Linux kernel load_elf_binary ASLR bypass Info Disclosure

The vulnerability of the loadelfbinary function in the Linux operating system’s kernel arises due to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to bypass the ASLR protection mechanism and disclose the protected information...

GSD-2022-1003375 drm/amdgpu/ucode: Remove firmware load type check in amdgpu_ucode_free_bo

drm/amdgpu/ucode: Remove firmware load type check in amdgpuucodefreebo This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.46 by commit...

GSD-2022-1002816 drm/amdgpu/ucode: Remove firmware load type check in amdgpu_ucode_free_bo

drm/amdgpu/ucode: Remove firmware load type check in amdgpuucodefreebo This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.3 by commit...

PT-2022-31866

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.121 Description A potential security issue exists due to the removal of firmware load type check in amdgpu ucode free bo. The actual impact and attack plausibility have not yet been proven. Recommendations...

PT-2022-31638

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.46 Description A potential security issue exists due to the removal of firmware load type check in amdgpu ucode free bo. The actual impact and attack plausibility have not yet been proven. Recommendations F...

PT-2022-31079

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.3 Description A potential security issue exists due to the removal of firmware load type check in amdgpu ucode free bo. The actual impact and attack plausibility have not yet been proven. Recommendations Fo...

PT-2022-32011

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.198 Description A potential security issue exists due to the removal of firmware load type check in amdgpu ucode free bo. The actual impact and attack plausibility have not yet been proven. Recommendations F...

PT-2022-5001

Name of the Vulnerable Software and Affected Versions ruby-mysql versions prior to 2.10.0 Description The issue allows a malicious MySQL server to request local file content from a client using ruby-mysql without explicit authorization from the user. A malicious actor can read arbitrary files fro...

org.jenkins-ci.plugins:ivy (>=1.27, <=2.2), org.jenkins-ci.plugins:mattermost (>=2.1.3, <=2.7.1) +1 more potentially affected by CVE-2022-34176 via org.jenkins-ci.plugins:junit (1.18)

org.jenkins-ci.plugins:junit MAVEN version 1.18 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:junit and may be impacted: - org.jenkins-ci.plugins:ivy =1.27, =2.1.3, =2.7.1 - org.jenkins-ci.plugins:mock-load-builder 1.1 Source...

Yandex Privilege Escalation

The vulnerability of the Yandex Browser is related to errors in processing symbolic links when loading the installation file. Exploiting this vulnerability can allow an attacker to increase their privileges...

Malicious code in load-date (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fd5e61507806967bd7bdac762e3f0f48883157def37151eacca646713cd2fc16 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in load-image-exif (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c314aa9b8893f20f40e6ab9b53ab508347aa09e376589762f1a429e1cdd33a3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4338 Malicious code in load-image-exif (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c314aa9b8893f20f40e6ab9b53ab508347aa09e376589762f1a429e1cdd33a3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4339 Malicious code in load-image-ios (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a4c70a04dee1e95def698964376115865ad76594c55a641097c8d07afaaa9b09 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in load-image-ios (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a4c70a04dee1e95def698964376115865ad76594c55a641097c8d07afaaa9b09 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in load-image-meta (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 253cffc7e3e71e02985ac62369fff4ddf3ed3f5036a29626ce30a64bef3afcc7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4340 Malicious code in load-image-meta (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 253cffc7e3e71e02985ac62369fff4ddf3ed3f5036a29626ce30a64bef3afcc7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ardoq-sheet-load (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 95ffe4a6b987be146cd7315473d74b684d40acd0755edcb6f2f6f08398473ad2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1083 Malicious code in ardoq-sheet-load (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 95ffe4a6b987be146cd7315473d74b684d40acd0755edcb6f2f6f08398473ad2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2636 Malicious code in dynamic-load-sticky-polyfill (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3cae02f392cd1bcfcc0c014ee7fed7a90f615a4fb38ab23b0e73d06f33c72d84 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...