CVE-2022-2873

An out-of-bounds memory access flaw was found in the Linux kernel Intel’s iSMT SMBus host controller driver in the way a user triggers the I2CSMBUSBLOCKDATA with the ioctl I2CSMBUS with malicious input data. This flaw allows a local user to crash the system...

QEMU security vulnerabilities

QEMU Quick Emulator is a set of simulation processor software by Fabrice Bellard, a French individual developer. The software is fast and cross-platform. A security vulnerability exists in QEMU's USB xHCI controller that stems from the presence of an infinite loop flaw. An attacker could exploit...

wildfly-core: memory leak in WildFly host-controller in domain mode while not able to reconnect to domain-controller

A memory leak flaw was found in WildFly in all versions up to 21.0.0.Final, where the host-controller tries to reconnect in a loop, generating new connections that are not properly closed while unable to connect to the domain controller. This flaw allows an attacker to cause an Out of memory OOM...

org.wildfly.core:wildfly-core-dist (3.0.0.beta2), org.wildfly.core:wildfly-core-feature-pack (3.0.0.beta2) +6 more potentially affected by CVE-2019-14838 via org.wildfly.core:wildfly-host-controller (3.0.0.beta2)

org.wildfly.core:wildfly-host-controller MAVEN version 3.0.0.beta2 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-host-controller and may be impacted: - org.wildfly.core:wildfly-core-dist 3.0.0.beta2 -...

org.wildfly.core:wildfly-core-dist (4.0.0.alpha6), org.wildfly.core:wildfly-core-feature-pack (4.0.0.alpha6) +6 more potentially affected by CVE-2019-14838 via org.wildfly.core:wildfly-host-controller (4.0.0.alpha6)

org.wildfly.core:wildfly-host-controller MAVEN version 4.0.0.alpha6 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-host-controller and may be impacted: - org.wildfly.core:wildfly-core-dist 4.0.0.alpha6 -...

org.wildfly.core:wildfly-core-dist (3.0.0.beta23), org.wildfly.core:wildfly-core-feature-pack (3.0.0.beta23) +6 more potentially affected by CVE-2019-14838 via org.wildfly.core:wildfly-host-controller (3.0.0.beta23)

org.wildfly.core:wildfly-host-controller MAVEN version 3.0.0.beta23 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-host-controller and may be impacted: - org.wildfly.core:wildfly-core-dist 3.0.0.beta23 -...

org.wildfly.core:wildfly-cli (2.0.0.beta4), org.wildfly.core:wildfly-core-dist (2.0.0.beta4) +9 more potentially affected by CVE-2019-14838 via org.wildfly.core:wildfly-host-controller (2.0.0.beta4)

org.wildfly.core:wildfly-host-controller MAVEN version 2.0.0.beta4 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-host-controller and may be impacted: - org.wildfly.core:wildfly-cli 2.0.0.beta4 -...

org.wildfly.core:wildfly-core-dist (3.1.0.final), org.wildfly.core:wildfly-core-feature-pack (3.1.0.final) +6 more potentially affected by CVE-2019-14838 via org.wildfly.core:wildfly-host-controller (3.1.0.final)

org.wildfly.core:wildfly-host-controller MAVEN version 3.1.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-host-controller and may be impacted: - org.wildfly.core:wildfly-core-dist 3.1.0.final -...

org.wildfly.core:wildfly-core-dist (3.0.0.alpha13), org.wildfly.core:wildfly-core-feature-pack (3.0.0.alpha13) +6 more potentially affected by CVE-2019-14838 via org.wildfly.core:wildfly-host-controller (3.0.0.alpha13)

org.wildfly.core:wildfly-host-controller MAVEN version 3.0.0.alpha13 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-host-controller and may be impacted: - org.wildfly.core:wildfly-core-dist 3.0.0.alpha13 -...

org.wildfly.core:wildfly-cli (2.0.0.beta5), org.wildfly.core:wildfly-core-dist (2.0.0.beta5) +8 more potentially affected by CVE-2019-14838 via org.wildfly.core:wildfly-host-controller (2.0.0.beta5)

org.wildfly.core:wildfly-host-controller MAVEN version 2.0.0.beta5 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-host-controller and may be impacted: - org.wildfly.core:wildfly-cli 2.0.0.beta5 -...

org.wildfly.core:wildfly-core-build (>=7.0.0.alpha1, <=7.0.0.final), org.wildfly.core:wildfly-core-dist-legacy (>=7.0.0.alpha1, <=7.0.0.final) +8 more potentially affected by CVE-2019-14838 via org.wildfly.core:wildfly-host-controller (>=7.0.0.alpha1, <=7.0.0.final)

org.wildfly.core:wildfly-host-controller MAVEN version =7.0.0.alpha1, =7.0.0.alpha1, =7.0.0.alpha1, =7.0.0.alpha1, =7.0.0.alpha1, =7.0.0.alpha1, =7.0.0.alpha1, =7.0.0.alpha1, =7.0.0.alpha1, =7.0.0.alpha1, =7.0.0.alpha1, =7.0.0.final Source cves: CVE-2019-14838 Source advisory: GHSA-82V2-F875-73G9...

