PT-2021-29823

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.133 Description The issue concerns a possible use-after-free in the ia module exit function. This could potentially lead to security vulnerabilities, although the actual impact and attack plausibility have n...

QEMU Loop Unreachable Exit DoS

The vulnerability of QEMU’s software for emulating hardware on various platforms is related to the infinite operation of a loop. Exploiting this vulnerability allows an attacker to cause a service failure...

Huawei EulerOS: Security Advisory for gssproxy (EulerOS-SA-2021-2137)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2021-29419

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.44 Description A potential issue exists where the dwc3 gadget exit function does not properly handle a NULL dwc-gadget pointer. The actual impact and attack plausibility have not yet been proven...

PT-2021-25425

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.44 Description: A potential issue exists where the dwc3 gadget exit function does not properly handle a NULL dwc-gadget pointer. The actual impact and attack plausibility have not yet been proven...

PT-2021-25501

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.12.11 Description: A potential issue exists where the dwc3 gadget exit function does not properly handle a NULL dwc-gadget pointer. The actual impact and attack plausibility have not yet been proven...

Junos OS DoS

The vulnerability of the configuration of Junos OS operating system routers of the ACX5800, EX9200, MX10000, MX240, MX480, and MX960 series is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability can allow a malicious actor to cause service failures...

Design/Logic Flaw

In onCreate of EmergencyCallbackModeExitDialog.java, there is a possible exit of emergency callback mode due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions...

Malicious user can trigger another user’s removal

Handle 0xRajeev Vulnerability details Impact By allowing anyone to call removeUserFromOrderbook instead of only Market::newRental or Treasury::withdrawDeposit or collectRentUser which may result in foreclosures and hence may need to trigger user removal, a malicious user can trigger another's...

Aurora Center Loop Exit Condition DoS

The vulnerability of the GoLang development tool used by Aurora Application Software involves executing a loop with an exit condition that is not met. Exploiting this vulnerability could allow a malicious actor to cause service failures...

PT-2021-25103

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.124 Description The issue is related to the tipc wait and exit functionality until all work queues are done. It was introduced in version v4.1 and fixed in Linux Kernel version v5.4.124. The actual impact an...

PT-2021-25069

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.42 Description The issue is related to the tipc wait and exit functionality until all work queues are done. It was introduced in version v4.1 and fixed in version v5.10.42. The actual impact and attack...

PT-2021-29063

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.42 Description The issue is related to the tipc wait and exit mechanism until all work queues are done. It was introduced in version v4.1 and fixed in version v5.10.42. The actual impact and attack...

PT-2021-25026

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.12.9 Description: The issue is related to the tipc wait and exit functionality until all work queues are done. It was introduced in version v4.1 and fixed in Linux Kernel version v5.12.9. The actual impact an...

PT-2021-29097

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.124 Description The issue is related to the tipc wait and exit functionality until all work queues are done. It was introduced in version v4.1 and fixed in version v5.4.124. The actual impact and attack...

PT-2021-29020

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.12.9 Description The issue is related to the tipc wait and exit functionality until all work queues are done. It was introduced in version v4.1 and fixed in Linux Kernel version v5.12.9. The actual impact and...

CVE-2020-13602

Remote Denial of Service in LwM2M dowriteoptlv. Zephyr versions = 1.14.2, = 2.2.0 contain Improper Input Validation CWE-20, Loop with Unreachable Exit Condition 'Infinite Loop' CWE-835. For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-g9mg-fj58-6fqh...

Fuzzing iOS code on macOS at native speed

Or how iOS apps on macOS work under the hood Posted by Samuel Groß, Project Zero This short post explains how code compiled for iOS can be run natively on Apple Silicon Macs. With the introduction of Apple Silicon Macs, Apple also made it possible to run iOS apps natively on these Macs. This is...

PT-2021-31149

Уязвимость компонента golang.org/x/net библиотеки работы с сетью для языка программирования Golang Go Networkingg связана с выполнением цикла с недоступным условием выхода. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, вызвать отказ в обслуживании...

U.S. Pipeline Ransomware Attackers Go Dark After Servers and Bitcoin Are Seized

Just as Colonial Pipeline restored all of its systems to operational status in the wake of a crippling ransomware incident a week ago, DarkSide, the cybercrime syndicate behind the attack, claimed it lost control of its infrastructure, citing a law enforcement seizure. All the dark web sites...