CVE-2021-3564

A flaw double-free memory corruption in the Linux kernel HCI device initialization subsystem was found in the way user attach malicious HCI TTY Bluetooth device. A local user could use this flaw to crash the system. This flaw affects all the Linux kernel versions starting from 3.13...

CVE-2021-3564: Double Free

A flaw double-free memory corruption in the Linux kernel HCI device initialization subsystem was found in the way user attach malicious HCI TTY Bluetooth device. A local user could use this flaw to crash the system. This flaw affects all the Linux kernel versions starting from 3.13...

Intel INTEL-SA-00463 security vulnerabilities

Intel INTEL-SA-00463 is the BIOS firmware for Intel® processors from Intel Corporation USA. A security vulnerability exists in INTEL-SA-00463, which stems from an improper initialization of the processor's firmware could allow a privileged user to enable privileged escalation via local access...

CSME information leakage vulnerability

CSME is known as the Intel Management Engine BIOS Extension. An information disclosure vulnerability exists in IntelR CSME that stems from improper subsystem initialization in CSME, which could allow a privileged user to locally access sensitive information, resulting in an information disclosure...

OpenText Brava! Desktop IGS File Parsing Uninitialized Pointer Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

PT-2024-11170

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.13-rc3 Description The vulnerability is related to the initialization of cad pid in the Linux kernel. During boot, kernel init freeable initializes cad pid to the init task's struct pid. Later, when cad pid is...

UVI-2021-1000578 net: hns3: put off calling register_netdev() until client initialize complete

net: hns3: put off calling registernetdev until client initialize complete This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.42 by commit...

GSD-2021-1000532 net: hns3: put off calling register_netdev() until client initialize complete

net: hns3: put off calling registernetdev until client initialize complete This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.9 by commit...

PT-2021-24999

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.12.9 Description: The issue is related to the zero-initialization of the tc skb extension on allocation in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations...

PT-2021-29040

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.42 Description The issue is related to the zero-initialization of the tc skb extension on allocation in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations...

PT-2021-25046

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.42 Description A potential security issue exists due to the lack of zero-initialization of the tc skb extension upon allocation. The actual impact and attack plausibility have not yet been proven...

PT-2024-11278 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the initialization of the usb2 PHY glue in the Linux kernel when only PHY1 is used, such as on the Odroid-HC4 device. The regmap init code uses the usb2 ports...

PT-2021-28993

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.12.9 Description The issue is related to the zero-initialization of the tc skb extension on allocation in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations F...

EulerOS 2.0 SP9 : grub2 (EulerOS-SA-2021-1948)

According to the versions of the grub2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in grub2 in versions prior to 2.06. The cutmem command does not honor secure boot locking allowing an privileged attacker to...

WS-2021-0238

Linux/Kernel in versions v5.11-rc1 to v5.12.10 is vulnerable to initializing CQ fragments buffer...

PT-2021-24709

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.10 through v5.12.3 Description The issue is related to port event handling on initialization. It was introduced in version v5.10 and fixed in version v5.12.4. The actual impact and attack plausibility have not yet been...

OPENSUSE-SU-2021:0799-1 Security update for libu2f-host

This update for libu2f-host fixes the following issues: This update ships the u2f-host package jscECO-3687 bsc1184648 Version 1.1.10 released 2019-05-15 - Add new devices to udev rules. - Fix a potentially uninitialized buffer CVE-2019-9578, bsc1128140 Version 1.1.9 released 2019-03-06 - Fix CID...

Conviction scoring fails to initialize and bootstrap

Handle 0xRajeev Vulnerability details Impact Conviction scores for new addresses/users fail to initialize+bootstrap in ERC20ConvictionScore’s updateConvictionScore because a new user’s numCheckpoints will be zero and never gets initialized. This effectively means that FairSide conviction scoring...

PT-2021-10553 · Metinfo · Metinfo

Name of the Vulnerable Software and Affected Versions: MetInfo version 7.0 beta Description: The issue allows attackers to delete and modify ini files in specific locations, including app/system/language/admin/language general.class.php and app/system/include/function/file.func.php...

MetInfo path traversal vulnerability

MetInfo adopts PHP+Mysql architecture, it is a cms building system which is very friendly to SEO, fully functional, supports multi-language, responsive display, and extremely suitable for enterprise and company website construction. A file modification vulnerability exists in MetInfo 7.0 beta. An...