PT-2021-5501

Name of the Vulnerable Software and Affected Versions Linux kernel versions through 5.15.2 Description The issue is related to the function hw atl utils fw rpc wait in the Linux kernel, which allows an attacker to trigger an out-of-bounds write via a crafted length value. This can be exploited by...

CVE-2021-42372

A shell command injection in the HW Events SNMP community in XoruX LPAR2RRD and STOR2RRD before 7.30 allows authenticated remote attackers to execute arbitrary shell commands as the user running the service...

CVE-2021-42372

CVE-2021-42372 affects XoruX LPAR2RRD and STOR2RRD prior to version 7.30. The underlying issue is a shell command injection in the HW Events SNMP community, allowing authenticated remote attackers to execute arbitrary shell commands as the service user. Red Hat and other sources confirm the affec...

PT-2021-23602 · Unknown +1 · Xorux Lpar2Rrd +1

Name of the Vulnerable Software and Affected Versions: XoruX LPAR2RRD and STOR2RRD versions prior to 7.30 Description: A shell command injection in the HW Events SNMP community allows authenticated remote attackers to execute arbitrary shell commands as the user running the service...

CVE-2021-42372: Improper Neutralization of Special Elements used in an OS Command

A shell command injection in the HW Events SNMP community in XoruX LPAR2RRD and STOR2RRD before 7.30 allows authenticated remote attackers to execute arbitrary shell commands as the user running the service...

hw-personalmanagement.de Improper Access Control vulnerability OBB-2181261

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2021-36143

ACRN before 2.5 has a hw/pci/virtio/virtio.c vqendchains NULL Pointer Dereference...

CVE-2021-36143

ACRN before 2.5 has a hw/pci/virtio/virtio.c vqendchains NULL Pointer Dereference...

CVE-2021-36144

The polling timer handler in ACRN before 2.5 has a use-after-free for a freed virtio device, related to devicemodel/hw/pci/virtio/.c...

CVE-2021-36146

ACRN before 2.5 has a devicemodel/hw/pci/xhci.c NULL Pointer Dereference for a trb pointer...

PT-2021-21134

Name of the Vulnerable Software and Affected Versions: ACRN versions prior to 2.5 Description: The issue is related to a use-after-free condition in the polling timer handler for a freed virtio device, specifically in the devicemodel/hw/pci/virtio/.c files. Recommendations: For versions prior to...

PT-2021-21136

Name of the Vulnerable Software and Affected Versions: ACRN versions prior to 2.5 Description: The issue is related to a NULL Pointer Dereference for a trb pointer in the devicemodel/hw/pci/xhci.c file. This indicates a problem where the software attempts to access or manipulate a null non-existe...

CVE-2021-36143: NULL Pointer Dereference

ACRN before 2.5 has a hw/pci/virtio/virtio.c vqendchains NULL Pointer Dereference...

PT-2021-21137

Name of the Vulnerable Software and Affected Versions: ACRN versions prior to 2.5 Description: An issue in the devicemodel/hw/pci/virtio/virtio net.c file allows a NULL pointer dereference for vq-used in the virtio net ping rxq function. Recommendations: For versions prior to 2.5, update to versi...

CVE-2021-36146: NULL Pointer Dereference

ACRN before 2.5 has a devicemodel/hw/pci/xhci.c NULL Pointer Dereference for a trb pointer...

CVE-2021-36144: Use After Free

The polling timer handler in ACRN before 2.5 has a use-after-free for a freed virtio device, related to devicemodel/hw/pci/virtio/.c...

PT-2021-25523

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.12.12 Description: A potential memory leak issue was identified in the DMUB hw init function of the drm/amd/display component. The actual impact and attack plausibility have not yet been proven...

PT-2021-29517

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.12.12 Description A potential memory leak issue was identified in the DMUB hw init of the drm/amd/display component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linu...

PT-2021-25445

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to 5.10.45 Description: A potential memory leak issue was discovered in the DMUB hw init function of the drm/amd/display component. The actual impact and attack plausibility have not yet been proven. Recommendation...

PT-2021-29439

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to 5.10.45 Description A potential memory leak issue was identified in the DMUB hw init of the drm/amd/display component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...