org.wildfly.core:wildfly-core-dist (2.2.0.cr3), org.wildfly.core:wildfly-core-feature-pack (2.2.0.cr3) +6 more potentially affected by CVE-2019-14838 via org.wildfly.core:wildfly-host-controller (2.2.0.cr3)

org.wildfly.core:wildfly-host-controller MAVEN version 2.2.0.cr3 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-host-controller and may be impacted: - org.wildfly.core:wildfly-core-dist 2.2.0.cr3 -...

org.wildfly.core:wildfly-core-dist (2.0.0.cr9), org.wildfly.core:wildfly-core-feature-pack (2.0.0.cr9) +6 more potentially affected by CVE-2019-14838 via org.wildfly.core:wildfly-host-controller (2.0.0.cr9)

org.wildfly.core:wildfly-host-controller MAVEN version 2.0.0.cr9 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-host-controller and may be impacted: - org.wildfly.core:wildfly-core-dist 2.0.0.cr9 -...

org.wildfly.core:wildfly-core-dist (3.0.0.beta24), org.wildfly.core:wildfly-core-feature-pack (3.0.0.beta24) +6 more potentially affected by CVE-2019-14838 via org.wildfly.core:wildfly-host-controller (3.0.0.beta24)

org.wildfly.core:wildfly-host-controller MAVEN version 3.0.0.beta24 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-host-controller and may be impacted: - org.wildfly.core:wildfly-core-dist 3.0.0.beta24 -...

org.wildfly.arquillian:wildfly-arquillian-container-embedded (2.1.0.alpha3), org.wildfly.core:wildfly-core-dist (3.0.0.beta26) +7 more potentially affected by CVE-2019-14838 via org.wildfly.core:wildfly-host-controller (3.0.0.beta26)

org.wildfly.core:wildfly-host-controller MAVEN version 3.0.0.beta26 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-host-controller and may be impacted: - org.wildfly.arquillian:wildfly-arquillian-container-embedded 2.1.0.alpha...

org.wildfly.core:wildfly-core-dist (3.0.0.beta22), org.wildfly.core:wildfly-core-feature-pack (3.0.0.beta22) +6 more potentially affected by CVE-2019-14838 via org.wildfly.core:wildfly-host-controller (3.0.0.beta22)

org.wildfly.core:wildfly-host-controller MAVEN version 3.0.0.beta22 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-host-controller and may be impacted: - org.wildfly.core:wildfly-core-dist 3.0.0.beta22 -...

org.wildfly.core:wildfly-core-dist (5.0.0.alpha1), org.wildfly.core:wildfly-core-feature-pack (5.0.0.alpha1) +6 more potentially affected by CVE-2019-14838 via org.wildfly.core:wildfly-host-controller (5.0.0.alpha1)

org.wildfly.core:wildfly-host-controller MAVEN version 5.0.0.alpha1 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-host-controller and may be impacted: - org.wildfly.core:wildfly-core-dist 5.0.0.alpha1 -...

org.wildfly.core:wildfly-core-build (6.0.0.cr2), org.wildfly.core:wildfly-core-dist-legacy (6.0.0.cr2) +8 more potentially affected by CVE-2019-14838 via org.wildfly.core:wildfly-host-controller (6.0.0.cr2)

org.wildfly.core:wildfly-host-controller MAVEN version 6.0.0.cr2 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-host-controller and may be impacted: - org.wildfly.core:wildfly-core-build 6.0.0.cr2 -...

org.wildfly.core:wildfly-core-dist (5.0.0.alpha2), org.wildfly.core:wildfly-core-feature-pack (5.0.0.alpha2) +6 more potentially affected by CVE-2019-14838 via org.wildfly.core:wildfly-host-controller (5.0.0.alpha2)

org.wildfly.core:wildfly-host-controller MAVEN version 5.0.0.alpha2 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-host-controller and may be impacted: - org.wildfly.core:wildfly-core-dist 5.0.0.alpha2 -...

org.wildfly.core:wildfly-core-dist (3.0.0.alpha18), org.wildfly.core:wildfly-core-feature-pack (3.0.0.alpha18) +6 more potentially affected by CVE-2019-14838 via org.wildfly.core:wildfly-host-controller (3.0.0.alpha18)

org.wildfly.core:wildfly-host-controller MAVEN version 3.0.0.alpha18 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-host-controller and may be impacted: - org.wildfly.core:wildfly-core-dist 3.0.0.alpha18 -...