433 matches found
Updated ffmpeg packages fix a security vulnerability
An out-of-bounds write in decodeframe in libavcodec/exr.c because of errors in calculations of when to perform memset zero operations CVE-2020-35965...
glibc security update
2.28-151.0.1.el84 - merge RH patches for ol8-u4 release Review-exception: Patch merge - Provide glibc.pthread.mutexspincount tunable for pthread adaptive - spin mutex Orabug: 27982358. Reviewed-by: Qing Zhao - add Ampere emag to tunable cpu list Patrick McGehearty - add optimized memset for emag ...
PT-2021-28832
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.37 Description The issue is related to a memset in the zynqmp dp train function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...
PT-2021-28731
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.12.4 Description The issue is related to a memset in the zynqmp dp train function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v5.12.4...
PT-2021-24737
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.12.4 Description The issue is related to a memset in the zynqmp dp train function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v5.12.4...
PT-2021-24838
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.37 Description: The issue is related to a memset in the zynqmp dp train function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...
PT-2021-24975
Name of the Vulnerable Software and Affected Versions: habanalabs/gaudi versions prior to v5.12.7 Linux Kernel versions prior to v5.12.7 Description: A potential use after free issue was identified in gaudi memset device memory. The actual impact and attack plausibility have not yet been proven...
PT-2021-28969
Name of the Vulnerable Software and Affected Versions habanalabs/gaudi versions prior to v5.12.7 Linux Kernel versions v5.12 through v5.12.6 Description A potential use after free issue was identified in gaudi memset device memory. The actual impact and attack plausibility have not yet been prove...
glibc security, bug fix, and enhancement update
2.28-151.0.1.el84 - merge RH patches for ol8-u4 release Review-exception: Patch merge - Provide glibc.pthread.mutexspincount tunable for pthread adaptive - spin mutex Orabug: 27982358. Reviewed-by: Qing Zhao - add Ampere emag to tunable cpu list Patrick McGehearty - add optimized memset for emag ...
PT-2024-11158 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A potential use after free issue has been identified in the Linux kernel, specifically in the gaudi memset device memory function. The issue arises when hl cs allocate job fails, causi...
CVE-2020-11198
Key material used for TZ diag buffer encryption and other data related to log buffer is not wiped securely due to improper usage of memset in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice &...
CVE-2020-11198
CVE-2020-11198 affects Qualcomm Snapdragon components (Auto, Compute, Connectivity, Consumer IoT, Industrial IoT, Mobile, Voice & Music, Wired Infrastructure/Networking). Root cause: improper usage of memset leaves key material and TZ diag/log buffer data un-wiped. Documented impact includes high...
CVE-2020-11198: Improper Removal of Sensitive Information Before Storage or Transfer
Key material used for TZ diag buffer encryption and other data related to log buffer is not wiped securely due to improper usage of memset in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice &...
PT-2021-9223
Name of the Vulnerable Software and Affected Versions Snapdragon Auto affected versions not specified Snapdragon Compute affected versions not specified Snapdragon Connectivity affected versions not specified Snapdragon Consumer IOT affected versions not specified Snapdragon Industrial IOT affect...
Qualcomm QTEE Information Disclosure Vulnerability
Qualcomm QTEE is a key component of a Qualcomm processor from Qualcomm Incorporated. provides a trusted execution environment. An information disclosure vulnerability exists in Qualcomm QTEE that stems from improper use of memset...
Out-of-Bounds Access
ffmpeg is vulnerable to out-of-bounds write because of errors in calculations of when to perform memset zero operations...
PT-2021-27435
Name of the Vulnerable Software and Affected Versions: GnuTLS affected versions not specified Description: The issue is related to a crash caused by the use of an uninitialized value. Technical details about the crash include the involvement of gnutls memset, deinit keys, and gnutls handshake...
Building Faster AMD64 Memset Routines
Over the past several years, Microsoft has rolled out several changes that result in more memory being zeroed. These mitigations include: The InitAll mitigation which zeros most stack variables Switching most Microsoft kernel code over to the ExAllocatePool2/ExAllocatePool3 API’s which zero memor...
Building Faster AMD64 Memset Routines
Over the past several years, Microsoft has rolled out several changes that result in more memory being zeroed. These mitigations include: The InitAll mitigation which zeros most stack variables Switching most Microsoft kernel code over to the ExAllocatePool2/ExAllocatePool3 API’s which zero memor...
