PT-2022-31294

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.14 Description The issue is related to a dereference of a stale list iterator after a loop body in the f2fs component. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2022-30953

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.3 Description The issue is related to a dereference of a stale list iterator after a loop body in the f2fs component. The actual impact and attack plausibility have not yet been proven. Recommendations For...

MGASA-2022-0234 Updated php packages fix security vulnerability

CLI -Fixed bug 8575 CLI closes standard streams too early. Core -Fixed Haiku ZTS builds. Date -Fixed bug 8471 Segmentation fault when converting immutable and mutable DateTime instances created using reflection. php-fpm - Fixed bug 72185 writes empty fcgi record causing nginx 502. Mysqlnd - Fixed...

Use after free in lru crate

Lru crate has use after free vulnerability. Lru crate has two functions for getting an iterator. Both iterators give references to key and value. Calling specific functions, like pop, will remove and free the value, and but it's still possible to access the reference of value which is already...

GHSA-QQMC-HWQP-8G2W Use after free in lru crate

Lru crate has use after free vulnerability. Lru crate has two functions for getting an iterator. Both iterators give references to key and value. Calling specific functions, like pop, will remove and free the value, and but it's still possible to access the reference of value which is already...

GHSA-3QM2-RFQW-FMRW move_elements can double-free objects on panic

Affected versions of scratchpad used ptr::read to read elements while calling a user provided function f on them. Since the pointer read duplicates ownership, a panic inside the user provided f function could cause a double free when unwinding. The flaw was fixed in commit 891561bea by removing t...

move_elements can double-free objects on panic

Affected versions of scratchpad used ptr::read to read elements while calling a user provided function f on them. Since the pointer read duplicates ownership, a panic inside the user provided f function could cause a double free when unwinding. The flaw was fixed in commit 891561bea by removing t...

PT-2025-8359

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A issue in the Linux kernel has been identified where a stale list iterator could be dereferenced after a loop, potentially leading to out-of-bounds or undefined values being loaded. Thi...

The vulnerability of the loop_rw_iter function (fs/io_uring.c) in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the looprwiter function fs/iouring.c in the operating system’s kernel is related to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

Use After Free in lru

Lru crate has two functions for getting an iterator. Both iterators give references to key and value. Calling specific functions, like pop, will remove and free the value, and but it's still possible to access the reference of value which is already dropped causing use after free...

GHSA-V362-2895-H9R2 Use After Free in lru

Lru crate has two functions for getting an iterator. Both iterators give references to key and value. Calling specific functions, like pop, will remove and free the value, and but it's still possible to access the reference of value which is already dropped causing use after free...

GSD-2021-1002833 KVM: x86/mmu: Don't advance iterator after restart due to yielding

KVM: x86/mmu: Don't advance iterator after restart due to yielding This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.12 by commit...

PT-2021-27301

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.12 Description: The issue is related to the KVM x86/mmu component, where the iterator is not advanced after a restart due to yielding. The actual impact and attack plausibility have not yet been proven...

Design/Logic Flaw

An issue was discovered in the lru crate before 0.7.1 for Rust. The iterators have a use-after-free, as demonstrated by an access after a pop operation...

RUSTSEC-2021-0130 Use after free in lru crate

Lru crate has use after free vulnerability. Lru crate has two functions for getting an iterator. Both iterators give references to key and value. Calling specific functions, like pop, will remove and free the value, and but it's still possible to access the reference of value which is already...

Use after free in lru crate

Lru crate has use after free vulnerability. Lru crate has two functions for getting an iterator. Both iterators give references to key and value. Calling specific functions, like pop, will remove and free the value, and but it's still possible to access the reference of value which is already...

Denial Of Service (DoS)

rustc:sid is vulnerable to denial of service. The Zip implementation can report an incorrect size due to an integer overflow. This bug can lead to a buffer overflow when a consumed Zip iterator is used again...

Gravity null pointer dereference vulnerability

Gravity is a powerful, dynamically typed, lightweight, embedded programming language written in C. A null pointer dereference vulnerability exists in the listiteratornext function in gravitycore.c in Gravity 0.8.1 and earlier versions. An attacker could exploit this vulnerability to cause a denia...

CVE-2021-32285

An issue was discovered in gravity through 0.8.1. A NULL pointer dereference exists in the function listiteratornext located in gravitycore.c. It allows an attacker to cause Denial of Service...

opencensus-cpp:grpc_tags_bin_fuzzer: Use-of-uninitialized-value in std::__1::__hash_iterator<std::__1::__hash_node<std::__1::__hash_value_type<std:

Detailed Report: https://oss-fuzz.com/testcase?key=6351351316086784 Project: opencensus-cpp Fuzzing Engine: libFuzzer Fuzz Target: grpctagsbinfuzzer Job Type: libfuzzermsanopencensus-cpp Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...