Linux shiftfs Heap Buffer Overflow DoS

The vulnerability of the copyfromuser function in the file system of the shiftfs filesystem in Linux’s operating system is related to the repeated release of memory. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service...

Singularity container Input Sanitization Information Disclosure

The vulnerability of the Singularity container platform relates to the failure to cleanse input data. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service failures...

Manuscript pickle.load() Heap Buffer Overflow DoS

The vulnerability of the pickle.load function in software for manuscript writers involves restoring unreliable data in memory. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data, compromise its integrity, and even cause service failures...

libdnf Cryptographic Signature Verification

The vulnerability of the package manager library libdnf is related to a bug in the signature verification function. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

client for various remote DoS

The vulnerability of client software against various remote access protocols like Putty is related to an error in exiting the operation beyond the buffer in memory. This caused the window to repeatedly change its header at high speeds. Exploiting this vulnerability could allow a malicious actor t...

BinData Uncontrolled Resource Consumption DoS

The vulnerability of the declarative method for reading and writing BinData binary file formats is related to the relatively slow creation of certain classes. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Framework Component DoS

The vulnerability of the Framework component in Android operating systems is related to insufficient protection of service data. Exploiting this vulnerability can allow a malicious actor to cause service failures through a specially created file...

Network Time Protocol DoS

The vulnerability of the Network Time Protocol NTP is related to insufficient protection of service data during port randomization. Exploiting this vulnerability can allow a malicious actor to cause service failures by connecting through port 123...

.NET Core PowerShell Core Visual Studio Input Validation DoS

The vulnerability of the .NET Core runtime, the PowerShell Core automation tool, and the Visual Studio software development environment is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

Linux kernel Uncontrolled Resource Consumption DoS

The vulnerability of the Linux operating system’s kernel is related to uncontrolled resource consumption. Exploiting this vulnerability can allow a perpetrator to cause service failures...

PT-2024-11385

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.14.9 Description The issue is related to a missing sev decommission in sev receive start, which can result in subsequent SEV launch failures due to firmware memory leaks. According to AMD's SEV API, RECEIVE STA...

pacemaker bug fix and enhancement update

An update is available for pacemaker. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The Pacemaker cluster resource manager is a collection of technologies...

Tor SSL-Proxy DoS

The vulnerability of the SSL-Proxy function of the anonymous web browser Tor is related to deficiencies in handling exceptional states. Exploiting this vulnerability can allow a malicious actor to cause service failures...

TheFuck Path Traversal

The vulnerability of TheFuck programming language package is related to deficiencies in pathname restrictions for directories. Exploiting this vulnerability can allow a malicious actor to compromise data integrity and cause service failures...

GPL eXosip Pointer Dereferencing DoS

The vulnerability of the GPL eXosip library is related to errors in processing certain 3xx redirect responses. Exploiting this vulnerability can allow a malicious actor to cause service failures...

Got Normalize-url Library Uncontrolled Resource Consumption DoS

The vulnerability of the Got and Normalize-url libraries for Node.js is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service failures...

Avahi Pointer Arithmetic DoS

The vulnerability of the avahishostnameresolverstart function in the Avahi service discovery system in local networks is related to pointer arithmetic errors. Exploiting this vulnerability can allow attackers to cause service failures...

Rlottie Animation Generation Buffer Overflow DoS

The vulnerability of the graysplitcubic function in the Rlottie animation playback library is related to the writing beyond buffer boundaries. Exploiting this vulnerability could allow a malicious actor to compromise data integrity and cause service failures due to the malicious animated sticker...

Pydantic Date Field Loop DoS

The vulnerability of the date field in Pydantic’s data analysis and verification mechanisms is related to the incorrect handling of data types like infinity, inf, and float'inf' within the date field. Exploiting this vulnerability can allow an attacker to cause service failures...

YANG Libyang Heap Buffer Overflow DoS

The vulnerability of the lysnodefree function in the syntax analyzer and modeling tool of the YANG Libyang language is related to the insufficient use of the assert function. Exploiting this vulnerability could allow a malicious actor to cause service failures...