PT-2021-25177

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.37 through 4.4.270 Description The issue is related to an incorrect limit in the filelayout decode layout function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-25132

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.193 Description The issue is related to an incorrect limit in the filelayout decode layout function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-25149

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.37 through 4.14.234 Description The issue is related to an incorrect limit in the filelayout decode layout function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-29102

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.37 through 5.4.123 Description The issue is related to an incorrect limit in the filelayout decode layout function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-29025

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.37 through 5.12.8 Description The issue is related to an incorrect limit in the filelayout decode layout function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-29143

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.37 through 4.14.234 Description The issue is related to an incorrect limit in the filelayout decode layout function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

RUSTSEC-2021-0095 `mopa` is technically unsound

The mopa crate redefines the deprecated TraitObject struct from core::raw like so: rust reprC deriveCopy, Clone dochidden pub struct TraitObject pub data: mut , pub vtable: mut , This is done to then transmute a reference to a trait object &dyn Trait for any trait Trait into this struct and...

PT-2021-24269

Name of the Vulnerable Software and Affected Versions: mopa crate through 2021-06-01 Description: An issue was discovered in the mopa crate, where it incorrectly relies on Trait memory layout, possibly leading to future occurrences of arbitrary code execution or ASLR bypass. The mopa crate...

Fedora: Security Advisory for graphviz (FEDORA-2021-ede783f2b6)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for graphviz (FEDORA-2021-5fb7be1fbf)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2021-32614

A flaw was found in dmg2img through 20170502. fillmishblk does not check the length of the read buffer, and copy 0xCC bytes from it. The length of the buffer is controlled by an attacker. By providing a length smaller than 0xCC, memcpy reaches out of the malloc'ed bound. This possibly leads to...

CVE-2021-32614

A flaw was found in dmg2img through 20170502. fillmishblk does not check the length of the read buffer, and copy 0xCC bytes from it. The length of the buffer is controlled by an attacker. By providing a length smaller than 0xCC, memcpy reaches out of the malloc'ed bound. This possibly leads to...

CVE-2021-32614

A flaw was found in dmg2img through 20170502. fillmishblk does not check the length of the read buffer, and copy 0xCC bytes from it. The length of the buffer is controlled by an attacker. By providing a length smaller than 0xCC, memcpy reaches out of the malloc'ed bound. This possibly leads to...

CVE-2021-32614

A flaw was found in dmg2img through 20170502. fillmishblk does not check the length of the read buffer, and copy 0xCC bytes from it. The length of the buffer is controlled by an attacker. By providing a length smaller than 0xCC, memcpy reaches out of the malloc'ed bound. This possibly leads to...

CVE-2021-32614

A flaw was found in dmg2img through 20170502. fillmishblk does not check the length of the read buffer, and copy 0xCC bytes from it. The length of the buffer is controlled by an attacker. By providing a length smaller than 0xCC, memcpy reaches out of the malloc'ed bound. This possibly leads to...

CVE-2021-32614

A flaw was found in dmg2img through 20170502. fillmishblk does not check the length of the read buffer, and copy 0xCC bytes from it. The length of the buffer is controlled by an attacker. By providing a length smaller than 0xCC, memcpy reaches out of the malloc'ed bound. This possibly leads to...

Design/Logic Flaw

A flaw was found in dmg2img through 20170502. dmg2img did not validate the size of the read buffer during memcpy inside the main function. This possibly leads to memory layout information leaking in the data. This might be used in a chain of vulnerability in order to reach code execution...

CVE-2021-3548

A flaw was found in dmg2img through 20170502. dmg2img did not validate the size of the read buffer during memcpy inside the main function. This possibly leads to memory layout information leaking in the data. This might be used in a chain of vulnerability in order to reach code execution...

CVE-2021-3548

A flaw was found in dmg2img through 20170502. dmg2img did not validate the size of the read buffer during memcpy inside the main function. This possibly leads to memory layout information leaking in the data. This might be used in a chain of vulnerability in order to reach code execution...

PT-2024-11226 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a NULL pointer dereference in the pnfs mark matching lsegs return function. This occurs when the pnfs return layout function calls pnfs mark matching lsegs retu...