Linux Distros Unpatched Vulnerability : CVE-2021-47645

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: staging: media: zoran: calculate the right buffer number for zoranreapstatcom On the case tmpdcim=1, the index of buffer is miscalculated. This generate ...

SUSE CVE-2024-58018

In the Linux kernel, the following vulnerability has been resolved: nvkm: correctly calculate the available space of the GSP cmdq buffer r535gspcmdqpush waits for the available page in the GSP cmdq buffer when handling a large RPC request. When it sees at least one available page in the cmdq, it...

UBUNTU-CVE-2024-58018

In the Linux kernel, the following vulnerability has been resolved: nvkm: correctly calculate the available space of the GSP cmdq buffer r535gspcmdqpush waits for the available page in the GSP cmdq buffer when handling a large RPC request. When it sees at least one available page in the cmdq, it...

CVE-2021-47645

In the Linux kernel, the following vulnerability has been resolved: media: staging: media: zoran: calculate the right buffer number for zoranreapstatcom On the case tmpdcim=1, the index of buffer is miscalculated. This generate a NULL pointer dereference later. So let's fix the calcul and add a...

CVE-2021-47645

CVE-2021-47645 affects the Linux kernel media subsystem (staging: media: zoran). The root cause is a miscalculated buffer index in zoran_reap_stat_com when tmp_dcim=1, which can lead to a NULL pointer dereference. Patches were applied to correct the calculation and add a defensive check to preven...

CVE-2020-6116

An arbitrary code execution vulnerability exists in the rendering functionality of Nitro Software, Inc.’s Nitro Pro 13.13.2.242. When drawing the contents of a page using colors from an indexed colorspace, the application can miscalculate the size of a buffer when allocating space for its colors...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from a miscalculation of the vmemmap address in the riscv module. This could lead to memory out-of-bounds or a system...

Schneider Electric Modicon M580 安全漏洞

The Schneider Electric Modicon M580 is a programmable automation controller from Schneider Electric France. A security vulnerability exists in the Schneider Electric Modicon M580 that stems from the inclusion of a buffer size miscalculation vulnerability that could result in a denial of service o...

PT-2024-10220 · Schneider Electric · Bmenor2200H +4

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: A vulnerability exists that could cause Denial-of-Service of the product when an unauthenticated user sends a crafted HTTPS packet to the webserver. Thi...

The vulnerability of the bnx2x_fw_stats_req structure in the QLogic operating system kernel for Linux allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the bnx2xfwstatsReq structure in the drivers/net/ethernet/broadcom/bnx2x/bnx2x.h file of the QLogix bnx2 driver for the Linux operating system is related to incorrect calculation of the index. Exploiting this vulnerability could allow an attacker to compromise the...

PT-2025-8840

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.9.0-rc6+ Description A vulnerability in the Linux kernel has been identified, specifically in the nvkm module. The issue arises when handling large RPC requests, where the r535 gsp cmdq push function waits for...

CVE-2024-9333

Permissions bypass in M-Files Connector for Copilot before version 24.9.3 allows authenticated user to access limited amount of documents via incorrect access control list calculation...

Linaro Trusted Firmware-A Security Vulnerability

Linaro Trusted Firmware-A is an open source trusted firmware from Linaro. A security vulnerability exists in Linaro Trusted Firmware-A, which stems from a miscalculation issue that allows local code execution...

The vulnerability of the opremap() function in the Nouveau driver for NVIDIA’s Linux operating system allows a hacker to induce a service failure.

The vulnerability of the opremap function in the drivers/gpu/drm/nouveau/nouveauuvmm.c file of the Nouveau driver for the NVIDIA kernel of the Linux operating system is related to incorrect calculations of the boundaries of the movable buffer. Exploiting this vulnerability could allow an attacker...

The vulnerability of the imgu_fmt() function in the drivers/staging/media/ipu3/ipu3-v4l2.c file of the Intel ipu3Imgdu driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the imgufmt function in the drivers/staging/media/ipu3/ipu3-v4l2.c file of the Intel ipu3-imgu driver for the Linux operating system is related to incorrect calculations of the size of the allocated buffer. Exploiting this vulnerability could allow an attacker to compromise t...

Juniper Networks Junos OS SRX 安全漏洞

Juniper Networks Junos OS SRX is a Juniper Networks USA network operating system dedicated to the company's hardware devices. The operating system provides a secure programming interface and the Junos SDK. Juniper Networks Junos OS SRX 5000 versions prior to 21.2R3-S7, 21.4R3-S6, 22.1R3-S5,...

The vulnerability of Intel Xeon D microprogramming software, related to incorrect calculations, allows attackers to gain unauthorized access to protected information.

The vulnerability of Intel Xeon D microprogramming software is related to incorrect calculations. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

CVE-2024-20045

In audio, there is a possible out of bounds read due to an incorrect calculation of buffer size. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08024748; Issue ID: ALPS08029526...

SUSE-SU-2024:0939-1 Security update for shadow

This update for shadow fixes the following issues: - CVE-2023-29383: Fixed apparent /etc/shadow manipulation via chfn bsc1210507. The following non-security bugs were fixed: - bsc1176006: Fix chage date miscalculation - bsc1188307: Fix passwd segfault - bsc1203823: Remove pamkeyinit from PAM conf...

Off-by-one Error

libvirt.so is vulnerable to Off-by-one Error. The vulnerability is due to a miscalculation in the udevListInterfacesByStatus function when the number of interfaces exceeds the size of the names array. This issue can be exploited by sending specially crafted data to the libvirt daemon, enabling an...