PT-2022-32926

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.208 Description A data-race issue exists around sysctl tcp thin linear timeouts. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v5.4.20...

PT-2022-33033

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.254 Description A data-race issue exists around sysctl tcp thin linear timeouts. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2022-32780

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.134 Description A data-race issue exists around sysctl tcp thin linear timeouts. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2022-32369

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.15 Description A data-race issue exists around sysctl tcp thin linear timeouts. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v5.18.1...

Adobe Premiere Pro memory corruption vulnerability

Adobe Premiere Pro is a set of non-linear editing video editing software from Adobe. Adobe Premiere Pro version 15.4 and earlier versions contain a security vulnerability that could be exploited by attackers to execute arbitrary code in the context of the current user...

PT-2022-6553

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the verity ctr function in the drivers/md/dm-verity-target.c module of the Linux kernel's device-mapper subsystem. It allows an attacker with administrator...

GSD-2022-1002467 veth: Ensure eth header is in skb's linear part

veth: Ensure eth header is in skb's linear part This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.311 by commit...

GSD-2022-1002393 veth: Ensure eth header is in skb's linear part

veth: Ensure eth header is in skb's linear part This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.276 by commit...

GSD-2022-1002169 veth: Ensure eth header is in skb's linear part

veth: Ensure eth header is in skb's linear part This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.190 by commit...

GSD-2022-1000988 veth: Ensure eth header is in skb's linear part

veth: Ensure eth header is in skb's linear part This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.4 by commit...

PT-2022-30740

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.311 Description The issue concerns the veth component, where it does not ensure the eth header is in the skb's linear part. This could potentially lead to security vulnerabilities, although the actual impact...

PT-2022-30666

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.276 Description The issue concerns the veth component, where it does not ensure the eth header is in the skb's linear part. This could potentially lead to security vulnerabilities, although the actual impac...

PT-2022-29937

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.35 Description The issue concerns the veth component, where the eth header is not ensured to be in the skb's linear part. This potential security issue was introduced in version v2.6.24 and is fixed in Linu...

PT-2022-30442

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.190 Description The issue concerns the veth component, where it does not ensure the eth header is in the skb's linear part. This could potentially lead to security vulnerabilities, although the actual impact...

Possibility of stale and static value of VOLT for longer duration on change of ScalingPriceOracle

Lines of code Vulnerability details If there will be a need for governance action to swap out the ScalingPriceOracle that the OraclePassThrough points to, then it will have to be performed only after 15th till 30/31st of any month. This is due to two constraints viz, 1 28 days TIMEFRAME, and 2 th...

[SECURITY] Fedora 36 Update: rust-regex-1.5.5-1.fc36

Implementation of regular expressions for Rust. This implementation uses fini te automata and guarantees linear time matching on all inputs...

[SECURITY] Fedora 35 Update: rust-regex-1.5.5-1.fc35

Implementation of regular expressions for Rust. This implementation uses fini te automata and guarantees linear time matching on all inputs...

[SECURITY] Fedora 34 Update: rust-regex-1.5.5-1.fc34

Implementation of regular expressions for Rust. This implementation uses fini te automata and guarantees linear time matching on all inputs...

PYSEC-2022-158

Tensorflow is an Open Source Machine Learning Framework. When building an XLA compilation cache, if default settings are used, TensorFlow triggers a null pointer dereference. In the default scenario, all devices are allowed, so flr-configproto is nullptr. The fix will be included in TensorFlow...

Google TensorFlow code issues and vulnerabilities

Google TensorFlow is a suite of end-to-end open source platforms for machine learning from Google USA. Google TensorFlow suffers from a code issue vulnerability that stems from TensorFlow triggering null pointer dereferences if default settings are used when building the XLA compilation cache. No...