CVE-2021-26930

An issue was discovered in the Linux kernel 3.11 through 5.10.16, as used by Xen. To service requests to the PV backend, the driver maps grant references provided by the frontend. In this process, errors may be encountered. In one case, an error encountered earlier might be discarded by later...

CVE-2021-23841

The OpenSSL public API function X509issuerandserialhash attempts to create a unique hash value based on the issuer and serial number data contained within an X509 certificate. However it fails to correctly handle any errors that may occur while parsing the issuer field which might occur if the...

Linux: backends treating grant mapping errors as bugs

ISSUE DESCRIPTION Block, net, and SCSI backends consider certain errors a plain bug, deliberately causing a kernel crash. For errors potentially being at least under the influence of guests, like out of memory conditions, it isn't correct to assume so. Memory allocations potentially causing such...

PostgreSQL Column Values Error Disclosure

The vulnerability of the PostgreSQL database management system is related to errors in security mechanisms. Exploiting this vulnerability allows a malicious actor to obtain column values from error messages without the privilege to perform a SELECT statement...

Bluetooth Service Privilege Escalation

The vulnerability of the Bluetooth service for Windows operating systems is related to authentication errors. Exploiting this vulnerability can allow an attacker to increase their privileges and gain unauthorized access to protected information...

Bluetooth Service Privilege Escalation

The vulnerability of the Bluetooth service for Windows operating systems is related to authentication errors. Exploiting this vulnerability can allow an attacker to increase their privileges and gain unauthorized access to protected information...

Intel Graphics Driver Privilege Escalation

The vulnerability of Intel Graphics Drivers’ drivers is related to privilege management errors. Exploiting this vulnerability can allow an attacker to increase their privileges...

Cisco IOS XR DoS

The vulnerability of the enfbroker process in the Cisco IOS XR operating system’s incoming packet processing function is related to resource management errors. Exploiting this vulnerability can allow a malicious actor to cause service failures...

USN-4735-1 postgresql-12 vulnerability

Heikki Linnakangas discovered that PostgreSQL incorrectly leaked values of denied columns when handling certain errors. A remote attacker could possibly use this issue to obtain sensitive information...

CITSmart injection vulnerability

CITSmart is an application from CITSmart Portugal. It provides all the processes for designing an organization. An injection vulnerability exists in CITSmart versions prior to 9.1.2.23, which arises from a lack of proper validation of user input data by a networked system or product during the...

Atlassian Jira and Atlassian JIRA Data Center have vulnerabilities related to information leakage

Atlassian Jira is a defect tracking management system from Atlassian Australia. The system is used to track and manage all types of issues and defects in the workplace. An information disclosure vulnerability exists in Atlassian Jira Server and Data Center, which arises from errors such as...

Telegram Information Disclosure Vulnerability

Telegram is an instant messaging mobile application. An information disclosure vulnerability exists in Telegram that originates from errors such as configuration during operation of a networked system or product. An unauthorized attacker could exploit the vulnerability to obtain sensitive...

Telegram Information Disclosure Vulnerability

Telegram is an instant messaging mobile application. An information disclosure vulnerability exists in Telegram that arises from errors such as configuration during operation of a networked system or product. An unauthorized attacker could exploit the vulnerability to obtain sensitive information...

BIG-IP Code Execution

The vulnerability of the TMUI interface of the BIG-IP Access Policy Manager, the BIG-IP Advanced Firewall Manager’s network interface, the BIG-IP Application Acceleration Manager’s application delivery components, the BIG-IP Application Security Manager’s application protection components, the...

Security fix for the ALT Linux 9 package postgresql12-1C version 12.5-alt4

Feb. 11, 2021 Alexei Takaseev 12.5-alt4 - Fix permission checks on constraint violation errors on partitions. Fixes CVE-2021-3393 - Re-applay patch from 1C...

Is-user-valid Injection Vulnerability

An injection vulnerability exists in Is-user-valid, which arises when, during the course of a user input operation to construct a command, data structure, or record, the network system or product lacks proper validation of the user input data, and fails to filter, or fails to correctly filter out...

Security fix for the ALT Linux 10 package postgresql15-1C version 12.5-alt4

Feb. 11, 2021 Alexei Takaseev 12.5-alt4 - Fix permission checks on constraint violation errors on partitions. Fixes CVE-2021-3393 - Re-applay patch from 1C...

ZCFees Number Error Vulnerability

A Numeric Error vulnerability exists in ZCFees that arises from a network system or product not properly calculating or converting resulting numbers. An attacker could exploit this vulnerability to cause, among other things, an integer overflow or a sign error...

[SECURITY] Fedora 32 Update: pngcheck-2.4.0-7.fc32

pngcheck verifies the integrity of PNG, JNG and MNG files by checking the internal 32-bit CRCs checksums and decompressing the image data; it can optionally dump almost all of the chunk-level information in the image in human-readable form. For example, it can be used to print the basic statist i...

libmysofa null pointer dereference vulnerability (CNVD-2021-11056)

libmysofa is a lightweight C library for reading AES SOFA files. A null pointer dereference vulnerability exists in libmysofa 0.5 - 1.1. The vulnerability stems from the changeAttribute function failing to handle input data correctly. An attacker can exploit the vulnerability to cause segmentatio...