UBUNTU-CVE-2023-22486

cmark-gfm is GitHub's fork of cmark, a CommonMark parsing and rendering library and program in C. Versions prior to 0.29.0.gfm.7 contain a polynomial time complexity issue in handleclosebracket that may lead to unbounded resource exhaustion and subsequent denial of service. This vulnerability has...

CVE-2022-43997

Incorrect access control in Aternity agent in Riverbed Aternity before 12.1.4.27 allows for local privilege escalation. There is an insufficiently protected handle to the A180AG.exe SYSTEM process with PROCESSALLACCESS rights...

CVE-2022-43997

Incorrect access control in Aternity agent in Riverbed Aternity before 12.1.4.27 allows for local privilege escalation. There is an insufficiently protected handle to the A180AG.exe SYSTEM process with PROCESSALLACCESS rights...

cmark-gfm 资源管理错误漏洞

cmark-gfm is an extended version of the C reference implementation of CommonMark, a rationalized version with canonical Markdown syntax. A resource management error vulnerability exists in versions prior to cmark-gfm 0.29.0.gfm.7, which stems from the inclusion of a polynomial time complexity iss...

PT-2023-14422 · Riverbed · Riverbed Aternity

Name of the Vulnerable Software and Affected Versions: Riverbed Aternity versions prior to 12.1.4.27 Description: The issue is related to incorrect access control in the Aternity agent, allowing for local privilege escalation. There is an insufficiently protected handle to the A180AG.exe SYSTEM...

curl: POST following PUT confusion

A vulnerability was found in curl. The issue occurs when doing HTTPS transfers, where curl might erroneously use the read callback CURLOPTREADFUNCTION to ask for data to send, even when the CURLOPTPOSTFIELDS option has been set if it previously used the same handle to issue a PUT request which us...

PT-2023-9424 · Linux +4 · Linux Kernel +4

Name of the Vulnerable Software and Affected Versions: Linux kernel version 5.10.100-emu x2rc+ Description: The vulnerability is related to the axi chan handle err function in the Linux kernel, which lacks exception protection processing for vd. This can lead to a kernel panic in exceptional case...

GSD-2023-1001583 power: supply: fix residue sysfs file in error handle route of __power_supply_register()

power: supply: fix residue sysfs file in error handle route of powersupplyregister This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.337 by...

GSD-2023-1001255 drm/panfrost: Fix GEM handle creation ref-counting

drm/panfrost: Fix GEM handle creation ref-counting This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.163 by commit...

GSD-2023-1000854 arm64: mm: kfence: only handle translation faults

arm64: mm: kfence: only handle translation faults This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000768 Input: elants_i2c - properly handle the reset GPIO when power is off

Input: elantsi2c - properly handle the reset GPIO when power is off This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000488 media: s5p-mfc: Clear workbit to handle error condition

media: s5p-mfc: Clear workbit to handle error condition This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.18 by commit...

GSD-2023-1000427 drm/panfrost: Fix GEM handle creation ref-counting

drm/panfrost: Fix GEM handle creation ref-counting This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.19 by commit...

PT-2023-33337 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.158 Description: The issue concerns a handle size overflow for ringbuf mmap. It was introduced in version v5.8 and fixed in Linux Kernel version v5.10.158. The actual impact and attack plausibility have no...

PT-2023-33504 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.19 Description: The issue is related to a problem with GEM handle creation ref-counting in the drm/panfrost component. The actual impact and potential for attack have not been proven yet. Recommendations: F...

PT-2023-33178 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: libbpf versions prior to v6.0.12 Description: The issue is related to a handle size overflow for ringbuf mmap. It was introduced in Linux Kernel version v5.8 and fixed in version v6.0.12. The actual impact and attack plausibility have not yet...

PT-2023-33969 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.87 Description: The issue is related to a problem with GEM handle creation ref-counting in the drm/panfrost component. The actual impact and potential for attack have not been proven yet. Recommendations:...

CVE-2023-22726

creationtimestamp| type| source ---|---|--- 2023-01-16 21:43:07+00:00| published-proof-of-concept| https://github.com/nektos/act/security/advisories/GHSA-pc99-qmg4-rcff 2023-01-21 00:22:55+00:00| seen| https://t.me/cibsecurity/56799...

CVE-2020-36559 Path Traversal in aahframe.work

Due to improper sanitization of user input, HTTPEngine.Handle allows for directory traversal, allowing an attacker to read files outside of the target directory that the server has permission to read...

Design/Logic Flaw

An issue was discovered in Illumos in Nexenta NexentaStor 4.0.5 and 5.1.2, and other products. The SMB server allows an attacker to have unintended access, e.g., an attacker with WRITEXATTR can change permissions. This occurs because of a combination of three factors: ZFS extended attributes are...