2699 matches found
The vulnerability of the PJSIP multimedia communication library, related to executing a loop with an unavailable exit condition, allows attackers to cause service failures.
The vulnerability of the PJSIP multimedia communication library lies in the execution of a loop with an unavailable exit condition during the processing of WAV/AVI files. Exploiting this vulnerability can allow a malicious actor to cause service failures...
kernel: KVM: SVM: out-of-bounds read/write in sev_es_string_io
A flaw was found in the KVM's AMD code for supporting the Secure Encrypted Virtualization-Encrypted State SEV-ES. A KVM guest using SEV-ES can trigger out-of-bounds reads and writes in the host kernel via a malicious VMGEXIT for a string I/O instruction for example, outs or ins using the exit...
kernel: KVM: SVM: out-of-bounds read/write in sev_es_string_io
A flaw was found in the KVM's AMD code for supporting the Secure Encrypted Virtualization-Encrypted State SEV-ES. A KVM guest using SEV-ES can trigger out-of-bounds reads and writes in the host kernel via a malicious VMGEXIT for a string I/O instruction for example, outs or ins using the exit...
USB-based Wormable Malware Targets Windows Installer
Credit: Red Canary Wormable malware dubbed Raspberry Robin has been active since last September and is wriggling its way through USB drives onto Windows machines to use Microsoft Standard Installer and other legitimate processes to install malicious files, researchers have found. Researchers at...
The vulnerability of the X509_verify_cert() function in the OpenSSL library, related to the execution of a loop with an unreachable exit condition, allows a hacker to cause a service failure.
The vulnerability of the X509verifycert function in the OpenSSL library is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability could allow a malicious actor to cause service failures...
The vulnerability of the svx_read_header() function in the audio file reading and writing library libsndfile allows a attacker to cause a service denial.
The vulnerability of the svxreadheader function in the audio file reading and writing library libsndfile is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
The vulnerability of Xen hypervisors relates to the execution of a loop with an unavailable exit condition, allowing a malicious actor to cause a service failure.
The vulnerability of Xen hypervisors relates to the execution of a loop with an unavailable exit condition. Exploiting this vulnerability allows an attacker to cause a service failure...
PT-2025-8015 · Linux +3 · Linux Kernel +3
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to the fixed version Description: A race condition exists in the Linux kernel, specifically in the rxrpc exit net function. This issue can lead to a use-after-free error when the peer keepalive timer is still armed...
The vulnerability of the Exiv2 metadata management library, related to the execution of a loop with an unreachable exit condition, allows a hacker to cause a service failure.
The vulnerability of the Exiv2 media metadata management library lies in the execution of a loop with an unreachable exit condition. Exploiting this vulnerability allows a remote attacker to trigger a service failure using a specially created image file...
CVE-2022-0667
When the vulnerability is triggered the BIND process will exit. BIND 9.18.0...
DEBIAN-CVE-2022-0667
When the vulnerability is triggered the BIND process will exit. BIND 9.18.0...
CVE-2022-0667
When the vulnerability is triggered the BIND process will exit. BIND 9.18.0...
CVE-2022-0667
CVE-2022-0667 affects ISC BIND 9.18.0 where the recursive client backstop lifetime timer can trigger an assertion failure, causing BIND to terminate. This enables a remote denial-of-service and, potentially, cache poisoning. Upstream fixes are in 9.18.1 (and related patches).
CVE-2022-0667
When the vulnerability is triggered the BIND process will exit. BIND 9.18.0...
GSD-2022-1000742 netfilter: nf_tables: unregister flowtable hooks on netns exit
netfilter: nftables: unregister flowtable hooks on netns exit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.12 by commit...
CVE-2022-0667
When the vulnerability is triggered the BIND process will exit. BIND 9.18.0...
CVE-2022-0667
When the vulnerability is triggered the BIND process will exit. BIND 9.18.0...
PT-2025-31761
Name of the Vulnerable Software and Affected Versions iperf versions prior to 3.19.1 Description The software contains a flaw in iperf auth.c where a malformed authentication attempt causes a Base64Decode assertion failure, leading to application termination. Recommendations Update to version...
Linux/x86_64 - sudo enumeration Shellcode (245 bytes)
sudo vulnerability enumeration shellcode / sudo vulnerability enumeration shellcode xordynamic - Linux/x8664 Author : Kağan Çapar contact: email protected shellcode len : 245 bytes compilation: gcc -fno-stack-protector -z execstack .c -o "disasssemble only main." 0000000000001179 : 1179: 55 push...
RUSTSEC-2022-0103 Incorrect signature verification on gzip-compressed install images
The coreos-installer is a program to fetch a disk image and stream it to a target disk. During the installation process the installation image gpg signatures are verified. The signature verification can be bypassed for gzip-compressed images due to a flaw in gzip coreos-installer wrapper. When th...