The vulnerability of the batman-adv component in the Linux operating system, which allows a hacker to cause a service failure.

The vulnerability of the batman-adv component in the Linux operating system is related to improper error handling. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerabilities of Linux operating system’s kernel components allow attackers to cause service failures.

The vulnerability of MM and THP components in the Linux operating system is related to improper error handling. Exploiting this vulnerability can allow an attacker to cause a service failure...

Sensitive Information Exposure

Moodle is vulnerable to Sensitive Information Exposure. The vulnerability is due to improper error handling, allowing users with the "send message" capability to view the names of other users they should not have access to via an error message in the Messaging system...

The vulnerability of the mmc_spi component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the mmcspi component in the Linux operating system’s kernel is related to improper error handling in the mmcspiprobe function. Exploiting this vulnerability can allow an attacker to cause a service failure...

Sentry improper error handling leaks Application Integration Client Secret

Impact During routine testing, we identified a scenario where a specific error message generated by our platform could include a plaintext Client ID and Client Secret for an application integration. The Client ID and Client Secret would not be displayed in the UI, but would be returned in the...

The vulnerability of the scarlett2 component in the Linux operating system, which allows a hacker to trigger a service failure.

The vulnerability of the scarlett2 component in the Linux operating system is related to improper error handling in the scarlett2usbsetconfig function. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the btrfs component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the btrfs component in the Linux operating system’s kernel is related to improper error handling in the mutexunlock function. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the send component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the send component in the Linux operating system’s kernel is related to improper error handling in the iterate inoderef function. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the scarlett2 component in the Linux operating system, which allows a hacker to trigger a service failure.

The vulnerability of the scarlett2 component in the Linux operating system is related to improper error handling. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the Linux operating system’s crypto kernel component, which allows a hacker to trigger a service failure

The vulnerability of the Linux operating system’s crypto kernel component is related to improper error handling in the safexcelsendreq function. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20241120-02

A vulnerability in the locking/wwmutex/test components of the Linux operating system kernel is related to improper locking in the functions listforeachentrysafe, stressonework, and stress in the kernel/locking/test/test-wwmutex.c. Exploitation of the vulnerability could allow an attacker to cause...

The vulnerability of the Linux operating system’s kernel component, which allows a hacker to cause a service failure

The vulnerability of the Linux operating system’s kernel component is related to improper error handling. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the nbd component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the nbd component in the Linux operating system’s kernel is related to improper error handling in the nbdgenlstatus function. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20241118-01

Vulnerability in the ena component of the Linux kernel is related to resource management errors in the enaunmaptxbuff and enafreetxbufs functions in drivers/net/ethernet/amazon/ena/ena/enanetdev.c. Exploitation of the vulnerability could allow an attacker to cause a denial of service A...

ROS-20241108-01

A vulnerability in the mac80211 component of the Linux operating system kernel is related to information disclosure in the function stainfofree in net/mac80211/stainfo.c. Exploitation of the vulnerability could allow an attacker to gain access to confidential information A vulnerability in the As...

ROS-20241106-01

Vulnerability of the supply component of the Linux kernel is related to resource management errors in the bq27xxxbatteryi2cremove function in drivers/power/supply/bq27xxxbatteryi2c.c. Exploitation of the of the vulnerability could allow an attacker to cause a denial of service A vulnerability in...

Security Bulletin: IBM Sterling Control Center is vulnerable to Improper Error Handling

Summary Improper Error Handling is affecting v6.2.1 and v6.3.1. Vulnerability Details CVEID:CVE-2024-35112 DESCRIPTION: IBM Sterling Control Center could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information...

ROS-20241105-01

A vulnerability in the i2c component of the Linux kernel is related to a stack overflow in the function mlxbfi2csmbusstarttransaction in drivers/i2c/busses/i2c-mlxbf.c. Exploitation of the vulnerability could allow an attacker to cause a denial of service A vulnerability in the netfilter componen...

CVE-2024-51560 Improper Error Handling Vulnerability in Wave 2.0

This vulnerability exists in the Wave 2.0 due to improper exception handling for invalid inputs at certain API endpoint. An authenticated remote attacker could exploit this vulnerability by providing invalid inputs for “userId” parameter in the API request leading to generation of error message...

Drupal Improper Error Handling Vulnerability (SA-CORE-2024-002) - Linux

Drupal is prone to an improper error handling vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:drupal:drupal";...