13341 matches found
Linux kernel DoS
The vulnerability of the dpauxcmdfifotx function in the Linux kernel component is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...
JavaScript script handlers Microsoft Edge Chrome Code Execution
The vulnerability of JavaScript script handlers in Microsoft Edge and Google Chrome browsers is related to type mixing errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created HTML page from a remote location...
Blink Google Chrome Confidential Data Access
The vulnerability of the Blink web browser component in Google Chrome is related to authentication errors. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data through a specially created HTML page...
OPENSUSE-SU-2024:0319-1 Security update for coredns
This update for coredns fixes the following issues: Update to version 1.11.3: optimize the performance for high qps 6767 bump deps Fix zone parser error handling 6680 Add alternate option to forward plugin 6681 fix: plugin/file: return error when parsing the file fails 6699 fix:documentation...
CVE-2024-46847 mm: vmalloc: ensure vmap_block is initialised before adding to queue
In the Linux kernel, the following vulnerability has been resolved: mm: vmalloc: ensure vmapblock is initialised before adding to queue Commit 8c61291fd850 "mm: fix incorrect vbq reference in purgefragmentedblock" extended the 'vmapblock' structure to contain a 'cpu' field which is set at...
CVE-2024-46847 mm: vmalloc: ensure vmap_block is initialised before adding to queue
In the Linux kernel, the following vulnerability has been resolved: mm: vmalloc: ensure vmapblock is initialised before adding to queue Commit 8c61291fd850 "mm: fix incorrect vbq reference in purgefragmentedblock" extended the 'vmapblock' structure to contain a 'cpu' field which is set at...
TestLink 安全漏洞
TestLink is a suite of open source software from the TestLink team for managing the software testing process and providing statistical analysis. A security vulnerability exists in TestLink version 1.9.20 that stems from the application not checking user permissions, resulting in an access control...
SAE H2E Authentication Downgrade
The vulnerability of the SAE H2E authentication protocol implementation in the embedded operating system OpenWrt is related to errors in processing input data. Exploiting this vulnerability can allow a malicious actor to downgrade the version of the authentication protocol used...
kernel: usb-storage: alauda: Check whether the media is initialized
In the Linux kernel, the following vulnerability has been resolved: usb-storage: alauda: Check whether the media is initialized The member "uzonesize" of struct alaudainfo will remain 0 if alaudainitmedia fails, potentially causing divide errors in alaudareaddata and alaudawritelba. - Add a membe...
kernel: nvme-tcp: fix UAF when detecting digest errors
A use-after-free vulnerability was found in the Linux kernel in drivers/nvme/host/tcp.c in nvmetcpiowork. This issue can occur when a local user continues to read data after the connection finishes. This flaw allows a malicious user to cause a use-after-free problem...
kernel: usb-storage: alauda: Check whether the media is initialized
In the Linux kernel, the following vulnerability has been resolved: usb-storage: alauda: Check whether the media is initialized The member "uzonesize" of struct alaudainfo will remain 0 if alaudainitmedia fails, potentially causing divide errors in alaudareaddata and alaudawritelba. - Add a membe...
kernel: xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create
A flaw was found in the Linux kernel in which a system crash can occur if there are certain errors establishing RPC-over-RDMA connections...
Linux kernel io_uring Memory Release DoS
The vulnerability of the iouring component in the Linux operating system’s kernel is related to memory release errors. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20240924-03
Vulnerability of the ice component of the Linux kernel is related to the NULL pointer dereferencing in the kzalloc. Exploitation of the vulnerability could allow an attacker to cause a denial of service Vulnerability of the arm64/mm component of the Linux kernel is related to incorrect handling o...
Linux kernel Memory Release DoS
The vulnerability of the kernel component of the Linux operating system is related to memory release errors. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20240924-04
A vulnerability in the fastrpc component of the Linux operating system kernel is related to race conditions after a memory release. Exploitation of the vulnerability could allow an attacker to affect the confidentiality, integrity, and availability A vulnerability in the usbsubmiturb function of...
Linux kernel sched reweight_entity synchronization failure
The vulnerability of the reweightentity function in the sched component of the Linux operating system’s kernel is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause service failures...
Xen PCI DeviceHandler Data Compromise
The vulnerability of the cross-platform hypervisor component PCI DeviceHandler is related to errors in the program code. Exploiting this vulnerability allows a malicious actor to influence the confidentiality, integrity, and accessibility of the system...
Microsoft SQL Server Numerical Truncation Unauthorized Access
The vulnerability of the Microsoft SQL Server database management system is related to numerical truncation errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information or cause service failures...
lib/debugobjects.c Heap Buffer Overflow DoS
The vulnerability of the rpmsgctrldevreleasedevice function in the lib/debugobjects.c file of the Linux kernel is caused by synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to trigger a service failure...