1437 matches found
PT-2024-13516 · Unknown · Terry Lin Wp Githuber Md
Name of the Vulnerable Software and Affected Versions: Terry Lin WP Githuber MD versions 1.16.2 and earlier Description: The issue is related to an Unrestricted Upload of File with Dangerous Type, which can be exploited. No information is provided about the estimated number of potentially affecte...
555.md Cross Site Scripting vulnerability OBB-3884764
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
EulerOS Virtualization 2.9.1 : libssh (EulerOS-SA-2024-1454)
According to the versions of the libssh package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attacker...
USN-6701-2 linux-gcp, linux-gcp-4.15 vulnerabilities
Ruihan Li discovered that the bluetooth subsystem in the Linux kernel did not properly perform permissions checks when handling HCI sockets. A physically proximate attacker could use this to cause a denial of service bluetooth communication. CVE-2023-2002 It was discovered that the NVIDIA Tegra...
Moderate: Red Hat Security Advisory: kernel security, bug fix, and enhancement update
An update for kernel is now available for Red Hat Enterprise Linux 9.2 Extended Update Support. 'Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...
Unbreakable Enterprise kernel security update
5.15.0-204.147.6.2 - smb3: Replace smb2pdu 1-element arrays with flex-arrays Kees Cook Orabug: 36353543 - hvnetvsc: Register VF in netvscprobe if NETDEVICEREGISTER missed Shradha Gupta Orabug: 36358874 - hvnetvsc: Fix race condition between netvscprobe and netvscremove Souradeep Chakrabarti -...
PT-2024-21598
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A deadlock vulnerability has been resolved in the Linux kernel, specifically in the dm-raid456 and md/raid456 modules. The issue occurs when IO operations are concurrent with reshape...
PT-2024-26748
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue arises from the direct call to md reap sync thread from raid message without holding the reconfig mutex. This is unsafe because md reap sync thread can change fields protected ...
CVE-2024-23307
Integer Overflow or Wraparound vulnerability in Linux Linux kernel kernel on Linux, x86, ARM md, raid, raid5 modules allows Forced Integer Overflow...
Spoofing
In the Linux kernel, the following vulnerability has been resolved: md/raid1: properly indicate failure when ending a failed write request This patch addresses a data corruption bug in raid1 arrays using bitmaps. Without this fix, the bitmap bits for the failed I/O end up being cleared. Since we...
Fedora 39 : kernel (2024-88847bc77a)
The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-88847bc77a advisory. The 6.7.5 stable kernel update contains a number of important fixes across the tree. Tenable has extracted the preceding description block directly...
CVE-2023-52437
A flaw was found in the Linux kernel's md/raid5 driver, specifically introduced by commit 5e2cf333b7bd. This commit triggers a race condition wherein the system hangs due to improper handling of MDSBCHANGEPENDING flags. During the execution of mdwritestart, if MDSBCHANGEPENDING is set and...
CVE-2023-52437
Removed by vendor...
CVE-2023-52437
CVE-2023-52437 entry is rejected/not used per the Initial Description.
PT-2024-14589 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability in the Linux kernel has been resolved by reverting a commit that introduced a race condition, potentially causing system hangs. The issue occurred in the md/raid5 modul...
PT-2024-21500
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved, related to the handling of read-only arrays in the md check recovery function. Usually, if the array is not read-write, md check...
CVE-2023-52429
A flaw was found in the md driver in the linux kernel. Due to a missing check for struct dmioctl.targetcount, dmtablecreate can attempt to allocate more bytes than intended, resulting in a crash...
CVE-2023-52429
CVE-2023-52429 affects the Linux kernel driver path drivers/md/dm-table.c. The issue arises in dm_table_create’s alloc_targets path where, due to a missing check for struct dm_ioctl.target_count, it can allocate more than INT_MAX bytes and crash. Public sources in connected Nessus plugins confirm...
Ubuntu 16.04 ESM / 18.04 ESM : libssh vulnerabilities (USN-6592-2)
The remote Ubuntu 16.04 ESM / 18.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6592-2 advisory. USN-6592-1 fixed vulnerabilities in libssh. This update provides the corresponding updates for Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. Tenable...
