OpenSSL PHP DoS

The vulnerability of the OpenSSL interpreter for the PHP programming language is related to resource management errors. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Elcomplus SmartPPT SCADA File Write

The vulnerability of the Elcomplus SmartPPT SCADA server is related to input validation errors. Exploiting this vulnerability allows a malicious actor to write arbitrary files to arbitrary locations in the file system using a specially created HTTP request...

Oracle data feeds are insufficiently validated

Lines of code Vulnerability details Impact If the oracle price feeds are insufficiently validated, there will be pricing errors leading to the miss-pricing of assets/risk Proof of Concept The code does not verify that answeredInRound = roundID for both cases where an oracle is used, and the...

SUSE-RU-2022:1384-1 Recommended update for Salt

This update fixes the following issues: salt: - Clear network interfaces cache on grains request bsc1196050 - Handle old qemu-img not supporting -U parameter bsc1195221 - Restrict 'state.orchestratesingle' to pass a pillar value if it exists bsc1194632 - Fix sparse disk errors on Python 2 virt...

PT-2022-37624

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description This issue involves several fixes for the salt software, including clearing network interfaces cache on grains request, handling old qemu-img not supporting the -U parameter, restricting...

PHP _zip_cdir_new Heap Buffer Overflow DoS

The vulnerability of the zipcdirnew function in the PHP programming language is related to errors in number processing. Exploiting this vulnerability can allow an attacker to cause service failures or execute arbitrary code...

PHP phar_parse_tarfile DoS

The vulnerability of the pharparsetarfile function ext/phar/tar.c in the PHP programming language is related to errors in number processing. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

PHP php_raw_url_encode DoS

The vulnerability of the phprawurlencode function in the PHP programming language is related to errors in number processing. Exploiting this vulnerability can allow an attacker to cause service failures...

OpenSSL DTLS DoS

The vulnerability of the DTLS protocol implementation in the OpenSSL library is related to resource management errors. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

PHP FTP Genlist Code Execution

The vulnerability of the ftpgenlist function ext/ftp/ftp.c in the PHP programming language is related to errors in number processing. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Perl Interpreter Privilege Escalation

The vulnerability of modules from the @INC directory in the Perl interpreter is related to privilege management errors. Exploiting this vulnerability allows an attacker to execute arbitrary code using a Trojan virus program...

Adobe Illustrator Pointer Error DoS

The vulnerability of the Adobe Illustrator graphic editor is related to pointer assignment errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

GSD-2022-1001546 net: asix: add proper error handling of usb read errors

net: asix: add proper error handling of usb read errors This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.19 by commit...

GSD-2022-1001471 btrfs: do not double complete bio on errors during compressed reads

btrfs: do not double complete bio on errors during compressed reads This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.19 by commit...

GSD-2022-1001470 btrfs: handle csum lookup errors properly on reads

btrfs: handle csum lookup errors properly on reads This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.19 by commit...

GSD-2022-1001146 btrfs: handle csum lookup errors properly on reads

btrfs: handle csum lookup errors properly on reads This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.2 by commit...

PT-2022-30132

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.33 Description The issue concerns the handling of USB read errors in the Linux Kernel. It was introduced in version v4.9 and is fixed in version v5.15.33. The actual impact and attack plausibility have not...

PT-2022-29819

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.19 Description The issue concerns the handling of USB read errors in the Linux Kernel. It was introduced in version v4.9 and is fixed in version v5.16.19. The actual impact and attack plausibility have not...

PT-2022-29877

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.19 Description A potential issue exists where a NULL pointer dereference can occur, which may be related to memory allocation errors ENOMEM. The actual impact and likelihood of an attack have not been...

PT-2022-29506

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.2 Description The issue concerns the handling of USB read errors in the Linux Kernel. It was introduced in version v4.9 and fixed in version v5.17.2. The actual impact and attack plausibility have not yet...