PT-2022-11268 · Gpac · Gpac

Name of the Vulnerable Software and Affected Versions: Gpac version 1.0.1 Description: The issue is related to a null pointer dereference vulnerability in the gf isom get payt count function in hint track.c, which can be exploited by attackers to cause a denial of service. Recommendations: For Gp...

PT-2022-11912

Name of the Vulnerable Software and Affected Versions: containerd versions 1.5.0-beta.0 through 1.5.8 Description: The issue affects installations using SELinux, such as EL8 CentOS, RHEL, Fedora, or SUSE MicroOS, with containerd as the backing container runtime interface CRI. An unprivileged pod...

UVI-2021-1001757 enetc: Fix illegal access when reading affinity_hint

enetc: Fix illegal access when reading affinityhint This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.9 by commit...

UVI-2021-1001672 enetc: Fix illegal access when reading affinity_hint

enetc: Fix illegal access when reading affinityhint This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.70 by commit...

GSD-2021-1001672 enetc: Fix illegal access when reading affinity_hint

enetc: Fix illegal access when reading affinityhint This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.70 by commit...

PT-2021-30222

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.1 through v5.14.8 Description The issue concerns illegal access when reading affinity hint. It was introduced in version v5.1 and fixed in version v5.14.9. The actual impact and attack plausibility have not yet been...

PT-2021-26227

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.1 through v5.14.8 Description: The issue concerns illegal access when reading affinity hint. It was introduced in version v5.1 and fixed in version v5.14.9. The actual impact and attack plausibility have not yet been...

PT-2021-30077

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.150 Description The issue concerns illegal access when reading affinity hint. It was introduced in version v5.1 and fixed in Linux Kernel version v5.4.150. The actual impact and attack plausibility have not...

PT-2021-30137

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.70 Description The issue concerns illegal access when reading affinity hint. It was introduced in version v5.1 and fixed in version v5.10.70. The actual impact and attack plausibility have not yet been...

PT-2021-26142

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.70 Description The issue concerns illegal access when reading affinity hint. It was introduced in version v5.1 and fixed in Linux Kernel version v5.10.70. The actual impact and attack plausibility have not...

PT-2021-26082

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.150 Description The issue concerns illegal access when reading affinity hint. It was introduced in version v5.1 and fixed in version v5.4.150. The actual impact and attack plausibility have not yet been...

PT-2024-11365

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the irq set affinity hit function, which stores a reference to the cpumask t parameter in the irq descriptor. This reference can be accessed later from irq affini...

CVE-2021-29939

An issue was discovered in the stackvector crate through 2021-02-19 for Rust. There is an out-of-bounds write in StackVec::extend if sizehint provides certain anomalous data...

DEBIAN-CVE-2021-29939

An issue was discovered in the stackvector crate through 2021-02-19 for Rust. There is an out-of-bounds write in StackVec::extend if sizehint provides certain anomalous data...

UBUNTU-CVE-2021-29939

An issue was discovered in the stackvector crate through 2021-02-19 for Rust. There is an out-of-bounds write in StackVec::extend if sizehint provides certain anomalous data...

CVE-2021-29939

An issue was discovered in the stackvector crate through 2021-02-19 for Rust. There is an out-of-bounds write in StackVec::extend if sizehint provides certain anomalous data...

Rust 缓冲区错误漏洞

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A security vulnerability exists in Rust on 2021-02-19 and earlier versions, which stems from an out-of-bounds write in StackVec::extend that could result in an out-of-bounds write if certain exception data is...

h1-ctf: First CTF ever!

Pretext Started looking into hacking this autumn and then found out HackerOne was doing a Christmas themed CTF. Further investigation showed that the deplorable Grinch might be up to no good again - Christmas is in danger! TLDR Lots of hacking took place, the Grinch was stopped, Christmas saved a...

SUSE SLES12 Security Update : grub2 (SUSE-SU-2020:2304-1)

This update for grub2 fixes the following issues : CVE-2020-15705: Fail kernel validation without shim protocol bsc1174421. Add fibre channel device's ofpath support to grub-ofpathname and search hint to speed up root device discovery bsc1172745. Note that Tenable Network Security has extracted t...

openssl security update

1.0.2k-16.0.1.el76.1 - Bump release for rebuild. 1.0.2k-16.1 - use SHA-256 in FIPS RSA pairwise key check - fix CVE-2018-5407 - EC signature local timing side-channel key extraction 1.0.2k-16 - fix CVE-2018-0495 - ROHNP - Key Extraction Side Channel on DSA, ECDSA - fix incorrect error message on...