USN-7912-2: CUPS vulnerability

USN-7912-1 fixed vulnerabilities in CUPS. This update provides the corresponding update for Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. Original advisory details: Johannes Meixner and Paul Zirnik discovered that CUPS incorrectly handled clients that send messages slowly. A remote...

The vulnerability of the Framework component in Android operating systems allows a hacker to trigger a service failure.

The vulnerability of the Framework component in Android operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the lib/alloc_tag component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the lib/alloctag component in the Linux operating system’s kernel is related to incorrect initialization of the resource. Exploiting this vulnerability allows an attacker to cause service failures...

The vulnerability of the Framework component in Android operating systems allows a hacker to trigger a service failure.

The vulnerability of the Framework component in Android operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the Framework component in Android operating systems allows a hacker to trigger a service failure.

The vulnerability of the Framework component in Android operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the Framework component in Android operating systems allows a hacker to trigger a service failure.

The vulnerability of the Framework component in Android operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the Video-Related System module in the HarmonyOS operating system allows a perpetrator to trigger a service failure.

The vulnerability of the Video-Related System module in the HarmonyOS operating system is related to synchronization errors when using shared resources “Race Situation”. Exploiting this vulnerability can allow attackers to cause service failures...

The vulnerability of the get_addr_generic() function in OpenVPN software allows a hacker to disclose IP addressing information and trigger a service failure.

The vulnerability of the getaddrgeneric function in OpenVPN software is related to the escape of operations beyond the buffer in memory. Exploiting this vulnerability can allow a remote attacker to disclose IP addressing information and cause service failures...

Vulnerability of the dpu_encoder_helper_phys_cleanup() function in the drivers/gpu/drm/msm/disp/dpu1/dpu_encoder.c module – A driver for supporting Direct Rendering Infrastructure (DRI) in Linux kernels, which can be exploited by attackers to cause service failures.

Vulnerability of the dpuencoderhelperphyscleanup function in the drivers/gpu/drm/msm/disp/dpu1/dpuencoder.c module – The Linux kernel’s DRI support driver has a vulnerability related to improper control of resource identifiers “resource injection”. Exploiting this vulnerability could allow an...

Vulnerability of the build_unoptimized_policySettings() function in the drivers/gpu/drm/amd/display/dc/dml2/dml2_policy.c module – A driver for supporting Direct Rendering Infrastructure (DRI) in AMD graphics cards for Linux operating systems, which allows a hacker to trigger a service failure.

Vulnerability of the buildunoptimizedpolicySettings function in the drivers/gpu/drm/amd/display/dc/dml2/dml2policy.c module – Drivers that support Direct Rendering Infrastructure DRI for AMD graphics cards in Linux operating systems are vulnerable to permission handling errors. Exploiting this...

Vulnerability of components of the Linux operating system’s kernel, net/mlx5, which allows a hacker to cause a service failure

The vulnerability of the net/mlx5 components in the Linux operating system’s kernel is related to the insufficient use of the assert function. Exploiting this vulnerability allows attackers to cause service failures...

The vulnerability of the `fs/smb/server/smb2pdu.c` component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the fs/smb/server/smb2pdu.c component in the Linux operating system is related to mutual blocking of execution threads. Exploiting this vulnerability allows an attacker to cause service failures...

Vulnerability of the amd_pstate_adjust_perf() function in the drivers/cpufreq/amd-pstate.c module – The driver for scaling CPU core frequency in Linux operating systems, which can be exploited by attackers to cause system failures.

Vulnerability of the amdpstateadjustperf function in the drivers/cpufreq/amd-pstate.c module – The driver for scaling CPU frequency in Linux operating systems is vulnerable due to a pointer manipulation issue. Exploiting this vulnerability could allow an attacker to cause system failures...

The vulnerability of the ufshcd_update_rtc() function in the drivers/ufs/core/ufshcd.c file affects UFS-host controllers in Linux operating systems. This allows attackers to cause service failures.

The vulnerability of the ufshcdupdatertc function in the drivers/ufs/core/ufshcd.c module affects UFS-host controllers. In Linux operating systems, this vulnerability is related to incorrect resource locking. Exploitation of this vulnerability can allow an attacker to cause service failures...

The vulnerability of the Framework component in Android operating systems allows a hacker to trigger a service failure.

The vulnerability of the Framework component in Android operating systems is related to insufficient protection of service data. Exploiting this vulnerability can allow a remote attacker to cause service failures...

The vulnerability of the tcf_block_playback_offloads() function in the net/sched/cls_api.c module of the network/sched subsystem of the Linux operating system allows a hacker to gain access to protected information or cause service failures.

The vulnerability of the tcfblockplaybackoffloads function in the net/sched/clsapi.c module of the net/sched subsystem of the Linux operating system is related to security configuration errors. Exploiting this vulnerability could allow an attacker to access protected information or cause service...

The vulnerability of the rapidjson parser in the json2pb RPC framework of Apache bRPC allows a attacker to cause a service failure.

The vulnerability of the rapidjson library in the json2pb RPC framework of Apache bRPC is related to an uncontrolled recursion. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the DRM/amdkfd component in Linux kernel allows a hacker to trigger a service failure.

The vulnerability of the DRM/amdkfd component in Linux kernel relates to the mutual blocking of execution threads. Exploiting this vulnerability allows a perpetrator to cause service failures...

The vulnerability of the Office operating system HarmonyOS, which allows a hacker to trigger a service failure

The vulnerability of the Office operating system HarmonyOS is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the Call module of the HarmonyOS operating system, allowing a hacker to trigger a service failure

The vulnerability of the Call module of the HarmonyOS operating system is related to improper security checks for standard elements. Exploiting this vulnerability can allow attackers to cause service failures...