httpd: mod_session: NULL pointer dereference when parsing Cookie header

A NULL pointer dereference was found in Apache httpd modsession. The highest threat from this vulnerability is to system availability...

httpd: mod_session: Heap overflow via a crafted SessionHeader value

A heap overflow flaw was found In Apache httpd modsession. The highest threat from this vulnerability is to system availability...

httpd: mod_proxy_wstunnel tunneling of non Upgraded connection

A flaw was found in Apache httpd. The modproxywstunnel module tunnels non-upgraded connections...

httpd: mod_session: NULL pointer dereference when parsing Cookie header

A NULL pointer dereference was found in Apache httpd modsession. The highest threat from this vulnerability is to system availability...

kernel: eBPF 32-bit source register truncation on div/mod

A flaw was found in the Linux kernel’s eBPF verification code, where the eBPF 32-bit div/mod source register truncation could lead to out-of-bounds reads and writes. By default, accessing the eBPF verifier is only possible to privileged users with CAPSYSADMIN. This flaw allows a local user who ca...

PT-2021-10522

Name of the Vulnerable Software and Affected Versions: libiec iccp mod version 1.5 Description: A buffer overflow issue exists, allowing attackers to cause a denial of service when attempting to allocate an unexpectedly large space using calloc. Recommendations: For version 1.5, update to a newer...

PT-2021-10521

Name of the Vulnerable Software and Affected Versions: libiec iccp mod version 1.5 Description: A buffer overflow issue allows attackers to cause a denial of service via an unexpected packet while trying to connect. Recommendations: For version 1.5, at the moment, there is no information about a...

Apache HTTP Server DoS Vulnerability (Nov 2011) - Linux

Apache HTTP Server is prone to a denial of service DoS vulnerability. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

httpd: mod_proxy: SSRF via a crafted request uri-path containing "unix:"

A Server-Side Request Forgery SSRF flaw was found in modproxy of httpd. This flaw allows a remote, unauthenticated attacker to make the httpd server forward requests to an arbitrary server. The attacker could get, modify, or delete resources on other services that may be behind a firewall and...

SUSE-SU-2021:3352-1 Security update for apache2-mod_auth_openidc

This update for apache2-modauthopenidc fixes the following issues: - CVE-2021-32785: format string bug via hiredis bsc1188638 - CVE-2021-32786: open redirect in logout functionality bsc1188639 - CVE-2021-32791: Hardcoded static IV and AAD with a reused key in AES GCM encryption bsc1188849 -...

httpd: mod_proxy: SSRF via a crafted request uri-path containing "unix:"

A Server-Side Request Forgery SSRF flaw was found in modproxy of httpd. This flaw allows a remote, unauthenticated attacker to make the httpd server forward requests to an arbitrary server. The attacker could get, modify, or delete resources on other services that may be behind a firewall and...

CLSA-2021-1633601543 Fix of CVE: CVE-2020-35452

CVE-2020-35452: fix stack overflow in modauthdigest due to crafted digest nonce...

CVE-2021-41285

Ballistix MOD Utility through 2.0.2.5 is vulnerable to privilege escalation in the MODAPI.sys driver component. The vulnerability is triggered by sending a specific IOCTL request that allows low-privileged users to directly interact with physical memory via the MmMapIoSpace function call mapping...

CVE-2021-41285

Ballistix MOD Utility through 2.0.2.5 is vulnerable to privilege escalation in the MODAPI.sys driver component. The vulnerability is triggered by sending a specific IOCTL request that allows low-privileged users to directly interact with physical memory via the MmMapIoSpace function call mapping...

Design/Logic Flaw

Ballistix MOD Utility through 2.0.2.5 is vulnerable to privilege escalation in the MODAPI.sys driver component. The vulnerability is triggered by sending a specific IOCTL request that allows low-privileged users to directly interact with physical memory via the MmMapIoSpace function call mapping...

CVE-2021-41285

Ballistix MOD Utility through 2.0.2.5 is vulnerable to privilege escalation in the MODAPI.sys driver component. The vulnerability is triggered by sending a specific IOCTL request that allows low-privileged users to directly interact with physical memory via the MmMapIoSpace function call mapping...

CVE-2021-41285

CVE-2021-41285 affects Ballistix MOD Utility (versions up to and including 2.0.2.5). The MODAPI.sys driver exposes a vulnerability that can be triggered by a specific IOCTL, allowing low-privilege users to access physical memory via MmMapIoSpace and escalate to NT AUTHORITY\SYSTEM. Exploitation c...

CVE-2021-41285: Undefined Security Weakness

Ballistix MOD Utility through 2.0.2.5 is vulnerable to privilege escalation in the MODAPI.sys driver component. The vulnerability is triggered by sending a specific IOCTL request that allows low-privileged users to directly interact with physical memory via the MmMapIoSpace function call mapping...

Crucial Ballistix Mod Utility 安全漏洞

Crucial Ballistix Mod Utility is used by Crucial USA to customize and control gaming systems, specifically Led colors and patterns, memory, temperature, and overclocking. Ballistix MOD Utility suffers from a security vulnerability that allows a low-privileged user to interact directly with physic...

Libiec_Iccp_Mod 安全漏洞

LibiecIccpMod is used to modify Libiec6850 Mms to use the Iccp client. A security vulnerability exists in LibiecIccpMod v1.5, which stems from the software including a segmentation violation in the component serverexample1.c. The vulnerability is caused by the following...