The vulnerability of the qcom_mdt_read_metadata() function in the drivers/soc/qcom/mdt_loader.c file of the Qualcomm Linux kernel driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the qcommdtreadmetadata function in the drivers/soc/qcom/mdtloader.c file of the Qualcomm Linux kernel driver is related to the lack of control over the upper limit of allowable values. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

PT-2023-7826

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a lack of bounds checking in the qcom mdt read metadata function within the Qualcomm driver module. This can lead to memory corruption when parsing metadata,...

CVE-2023-35872 Missing Authentication check in SAP NetWeaver Process Integration (Message Display Tool)

The Message Display Tool MDT of SAP NetWeaver Process Integration - version SAPXIAF 7.50, does not perform authentication checks for certain functionalities that require user identity. An unauthenticated user might access technical data about the product status and its configuration. The...

CVE-2023-35872

CVE-2023-35872 affects SAP NetWeaver Process Integration (MDT component) with version SAP_XIAF 7.50. The issue is a missing authentication check for certain MDT functionalities that require user identity, potentially allowing an unauthenticated user to access technical data about product status a...

PT-2022-35418 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.73 Description: A bug has been identified in the nilfs mdt destroy function, potentially leading to use-after-free UAF or general protection fault GPF issues. The actual impact and attack plausibility have...

PT-2022-35799 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.262 Description: A bug has been identified in the nilfs mdt destroy function, potentially leading to a use-after-free UAF or general protection fault GPF issue. The actual impact and attack plausibility ha...

PT-2022-35189 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.1 Description: A bug has been identified in the nilfs mdt destroy function, potentially leading to a use-after-free UAF or general protection fault GPF issue. The actual impact and attack plausibility have...

PT-2022-35872 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.14.296 Description: A bug has been identified in the nilfs mdt destroy function, potentially leading to a use-after-free UAF or general protection fault GPF issue. The actual impact and attack plausibility ha...

PT-2022-35592 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.148 Description: A bug has been identified in the nilfs mdt destroy function, potentially leading to a use-after-free UAF or general protection fault GPF issue. The actual impact and attack plausibility ha...

CVE-2022-2978

A flaw use after free in the Linux kernel NILFS file system was found in the way user triggers function securityinodealloc to fail with following call to function nilfsmdtdestroy. A local user could use this flaw to crash the system or potentially escalate their privileges on the system...

UBUNTU-CVE-2022-2978

A flaw use after free in the Linux kernel NILFS file system was found in the way user triggers function securityinodealloc to fail with following call to function nilfsmdtdestroy. A local user could use this flaw to crash the system or potentially escalate their privileges on the system...

Linux kernel 资源管理错误漏洞

Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. A security vulnerability exists in the Linux kernel NILFS file system that originated when a user would cause securityinodealloc to cause post-release reuse on subsequent calls to the nilfsmdtdestroy...

PT-2022-7112 · Linux +5 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: Linux kernel NILFS file system affected versions not specified Description: The issue is related to a use after free flaw in the Linux kernel NILFS file system. This flaw can be triggered when a user causes the security inode alloc function t...

CVE-2021-37740

A denial of service vulnerability exists in MDT's firmware for the KNXnet/IP Secure router SCN-IP100.03 and KNX IP interface SCN-IP000.03 before v3.0.4, that allows a remote attacker to turn the device unresponsive to all requests on the KNXnet/IP Secure layer, until the device is rebooted, via a...

CVE-2021-37740

A denial of service vulnerability exists in MDT's firmware for the KNXnet/IP Secure router SCN-IP100.03 and KNX IP interface SCN-IP000.03 before v3.0.4, that allows a remote attacker to turn the device unresponsive to all requests on the KNXnet/IP Secure layer, until the device is rebooted, via a...

Denial of service

A denial of service vulnerability exists in MDT's firmware for the KNXnet/IP Secure router SCN-IP100.03 and KNX IP interface SCN-IP000.03 before v3.0.4, that allows a remote attacker to turn the device unresponsive to all requests on the KNXnet/IP Secure layer, until the device is rebooted, via a...

CVE-2021-37740

The CVE-2021-37740 issue affects MDT KNXnet/IP Secure router SCN-IP100.03 and KNX IP interface SCN-IP000.03. Root cause: a SESSION_REQUEST frame with a modified total length field can cause the device to stop responding to KNXnet/IP Secure frames, resulting in a denial-of-service condition. Impac...

CVE-2021-37740

A denial of service vulnerability exists in MDT's firmware for the KNXnet/IP Secure router SCN-IP100.03 and KNX IP interface SCN-IP000.03 before v3.0.4, that allows a remote attacker to turn the device unresponsive to all requests on the KNXnet/IP Secure layer, until the device is rebooted, via a...

MDT KNXnet/IP Secure router和MDT KNX IP interface 安全漏洞

The MDT KNXnet/IP Secure router and the MDT KNX IP interface are both products of the German company MDT.The MDT KNXnet/IP Secure router is a series of secure routers.The MDT KNX IP interface is an interface. The MDT KNX IP interface is an interface that connects the KNX bus to the Ethernet. A...

CVE-2021-32957

A function in MDT AutoSave versions prior to v6.02.06 is used to retrieve system information for a specific process, and this information collection executes multiple commands and summarizes the information into an XML. This function and subsequent process gives full path to the executable and is...