The vulnerability of the `gb18030_mbc_enc_len` function in the Oniguruma regular expression library, which relates to reading data beyond the allowed buffer limits, allows attackers to cause service failures.

The vulnerability of the gb18030mbcenclen function in the Oniguruma regular expression library is related to reading data beyond the acceptable buffer limit. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the getBits function in the OpenEXR library, which is related to reading data from buffers beyond their allowable limits, allows attackers to cause service interruptions.

The vulnerability of the getBits function in the OpenEXR library lies in reading data beyond the permissible limits of the data buffer. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

USN-5018-1 linux, linux-aws, linux-aws-hwe, linux-azure, linux-azure-4.15, linux-gcp, linux-gcp-4.15, linux-hwe, linux-kvm, linux-oracle, linux-raspi2, linux-snapdragon vulnerabilities

It was discovered that the virtual file system implementation in the Linux kernel contained an unsigned to signed integer conversion error. A local attacker could use this to cause a denial of service system crash or execute arbitrary code. CVE-2021-33909 Piotr Krysiuk discovered that the eBPF...

The vulnerability of the Pillow library for working with raster graphics, related to reading beyond the allowed buffer data limits, allows a hacker to gain access to confidential data.

The vulnerability of the Pillow library for working with raster graphics relates to reading data beyond the allowed buffer limits. Exploiting this vulnerability could allow a malicious actor to gain access to confidential data...

The vulnerability of the library for EXIF file grammar analysis in libexif, which arises from reading beyond the permissible buffer limit, allows an intruder to access confidential data and also causes service failure.

The vulnerability of the library for EXIF file parsing in libexif is related to reading data beyond the permissible buffer limits. Exploiting this vulnerability could allow an attacker to access confidential data, as well as cause service failures...

The vulnerability of the FastHufDecoder::refill library in the ImfFastHuf.cpp software for storing images in OpenEXR format with a wide dynamic range of brightness levels, related to reading data beyond the buffer’s acceptable limits, allows attackers to cause service interruptions.

The vulnerability of the FastHufDecoder::refill library in the ImfFastHuf.cpp software for storing images with wide dynamic range brightness in the OpenEXR format is related to reading data beyond the allowable buffer size. Exploiting this vulnerability could allow a malicious actor to cause...

The vulnerability of QEMU’s emulation software lies in its ability to read data beyond the allowed buffer limits, allowing an attacker to trigger a service failure.

The vulnerability of QEMU’s emulation software-related hardware lies in reading data from buffers beyond acceptable limits. Exploiting this vulnerability allows an attacker to cause system failures...

Griefing lenders

Handle gpersoon Vulnerability details Impact Suppose there are several lenders for token B of a pair. And an attacker puts in a deposit for token A to the maximum possible amount via accountA. And an attacker puts in a deposit for token B to the maximum possible amount via accountB. And then lend...

The vulnerability of the OpenJPEG library for image encoding and decoding lies in the fact that the output of the operation is limited to a buffer size. This allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the OpenJPEG library for image encoding and decoding is related to the execution of operations within acceptable buffer data limits. Exploiting this vulnerability allows a malicious actor to gain access to confidential data, compromise its integrity, and cause service failure...

The vulnerability of the WavpackVerifySingleBlock function in the openUtils.c component of the WavPack audio codec allows a hacker to trigger a service failure by exceeding the permissible buffer data read limits.

The vulnerability of the WavpackVerifySingleBlock function in the openUtils.c component of the WavPack audio codec is related to reading data from within acceptable buffer limits. Exploiting this vulnerability allows a remote attacker to cause a service failure by using a specially created WavPac...

The vulnerability of the `_dbus_read_socket_with_unix_fds` function in the `dbus/dbus-sysdeps-unix.c` component of the D-Bus interprocess communication system, related to improper resource release, allows a malicious actor to cause a service failure.

The vulnerability of the dbusreadsocketwithunixfds function in the dbus/dbus-sysdeps-unix.c component of the D-Bus interprocess communication system is related to incorrect handling of exceeding the number of file descriptors. Exploiting this vulnerability allows an attacker to cause a service...

Target Access Problems by Authentication Protocol - Maximum Privilege Account Used in Scan

Nessus was able to log in to the remote host using the provided credentials. The provided credentials have the highest privilege possible on the remote host. Yet Nessus encountered permissions issues while accessing items during the scan. It is likely that this condition is caused by one or more ...

The vulnerability of the xz_head function in the xzlib.c component of the Libxml2 library, related to a lack of resource allocation mechanism, allows attackers to cause service failures.

The vulnerability of the xzhead function in the xzlib.c component of the Libxml2 library is related to the lack of memory constraints. Exploiting this vulnerability allows a remote attacker to cause a service failure through the use of a specially created LZMA file...

The vulnerability of the htmlParseTryOrFinish function in the HTMLparser.c component of the Libxml2 library arises from reading data beyond the allowed buffer limits. This allows an attacker to access confidential data and also cause a service failure.

The vulnerability of the htmlParseTryOrFinish function in the HTMLparser.c component of the Libxml2 library is related to reading data beyond the allowable buffer size. Exploiting this vulnerability allows an attacker to gain access to confidential data and also cause service failures...

The vulnerability of the ReadPSDImage function in the coders/psd.c component of the console-based image editing tool ImageMagick allows an attacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the ReadPSDImage function in the coders/psd.c component of the ImageMagick console graphics editor is related to the execution of operations within acceptable buffer data limits. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise...

The vulnerability of the disasinsn function in the target/i386/translate.c component of the QEMU hardware emulation emulator is related to a lack of mechanism for controlling code generation. This vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the disasinsn function in the target/i386/translate.c component of the QEMU hardware emulation software is related to the lack of restrictions on instruction size. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and caus...

An EPYC escape: Case-study of a KVM breakout

Posted by Felix Wilhelm, Project Zero Introduction KVM for Kernel-based Virtual Machine is the de-facto standard hypervisor for Linux-based cloud environments. Outside of Azure, almost all large-scale cloud and hosting providers are running on top of KVM, turning it into one of the fundamental...

USN-5000-2 linux-kvm vulnerabilities

USN-5000-1 fixed vulnerabilities in the Linux kernel for Ubuntu 20.04 LTS and the Linux HWE kernel for Ubuntu 18.04 LTS. This update provides the corresponding updates for the Linux KVM kernel for Ubuntu 20.04 LTS. Norbert Slusarek discovered a race condition in the CAN BCM networking protocol of...

Denial Of Service (DoS)

github.com/pterodactyl/wings is vulnerable to denial of service. An attacker is able to exhaust resources on the host OS due to improper container process limits being defined by causing consumption of resources that is more than intended and cause downstream impacts to other clients on the same...

GHSA-JJ6M-R8JC-2GP7 Asymmetric Resource Consumption (Amplification) in Docker containers created by Wings

Impact All versions of Pterodactyl Wings preior to 1.4.4 are vulnerable to system resource exhaustion due to improper container process limits being defined. A malicious user can consume more resources than intended and cause downstream impacts to other clients on the same hardware, eventually...