Squashfs-Tools Symbolic Link

The vulnerability of the squashfs-opendir function in the unsquash-2.c component of the Squashfs-Tools suite for creating and extracting file systems is related to an incorrect definition of symbolic links before accessing files. Exploiting this vulnerability allows a remote attacker to compromis...

GHSA-6W7G-P4JH-RF92 "Verify All" Returns Success Despite Validation Failures in Singularity

Impact The --all / -a option to singularity verify returns success even when some objects in a SIF container are not signed, or cannot be verified. The SIF objects that are not verified are reported in WARNING log messages, but a Container Verified message and exit code of 0 are returned. Workflo...

Relay races, batons, and techniques: How to improve your cloud security posture

In 2008, the US 4x100m relay team was the favorite to win the gold medal at the Beijing Olympics. Not a massive surprise, considering that team included the second fastest athlete in history, Tyson Gay. It was a great shock though when the team blundered on the last exchange, dropping the baton,...

Adobe Bridge Null Pointer DoS

The vulnerability of the Adobe Bridge file manager is related to the assignment of the null pointer. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Unbound DNS Server Buffer Overflow DoS

The vulnerability of the dnamepktcopy function in the Unbound DNS server is related to the insufficient use of the assert function. Exploiting this vulnerability could allow a malicious actor to cause service failures...

GSD-2021-1002598 btrfs: free exchange changeset on failures

btrfs: free exchange changeset on failures This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.8 by commit...

TwinCAT OPC UA Server DoS

The vulnerability of the TwinCAT OPC UA Server and IPC Diagnostics UA Server exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...

Windows DoS

The vulnerability of the Windows operating system exists due to insufficient checking of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

New Tab Page Data Compromise

The vulnerability of the “New Tab Page” component in Microsoft Edge and Google Chrome browsers is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to influence the accessibility of data or cause service failures...

PT-2021-6876

Name of the Vulnerable Software and Affected Versions OpenSSL version 3.0.0 OpenSSL versions prior to 3.0.1 Description The issue is related to the mishandling of internal errors by the X509 verify cert function in OpenSSL. This function may return a negative value to indicate an internal error,...

Windows TCP/IP DoS

The vulnerability of the TCP/IP protocol implementation in the Microsoft Windows operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures by sending specially crafted input data to the application...

HarmonyOS Kernel DoS

The vulnerability of the HarmonyOS operating system exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...

Android EMUI Shell Information Disclosure

The vulnerability of the Android EMUI operating system’s shell exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to disclose protected information or cause service failures...

HarmonyOS Kernel DoS

The vulnerability of the HarmonyOS operating system exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...

UniFi switch Resource Consumption DoS

The vulnerability of the microprogramming software of UniFi switches is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...

Citrix ADC Resource Consumption DoS

The vulnerability of Citrix ADC application delivery controllers formerly known as Citrix NetScaler Application Delivery Controller, as well as the Citrix Gateway access control system formerly known as Citrix NetScaler Gateway, is related to an uncontrolled resource consumption. Exploiting this...

Citrix ADC Resource Consumption DoS

The vulnerability of Citrix ADC application delivery controllers formerly known as Citrix NetScaler Application Delivery Controller and Citrix Gateway access control systems formerly known as Citrix NetScaler Gateway is related to uncontrolled resource consumption. Exploiting this vulnerability c...

Unbound DNS Server Use-After-Free

The vulnerability of the rdatacopy function in the Unbound DNS server relates to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service failures...

Windows Hyper-V DoS

The vulnerability of the Windows Hyper-V component of the operating system exists due to insufficient testing of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures by transmitting specially crafted input data to the application...

dynamic configuration server RPCbind DoS

The vulnerability of the dynamic configuration server for RPC ports, RPCbind, is related to unlimited resource distribution. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...