UBUNTU-CVE-2021-46938

In the Linux kernel, the following vulnerability has been resolved: dm rq: fix double free of blkmqtagset in dev remove after table load fails When loading a device-mapper table for a request-based mapped device, and the allocation/initialization of the blkmqtagset for the device fails, a followi...

DEBIAN-CVE-2023-45667

stbimage is a single file MIT licensed library for processing images. If stbiloadgifmain in stbiloadgiffrommemory fails it returns a null pointer and may keep the z variable uninitialized. In case the caller also sets the flip vertically flag, it continues and calls stbiverticalflipslices with th...

UBUNTU-CVE-2023-45667

stbimage is a single file MIT licensed library for processing images. If stbiloadgifmain in stbiloadgiffrommemory fails it returns a null pointer and may keep the z variable uninitialized. In case the caller also sets the flip vertically flag, it continues and calls stbiverticalflipslices with th...

PT-2025-53203

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.1.6-00002-g9d4898824677 Description A flaw exists in the Linux kernel's crypto safexcel driver. A failure during the loading of the safexcel driver can lead to improperly cleaned-up IRQ affinity and workqueues...

Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext

The Mozilla Foundation Security Advisory describes this flaw as: Module load requests that failed were not being checked as to whether or not they were cancelled causing a use-after-free in ScriptLoadContext...

PT-2022-34992 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.3 Description: The issue is related to the btrfs filesystem, where a call to btrfs remove free space cache locked is made on cache load failure. The actual impact and attack plausibility have not yet been...

UBUNTU-CVE-2022-40313

Recursive rendering of Mustache template helpers containing user input could, in some cases, result in an XSS risk or a page failing to load...

UBUNTU-CVE-2021-22212

ntpkeygen can generate keys that ntpd fails to parse. NTPsec 1.2.0 allows ntpkeygen to generate keys with '' characters. ntpd then either pads, shortens the key, or fails to load these keys entirely, depending on the key type and the placement of the ''. This results in the administrator not bein...

nss security and bug fix update

3.53.1-7 - Fix HSM load failure because of CKOProfile - Allow builds with strict-proto 3.53.1-6 - Update to CVE 2020-256423 TLS flood DOS attack patch. 3.53.1-5 - Fix CVE 2020-256423 TLS flood DOS Attack. 3.53.1-4 - Fix deadlock issue - Fix 3 FTBS issues, 2 expired certs, one semantic change in...

ADC VPX on Azure Cloud : Unable to boot due to error : can't load 'kernel'

Citrix VPX on Azure is unable to boot. In Azure console; Under Boot Diagnostics, it is observed that the booting is not completed. The error "can't load 'kernel'" is seen and the VPX boots in single-user mode...

kernel: Null pointer dereference in drop_sysctl_table() in fs/proc/proc_sysctl.c

A flaw was found in the Linux kernel’s implementation of dropping sysctl entries. A local attacker who has access to load modules on the system can trigger a condition during module load failure and panic the system...

kernel: Null pointer dereference in drop_sysctl_table() in fs/proc/proc_sysctl.c

A flaw was found in the Linux kernel’s implementation of dropping sysctl entries. A local attacker who has access to load modules on the system can trigger a condition during module load failure and panic the system...

June 2, 2020, update for Office 2016 (KB4484335)

None None...

kernel: Null pointer dereference in drop_sysctl_table() in fs/proc/proc_sysctl.c

A flaw was found in the Linux kernel’s implementation of dropping sysctl entries. A local attacker who has access to load modules on the system can trigger a condition during module load failure and panic the system...

USN-3991-3 firefox regression

USN-3991-1 fixed vulnerabilities in Firefox, and USN-3991-2 fixed a subsequent regression. The update caused an additional regression that resulted in Firefox failing to load correctly after executing it in safe mode. This update fixes the problem. We apologize for the inconvenience. Original...

The vulnerability of Siemens SIMATIC product software, related to insufficient validation of input data, allows a perpetrator to trigger service failures.

The vulnerability of Siemens SIMATIC software products is related to insufficient verification of input data. Exploiting this vulnerability could allow an attacker with access to the project file to modify it in such a way that a service failure occurs upon loading...

Loading DNS zones fails on a Windows Server 2008 R2-based DNS server

Loading DNS zones fails on a Windows Server 2008 R2-based DNS server This article describes an issue in which a Windows Server 2008 R2 Service Pack 1 SP1-based DNS server that has Active Directory–integrated zones fails to load DNS zones. An update is available to fix this issue. Before you insta...

cumin: DoS via displayed link names containing non-ASCII characters

It was found that if Cumin were asked to display a link name containing non-ASCII characters, the request would terminate with an error. If data containing non-ASCII characters were added to the database such as via Cumin or Wallaby, requests to load said data would terminate and the requested pa...