CVE-2020-25359: Missing Authorization

An arbitrary file deletion vulnerability in rConfig 3.9.5 has been fixed for 3.9.6. This vulnerability gave attackers the ability to send a crafted request to /lib/ajaxHandlers/ajaxDeleteAllLoggingFiles.php by specifying a path in the path parameter and an extension in the ext parameter and delet...

KVM 安全漏洞

KVM is a kernel-based virtual machine. A security vulnerability exists in the AMD code for KVM, which stems from incorrect validation of "virtext" when processing VMCBs Virtual Machine Control Blocks provided by L1 guests to generate/process nested guests L2...

PT-2021-14366

Name of the Vulnerable Software and Affected Versions: Contiki-NG versions prior to 4.6 Description: The RPL-Classic and RPL-Lite implementations in the Contiki-NG operating system do not validate the address pointer in the RPL source routing header. This allows an attacker to cause out-of-bounds...

CVE-2021-28906

In function readyinleaf in libyang extr is NULL. In some cases, it can be NULL, which leads to the operation of retval-extr-flags that results in a crash...

CVE-2021-28906: Unchecked Return Value

In function readyinleaf in libyang extr is NULL. In some cases, it can be NULL, which leads to the operation of retval-extr-flags that results in a crash...

Integer overflow

An issue was discovered in Contiki through 3.0. When sending an ICMPv6 error message because of invalid extension header options in an incoming IPv6 packet, there is an attempt to remove the RPL extension headers. Because the packet length and the extension header length are unchecked with respec...

CVE-2021-28362

An issue was discovered in Contiki through 3.0. When sending an ICMPv6 error message because of invalid extension header options in an incoming IPv6 packet, there is an attempt to remove the RPL extension headers. Because the packet length and the extension header length are unchecked with respec...

CVE-2021-28362: Integer Underflow (Wrap or Wraparound)

An issue was discovered in Contiki through 3.0. When sending an ICMPv6 error message because of invalid extension header options in an incoming IPv6 packet, there is an attempt to remove the RPL extension headers. Because the packet length and the extension header length are unchecked with respec...

PT-2021-17849

Name of the Vulnerable Software and Affected Versions: Contiki versions through 3.0 Description: An issue was discovered in Contiki when sending an ICMPv6 error message due to invalid extension header options in an incoming IPv6 packet. There is an attempt to remove the RPL extension headers, but...

CVE-2021-20232: Use After Free

A flaw was found in gnutls. A use after free issue in clientsendparams in lib/ext/presharedkey.c may lead to memory corruption and other potential consequences...

USN-4752-1 linux-oem-5.6 vulnerabilities

Daniele Antonioli, Nils Ole Tippenhauer, and Kasper Rasmussen discovered that legacy pairing and secure-connections pairing authentication in the Bluetooth protocol could allow an unauthenticated user to complete authentication without pairing credentials via adjacent access. A physically proxima...

Prototype Pollution

@theia/plugin-ext is vulnerable to prototype pollution. The function mergeContents allows an attacker to get control of value of “path” and modify attributes such as proto, constructor and prototype. An attacker is able to supply a malicious object that causes the function to overwrite properties...

CVE-2020-27036

In phNxpNciHalsendextcmd of phNxpNciHalext.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege in the NFC server with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersion...

kernel: buffer uses out of index in ext3/4 filesystem

A memory out-of-bounds read flaw was found in the Linux kernel's ext3/ext4 file system, in the way it accesses a directory with broken indexing. This flaw allows a local user to crash the system if the directory exists. The highest threat from this vulnerability is to system availability...

PT-2020-13818

Name of the Vulnerable Software and Affected Versions Contiki versions through 3.0 Description A memory corruption issue exists in the uIP TCP/IP stack component when handling RPL extension headers of IPv6 network packets in the rpl remove header function in net/rpl/rpl-ext-header.c...

PT-2020-13819

Name of the Vulnerable Software and Affected Versions Contiki versions through 3.0 Description An issue exists in the uIP TCP/IP stack component when handling RPL extension headers of IPv6 network packets. This issue is caused by an infinite loop in the rpl remove header function in...

kernel: mounting a crafted ext4 filesystem image, performing some operations, and unmounting can lead to a use-after-free in ext4_put_super in fs/ext4/super.c

A flaw was found in the Linux kernel's ext4unlink function. An attacker could corrupt memory or escalate privileges when deleting a file from a recently unmounted specially crafted ext4 filesystem, including local, USB, and iSCSI...

PT-2020-22113

Name of the Vulnerable Software and Affected Versions flb versions affected versions not specified Description The issue is related to a heap-buffer-overflow read. Technical details about the crash include the flb msgpack gelf value ext, flb msgpack to gelf, and flb msgpack raw to gelf functions...

PT-2020-22048

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow read error. The crash state indicates involvement of the x509 parse ext basic constraints, x509 parse...

PT-2020-22043

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap buffer overflow read issue is identified, potentially causing a crash. The crash occurs in the asn1 get next function, which is called by x509 parse...