4562 matches found
GSD-2022-1002663 ftrace: Clean up hash direct_functions on register failures
ftrace: Clean up hash directfunctions on register failures This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.3 by commit...
VDA Registration Step by Step and Troubleshoot common VDA Registration Failures
This article explains step by step process of VDA registration and troubleshoot common VDA registration failure issues...
PT-2022-31090
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to 5.18.3 Description The issue is related to the md/bitmap component, where sanity check failures can lead to security problems. The actual impact and attack plausibility have not yet been proven. Recommendations F...
PT-2022-31811
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.121 Description The issue is related to the cleanup of hash direct functions on register failures in ftrace. It was introduced in version v5.5 and fixed in version v5.10.121. The actual impact and attack...
Ovation Distributed System Authentication Bypass
The vulnerability of many protocols in the Ovation distributed system management framework is related to deficiencies in the authentication process. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data, compromise its integrity, and even cause service...
DeltaV Embedded Images Vulnerable
The vulnerability of embedded images of microprogrammed control systems for DeltaV M-series/S-series/P-series controllers, as well as of the emergency protection system DeltaV/Ovation SIS, is related to the transmission of data in an open manner. Exploiting this vulnerability can allow a maliciou...
MariaDB create_worker_threads DoS
The vulnerability of the createworkerthreads method in the MariaDB database management system exists due to improper cleanup or resource release. Exploiting this vulnerability can allow an attacker to cause service failures...
EpicMo Protocol Measurement Control DoS
The vulnerability of the EpicMo protocol, which is implemented in measurement and control controllers of the Experion LX, is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...
MariaDB xbstream_open Buffer Overflow DoS
The vulnerability of the xbstreamopen function extra/mariabackup/dsxbstream.cc in the MariaDB database management system is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause service failures...
Intel Optane DoS
The vulnerability of microprogrammed solid-state storage devices from IntelR Optane, IntelR OptaneTM DC, and IntelR DC involves the simultaneous execution of operations using shared resources with improper synchronization. Exploiting this vulnerability can allow attackers to cause service failure...
Outside In Filters Component DoS
The vulnerability of the Outside In Filters component within the Oracle Outside In Technology SDK set is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to trigger a service failure using the HTTP protocol...
Windows Hyper-V Hardware Virtualization Unauthorized Access
The vulnerability of the Windows Hyper-V hardware virtualization system is related to errors in information processing. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information or cause service failures...
WebLogic Server DoS
The vulnerability of the Web Services component of the Oracle WebLogic Server application server, a software platform of Oracle Fusion Middleware, is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause service failures using the T3...
What the New OWASP Top 10 Changes Mean to You?
The Open Web Application Security Project OWASP recently updated its top 10 list of the most critical security risks to web applications after 4 years. It represents the most radical shake up since the list was introduced in 2003. The changes will undoubtedly have a big impact on how businesses...
June 14, 2022—KB5014710 (OS Build 10240.19325) - EXPIRED
None None...
June 14, 2022—KB5014741 (Security-only update)
None None...
June 14, 2022—KB5014746 (Security-only update)
None None...
NVIDIA Virtual GPU Manager DoS
The vulnerability of the nvidia.ko module of the NVIDIA Virtual GPU Manager driver is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a hacker to cause service failures...
Cluster Shared Volumes DoS
The vulnerability of the Cluster Shared Volumes CSV file system for Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures...
Apache Tomcat EncryptInterceptor DoS
The vulnerability of the EncryptInterceptor class implementation in Apache Tomcat applications is related to incomplete documentation regarding program execution. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...