DRAKVUF Sandbox - Automated Hypervisor-Level Malware Analysis System

DRAKVUF Sandbox is an automated black-box malware analysis system with DRAKVUF engine under the hood, which does not require an agent on guest OS. This project provides you with a friendly web interface that allows you to upload suspicious files to be analyzed. Once the sandboxing job is finished...

GSD-2022-1000537 KVM: x86: nSVM: fix potential NULL derefernce on nested migration

KVM: x86: nSVM: fix potential NULL derefernce on nested migration This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.11 by commit...

GSD-2022-1000455 KVM: x86: nSVM: fix potential NULL derefernce on nested migration

KVM: x86: nSVM: fix potential NULL derefernce on nested migration This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.25 by commit...

PT-2022-28729

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.25 Description A potential NULL dereference issue was identified in the KVM x86 nSVM component on nested migration. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2022-28811

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.13 through v5.16.10 Description A potential NULL dereference issue was discovered in the KVM x86 nSVM component on nested migration. The actual impact and attack plausibility have not yet been proven. Recommendations F...

PT-2022-28886

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to 5.16.5 Description The issue is related to KVM x86 and nested virtualization, specifically when the SMM state is toggled. The actual impact and attack plausibility have not yet been proven. Recommendations For...

CVE-2022-25857 jruby/psych/snakeyaml: Denial of Service (DoS) due missing to nested depth limitation for collections

The package org.yaml:snakeyaml from 0 and before 1.31 are vulnerable to Denial of Service DoS due missing to nested depth limitation for collections. This package is bundled into Psych which is in turn bundled into jruby...

ROS-20220207-01

Vulnerability in the implementation of the tipccryptokeyrcv function of the protocol for intra-cluster communication Transparent Inter-Process Communication TIPC of Linux kernel is related to insufficient input data verification when processing MSGCRYPTO messages. input data validation when...

GSD-2022-1000188 KVM: x86: Forcibly leave nested virt when SMM state is toggled

KVM: x86: Forcibly leave nested virt when SMM state is toggled This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.97 by commit...

PT-2022-28526

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.19 Description The issue is related to KVM x86 and forcibly leaving nested virtualization when the SMM state is toggled. The actual impact and attack plausibility have not yet been proven. Recommendations F...

PT-2022-28466

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to 5.10.97 Description The issue is related to KVM x86, where the system forcibly leaves nested virtualization when the SMM state is toggled. The actual impact and attack plausibility have not yet been proven...

CVE-2021-45005

Artifex MuJS v1.1.3 was discovered to contain a heap buffer overflow which is caused by conflicting JumpList of nested try/finally statements...

DEBIAN-CVE-2021-45005

Artifex MuJS v1.1.3 was discovered to contain a heap buffer overflow which is caused by conflicting JumpList of nested try/finally statements...

CVE-2021-45005

Artifex MuJS v1.1.3 was discovered to contain a heap buffer overflow which is caused by conflicting JumpList of nested try/finally statements...

Heap overflow

Artifex MuJS v1.1.3 was discovered to contain a heap buffer overflow which is caused by conflicting JumpList of nested try/finally statements...

UBUNTU-CVE-2021-45005

Artifex MuJS v1.1.3 was discovered to contain a heap buffer overflow which is caused by conflicting JumpList of nested try/finally statements...

CVE-2021-45005

Artifex MuJS v1.1.3 was discovered to contain a heap buffer overflow which is caused by conflicting JumpList of nested try/finally statements...

CVE-2021-45005

CVE-2021-45005 affects Artifex MuJS v1.1.3, where a heap buffer overflow is triggered by conflicting JumpList of nested try/finally statements. Multiple connected sources (OSV and GLSA/Nessus-derived advisories) confirm the same root cause and impact vector. The vulnerability could lead to denial...

MariaDB Denial of Service Vulnerability (CNVD-2022-65010)

MariaDB is a free and open source database management system from the MariaDB Foundation and a forked version of MySQL with the Maria storage engine. MariaDB suffers from a denial-of-service vulnerability that stems from the product allowing self-queries to be nested by nesting them within Update...

AlmaLinux 8 : kernel (ALSA-2021:3548)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2021:3548 advisory. - A flaw was found in the KVM's AMD code for supporting SVM nested virtualization. The flaw occurs when processing the VMCB virtual machine control block provided ...