15857 matches found
The vulnerability of the enter_buffer() function in the Vim text editor allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.
The vulnerability of the enterbuffer function in the Vim text editor is related to the pointer being moved beyond the allocated memory range. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...
Stack overflow
A stack-based buffer overflow vulnerability was found on Western Digital My Cloud Home, My Cloud Home Duo, and SanDisk ibi that could allow an attacker accessing the system locally to read information from /etc/version file. This vulnerability can only be exploited by chaining it with another...
Security Bulletin: TXSeries for Multiplatforms V7.1 : Security vulnerability in using GSKit 8 version with IBM TXSeries for Multiplatforms Version 7.1 (CVE-2013-6329)
Abstract Vulnerabilities in relation to SSL/TLS Handshake Processing related to the Session Resumption when using SSLV2 of GSKit 8 with TXSeries for Multiplatforms V7.1 have been addressed Content VULNERABILITY DETAILS: CVEID: CVE-2013-6329 DESCRIPTION: A SSLV2 ClientHello that successfully resum...
The vulnerability of the Mozilla Firefox browser and the Thunderbird email client, related to reading data beyond the buffer in memory, allows attackers to gain unauthorized access to protected information.
The vulnerability of the Mozilla Firefox browser and the Thunderbird email client relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-5.20.3.6)
The version of AOS installed on the remote host is prior to 5.20.3.6. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-5.20.3.6 advisory. - In Expat aka libexpat before 2.4.5, there is an integer overflow in storeRawNames. CVE-2022-25315 - In Expat aka libexpat...
Ubuntu 20.04 LTS : Linux kernel (HWE) vulnerabilities (USN-5623-1)
The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5623-1 advisory. Asaf Modelevsky discovered that the IntelR 10GbE PCI Express ixgbe Ethernet driver for the Linux kernel performed insufficient control flow management. A...
kernel: ice: Fix memory corruption in VF driver
In the Linux kernel, the following vulnerability has been resolved: ice: Fix memory corruption in VF driver Disable VF's RX/TX queues, when it's disabled. VF can have queues enabled, when it requests a reset. If PF driver assumes that VF is disabled, while VF still has queues configured, VF may...
The vulnerability of the PVRDMA_CMD_CREATE_MR command in the QEMU hardware emulation software allows a hacker to trigger a service failure.
The vulnerability of the PVRDMACMDCREATEMR command in the QEMU hardware emulation software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows an attacker to cause a system failure...
CVE-2022-40768
drivers/scsi/stex.c in the Linux kernel through 5.19.9 allows local users to obtain sensitive information from kernel memory because stexqueuecommandlck lacks a memset for the PASSTHRUCMD case...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel 5.19.9 and earlier versions, which stems from its drivers/scsi/stex.c component that allows local users to obtain sensitive...
GSD-2022-1005996 iommu/vt-d: avoid invalid memory access via node_online(NUMA_NO_NODE)
iommu/vt-d: avoid invalid memory access via nodeonlineNUMANONODE This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.211 by commit...
GSD-2022-1005820 iommu/vt-d: avoid invalid memory access via node_online(NUMA_NO_NODE)
iommu/vt-d: avoid invalid memory access via nodeonlineNUMANONODE This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.137 by commit...
GSD-2022-1005553 iommu/vt-d: avoid invalid memory access via node_online(NUMA_NO_NODE)
iommu/vt-d: avoid invalid memory access via nodeonlineNUMANONODE This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.61 by commit...
PT-2022-34078 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.137 Description: The issue concerns invalid memory access via the node onlineNUMA NO NODE function. It was introduced in version v2.6.33 and fixed in version v5.10.137. The actual impact and attack...
SUSE SLES15: cluster-md-kmp-azure / dlm-kmp-azure / gfs2-kmp-azure / etc (SUSE-SU-2022:3288-1)
The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:3288-1 advisory. The SUSE Linux Enterprise 15 SP4 Azure kernel was updated to receive various security and bugfixes. The following...
PT-2022-34106 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 4.16 through 5.10.136 Description: The issue is related to the incorrect clearing of the interrupt status register in RDMA/hns. The actual impact and attack plausibility have not yet been proven. Recommendations: For Lin...
PT-2022-33989 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to 5.10.141 Description: The issue is related to setting the DMA mask for the udmabuf device. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...
PT-2022-34254 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.211 Description: The issue is related to invalid memory access via node onlineNUMA NO NODE in iommu/vt-d. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kerne...
GSD-2022-1005191 iommu/vt-d: avoid invalid memory access via node_online(NUMA_NO_NODE)
iommu/vt-d: avoid invalid memory access via nodeonlineNUMANONODE This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...