PT-2021-28756

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.12.4 Description The issue is related to the hv: vmbus driver in the Linux Kernel. An error message is dropped when 'No request id available'. The actual impact and attack plausibility have not yet been proven...

PT-2021-28840

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.37 Description The issue is related to the hv: vmbus driver in the Linux Kernel. It was introduced in version v5.9 and fixed in version v5.10.37. The actual impact and attack plausibility have not yet been...

PT-2021-24846

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to 5.10.37 Description: The issue is related to the hv: vmbus driver in the Linux Kernel. It was introduced in version v5.9 and fixed in version v5.10.37. The actual impact and attack plausibility have not yet been...

PT-2021-24927

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.191 Description: The issue is related to the VMbus unload in the hv driver. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to v4.19.191...

PT-2021-28938

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 4.14.199 through 4.14.232 Description The issue is related to the VMbus unload in the hv driver. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions 4.14.199 throu...

PT-2021-24762

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.12.4 Description The issue is related to the hv: vmbus driver in the Linux Kernel. An error message is dropped when 'No request id available'. The actual impact and attack plausibility have not yet been proven...

PT-2021-28921

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.191 Description The issue is related to the VMbus unload in the hv driver. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v4.19.191,...

PT-2024-11149

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak has been resolved in the Linux kernel. The issue occurred in the uio hv generic module, where memory allocated by vmbus alloc ring at the beginning of the probe function wa...

PT-2021-8262 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a memory leak in error handling paths in the Linux kernel, specifically in the uio hv generic component. If the vmbus establish gpadl function fails, the...

kernel security, bug fix, and enhancement update

4.18.0-240.15.13.OL8 - Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and shim-x6...

kernel security and bug fix update

3.10.0-1160.11.1.OL7 - Oracle Linux certificates Ilya Okomin - Oracle Linux RHCK Module Signing Key was compiled into kernel [email protected] - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and shim-x64 slotsret under spinlockirq protection Rafael...

DEBIAN-CVE-2019-20919

An issue was discovered in the DBI module before 1.643 for Perl. The hvfetch documentation requires checking for NULL and the code does that. But, shortly thereafter, it calls SvOKprofile, causing a NULL pointer dereference...

hv-zografski.de Cross Site Scripting vulnerability OBB-1323630

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

PT-2020-21863

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to an index-out-of-bounds crash. Technical details about the crash include the involvement of specific functions: DHT::get hv rbg,...

vBulletin 5.6.1 SQL Injection Exploit

This Metasploit module exploits a SQL injection vulnerability found in vBulletin versions 5.6.1 and below. This module uses the getIndexableContent vulnerability to reset the administrator's password and it then uses the administrators login information to achieve remote code execution on the...

kernel security and bug fix update

3.10.0-1127.8.2.OL7 - Oracle Linux certificates Alexey Petrenko - Oracle Linux RHCK Module Signing Key was compiled into kernel [email protected] - Update x509.genkey Orabug: 24817676 3.10.0-1127.8.2 - net netlabel: cope with NULL catmap Paolo Abeni 1827239 1827240...

PT-2020-2414 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.18 Description: The issue is caused by a conflicting use of HSTATE HOST R1 to store r1 state in kvmppc hv entry plus in kvmppc save,restore tm, leading to a stack corruption. An attacker with the ability to ru...

PT-2020-6247

Name of the Vulnerable Software and Affected Versions DBI module versions prior to 1.643 for Perl Description An issue was discovered in the DBI module for Perl, where the code checks for NULL as required by the hv fetch documentation, but then calls SvOKprofile, causing a NULL pointer dereferenc...

kernel security and bug fix update

4.18.0-147.5.11.OL8 - Oracle Linux certificates Alexey Petrenko - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 4.18.0-147.5.11 - powerpc powerpc/shared: Use static key to detect shared...

PT-2019-6198 · None +3 · Libde265 +3

Name of the Vulnerable Software and Affected Versions: libde265 version v1.0.4 Description: The issue is related to a heap buffer overflow in the put epel hv fallback function, which can be exploited via a crafted file, potentially allowing a remote attacker to cause a denial of service...