11335 matches found
CVE-2022-29968
An issue was discovered in the Linux kernel through 5.17.5. iorwinitfile in fs/iouring.c lacks initialization of kiocb-private...
DEBIAN-CVE-2022-29968
An issue was discovered in the Linux kernel through 5.17.5. iorwinitfile in fs/iouring.c lacks initialization of kiocb-private...
CVE-2022-29968
An issue was discovered in the Linux kernel through 5.17.5. iorwinitfile in fs/iouring.c lacks initialization of kiocb-private...
Code injection
An issue was discovered in the Linux kernel through 5.17.5. iorwinitfile in fs/iouring.c lacks initialization of kiocb-private...
UBUNTU-CVE-2022-29968
An issue was discovered in the Linux kernel through 5.17.5. iorwinitfile in fs/iouring.c lacks initialization of kiocb-private...
CVE-2022-29968
An issue was discovered in the Linux kernel through 5.17.5. iorwinitfile in fs/iouring.c lacks initialization of kiocb-private...
CVE-2022-29968
An issue was discovered in the Linux kernel through 5.17.5. iorwinitfile in fs/iouring.c lacks initialization of kiocb-private...
CVE-2022-29968
An issue was discovered in the Linux kernel through 5.17.5. iorwinitfile in fs/iouring.c lacks initialization of kiocb-private...
CVE-2022-29968
CVE-2022-29968 affects the Linux kernel up to version 5.17.5, where io_rw_init_file in fs/io_uring.c fails to initialize kiocb->private. This can lead to kernel memory leakage or exposure as described in connected advisories (e.g., CNVD/Ubuntu notes). A patch/remediation is not explicitly deta...
CVE-2022-29968
An issue was discovered in the Linux kernel through 5.17.5. iorwinitfile in fs/iouring.c lacks initialization of kiocb-private...
CVE-2022-29968: Missing Initialization of Resource
An issue was discovered in the Linux kernel through 5.17.5. iorwinitfile in fs/iouring.c lacks initialization of kiocb-private...
apache-commons-jxpath:JXPathFuzzer: Uncaught exception in jaz.Zer.<clinit>
Detailed Report: https://oss-fuzz.com/testcase?key=4854085561483264 Project: apache-commons-jxpath Fuzzing Engine: libFuzzer Fuzz Target: JXPathFuzzer Job Type: libfuzzerasanapache-commons-jxpath Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash State: jaz.Zer...
SUSE SLES15 / openSUSE 15 Security Update : libslirp (SUSE-SU-2022:1465-1)
The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:1465-1 advisory. - CVE-2021-3592: Fixed invalid pointer initialization may lead to information disclosure bootp bsc1187364. -...
xmlpull:PullParserFactoryFuzzer: Uncaught exception in jaz.Zer.<clinit>
Detailed Report: https://oss-fuzz.com/testcase?key=6215041596129280 Project: xmlpull Fuzzing Engine: libFuzzer Fuzz Target: PullParserFactoryFuzzer Job Type: libfuzzerasanxmlpull Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash State: jaz.Zer...
Adobe Acrobat Reader DC Font Parsing Uninitialized Variable Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...
`array!` macro is unsound when its length is impure constant
Affected versions of this crate did substitute the array length provided by an user at compile-time multiple times. When an impure constant expression is passed as an array length such as a result of an impure procedural macro, this can result in the initialization of an array with uninitialized...
Apache Doris hardcoded key and IV
Apache Doris, prior to 1.0.0, used a hardcoded key and IV to initialize the cipher used for ldap password, which may lead to information disclosure...
GHSA-98J2-HFXP-8H8R Apache Doris hardcoded key and IV
Apache Doris, prior to 1.0.0, used a hardcoded key and IV to initialize the cipher used for ldap password, which may lead to information disclosure...
Routing Protocol Demon Junos DoS
The vulnerability of the routing protocol demon on the Junos operating system is related to improper initialization. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...