PT-2024-21875

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue arises when unloading a modular pstore backend with records in pstorefs, triggering a dput double-drop warning. This warning occurs due to the incorrect use of d drop and dput ...

CVE-2023-45718

Sametime is impacted by a failure to invalidate sessions. The application is setting sensitive cookie values in a persistent manner in Sametime Web clients. When this happens, cookie values can remain valid even after a user has closed out their session...

CVE-2023-45718 HCL Sametime is impacted by a failure to invalidate sessions

Sametime is impacted by a failure to invalidate sessions. The application is setting sensitive cookie values in a persistent manner in Sametime Web clients. When this happens, cookie values can remain valid even after a user has closed out their session...

CVE-2023-45718 HCL Sametime is impacted by a failure to invalidate sessions

Sametime is impacted by a failure to invalidate sessions. The application is setting sensitive cookie values in a persistent manner in Sametime Web clients. When this happens, cookie values can remain valid even after a user has closed out their session...

The vulnerability of the __fscache_invalidate() function in the fs/fscache/cookie.c module of the Linux operating system allows a hacker to induce a service failure.

The vulnerability of the fscacheinvalidate function in the fs/fscache/cookie.c module of the Linux operating system is related to a memory leak. Exploiting this vulnerability could allow an attacker to cause a service failure...

PT-2023-9487

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The vulnerability is related to a soft lockup triggered by the arm smmu mm invalidate range function in the Linux kernel's iommu/arm-smmu-v3 component. When running an SVA case, a soft...

Security Bulletin: Vulnerability Identified in Cloud Pak System (CVE-2020-4914)

Summary Invalidate session vulnerability identified in IBM Cloud Pak System UI and Rest API at logout. IBM Cloud Pak System has addressed vulnerability. Vulnerability Details CVEID:CVE-2020-4914 DESCRIPTION: IBM Cloud Pak System does not invalidate session after logout which could allow a local...

SUSE CVE-2005-3808

Integer overflow in the invalidateinodepages2range function in mm/truncate.c in Linux kernel 2.6.11 to 2.6.14 allows local users to cause a denial of service hang via 64-bit mmap calls that are not properly handled on a 32-bit system...

SUSE CVE-2008-5902

Buffer overflow in the xrdpbitmapinvalidate function in xrdp/xrdpbitmap.c in xrdp 0.4.1 and earlier allows remote attackers to execute arbitrary code via a crafted request...

SUSE CVE-2019-12222

An issue was discovered in libSDL2.a in Simple DirectMedia Layer SDL 2.0.9. There is an out-of-bounds read in the function SDLInvalidateMap at video/SDLpixels.c...

GSD-2023-1001114 f2fs: fix to invalidate dcc->f2fs_issue_discard in error path

f2fs: fix to invalidate dcc-f2fsissuediscard in error path This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.86 by commit...

GSD-2023-1000705 f2fs: fix to invalidate dcc->f2fs_issue_discard in error path

f2fs: fix to invalidate dcc-f2fsissuediscard in error path This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GHSA-4M5P-5W5W-3JCF com.enonic.xp:lib-auth vulnerable to Session Fixation

Impact All id-providers using lib-auth login method. Patches https://github.com/enonic/xp/commit/0189975691e9e6407a9fee87006f730e84f734ff https://github.com/enonic/xp/commit/2abac31cec8679074debc4f1fb69c25930e40842 https://github.com/enonic/xp/commit/1f44674eb9ab3fbab7103e8d08067846e88bace4...

PT-2022-28162

Name of the Vulnerable Software and Affected Versions Enonic XP versions less than 7.7.4 Description The issue is a session fixation problem that allows a remote and unauthenticated attacker to use prior sessions due to the lack of invalidating session attributes. This affects all id-providers...

PT-2022-7440

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a nested dead lock in the IB/core component of the Linux kernel, specifically as part of the ODP flow. This dead lock can occur when the mmput function is called...

PT-2022-7185 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel affected versions not specified Description: The issue is related to a memory leak in the fscache invalidate function in the fs/fscache/cookie.c module of the Linux kernel. This can be exploited to cause a denial of service. The...

unicorn:fuzz_emu_mips_32be: Crash in r4k_invalidate_tlb_mips

Project: https://github.com/unicorn-engine/unicorn.git Detailed Report: https://oss-fuzz.com/testcase?key=5476583250460672 Project: unicorn Fuzzing Engine: libFuzzer Fuzz Target: fuzzemumips32be Job Type: libfuzzerasanunicorn Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x6220007ed0...

CVE-2022-32990

An issue in gimplayerinvalidateboundary of GNOME GIMP 2.10.30 allows attackers to trigger an unhandled exception via a crafted XCF file, causing a Denial of Service DoS...

GHSA-G4G7-Q726-V5HG Symfony CSRF Token Fixation

An issue was discovered in the Security component in Symfony 2.7.x before 2.7.48, 2.8.x before 2.8.41, 3.3.x before 3.3.17, 3.4.x before 3.4.11, and 4.0.x before 4.0.11. By default, a user's session is invalidated when the user is logged out. This behavior can be disabled through the...

PT-2022-29277

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.3 Description The issue is related to the mmmremap.c file in the Linux Kernel, where a pointless invalidate range start/end on mremap occurs when old size=0. The actual impact and attack plausibility have n...