LIEF Denial of Service Vulnerability

LIEF is a cross-platform library from the personal developer Romain Thomas. Used for parsing, modifying and abstracting Elf, Pe and MachO formats, a denial of service vulnerability exists in LIEF v0.12.1, which stems from a failure to properly handle incoming error messages in the initandparse...

GSD-2022-1006603 mm/slub: fix to return errno if kmalloc() fails

mm/slub: fix to return errno if kmalloc fails This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.215 by commit...

PT-2022-34867 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.14.295 Description: The issue is related to a potential security vulnerability in the Linux Kernel. It has been fixed in version v4.14.295. The problem occurs when kmalloc fails, and an error is not properly...

PT-2022-34859 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.215 Description: The issue is related to a potential security vulnerability in the Linux Kernel. It involves a fix to return an error number if the kmalloc function fails. The actual impact and attack...

LIEF 安全漏洞

LIEF is a cross-platform library from the personal developer Romain Thomas. Used for parsing, modifying and abstracting Elf, Pe and MachO formats, a denial of service vulnerability exists in LIEF v0.12.1, which stems from a failure to properly handle incoming error messages in the initandparse...

Hyperledger Fabric Denial of Service Vulnerability

Hyperledger Fabric is an enterprise licensed distributed ledger framework. It is used to develop solutions and applications. A denial of service vulnerability exists in versions of Hyperledger Fabric prior to 2.4.0 that stems from not properly handling incoming error messages, which can be...

MAL-2022-669 Malicious code in @trimoz/trimoz-vue-error-handling (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a925050b7e354716fd169d1ca7abbb1479e679351df6b6563971fde19a704185 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Open5GS 安全漏洞

Open5GS is an open source implementation in C of 5G Core and Epc, the core network of the Lte/Nr network. A denial of service vulnerability exists in Open5GS 2.4.10 and earlier, and 2.4.10 and later, which stems from a failure to properly handle incoming error messages in the component AMF's...

Security Bulletin: Multiple security vulnerabilities addressed in IBM Sterling Secure Proxy (CVE-2013-0518, CVE-2013-0519, CVE-2013-0520)

Abstract IBM Sterling Secure Proxy is vulnerable to spoofing and information disclosure attacks. Content VULNERABILITY DETAILS CVE ID: CVE-2013-0518 DESCRIPTION: Application Pages Do Not Break Out of 3rd Party HTML Frames. IBM Sterling Secure Proxy Configuration Manager pages permit rendering...

Knot Resolver 资源管理错误漏洞

Knot Resolver is a cached DNS resolver implementation that includes a resolver library and daemon. A denial of service vulnerability exists in NIC Knot Resolver versions prior to 5.5.3. The vulnerability stems from not properly handling incoming error messages and can be exploited by a remote...

PT-2025-38167

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The dwc3 get properties function in the Linux kernel contains memory leaks during error handling. Specifically, the function calls power supply get by nameusb psy name and requires...

GSD-2022-1006301 cxl: Fix a memory leak in an error handling path

cxl: Fix a memory leak in an error handling path This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.326 by commit...

GSD-2022-1006214 cxl: Fix a memory leak in an error handling path

cxl: Fix a memory leak in an error handling path This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.291 by commit...

GSD-2022-1006105 cxl: Fix a memory leak in an error handling path

cxl: Fix a memory leak in an error handling path This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.256 by commit...

GSD-2022-1006019 intel_th: Fix a resource leak in an error handling path

intelth: Fix a resource leak in an error handling path This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.211 by commit...

GSD-2022-1005962 cxl: Fix a memory leak in an error handling path

cxl: Fix a memory leak in an error handling path This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.211 by commit...

GSD-2022-1005855 intel_th: Fix a resource leak in an error handling path

intelth: Fix a resource leak in an error handling path This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.137 by commit...

GSD-2022-1005815 mmc: meson-gx: Fix an error handling path in meson_mmc_probe()

mmc: meson-gx: Fix an error handling path in mesonmmcprobe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.138 by commit...

GSD-2022-1005793 iavf: Fix adminq error handling

iavf: Fix adminq error handling This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.138 by commit 4fe80492d53971d9a49f39f3c86d2d67c6f3638a, it...

GSD-2022-1005775 cxl: Fix a memory leak in an error handling path

cxl: Fix a memory leak in an error handling path This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.138 by commit...