1852 matches found
glibc mq_notify Buffer Overflow DoS
The vulnerability of the sysdeps/unix/sysv/linux/mqnotify.c component of the glibc library is related to the handling of zero pointers. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...
CVE-2021-35392
Realtek Jungle SDK version v2.x up to v3.4.14B provides a 'WiFi Simple Config' server that implements both UPnP and SSDP protocols. The binary is usually named wscd or miniupnpd and is the successor to miniigd. The server is vulnerable to a heap buffer overflow that is present due to unsafe...
CVE-2021-35392: Out-of-bounds Write
Realtek Jungle SDK version v2.x up to v3.4.14B provides a 'WiFi Simple Config' server that implements both UPnP and SSDP protocols. The binary is usually named wscd or miniupnpd and is the successor to miniigd. The server is vulnerable to a heap buffer overflow that is present due to unsafe...
Realtek Jungle SDK buffer error vulnerability
The Realtek Jungle SDK provides an HTTP web server that exposes a management interface that can be used to configure access points. A security vulnerability exists in the Realtek Jungle SDK, which stems from the fact that Realtek Jungle SDK versions v2.x through v3.4.14B provide a "WiFi Simple...
AZL-6442 CVE-2021-38604 affecting package glibc for versions less than 2.35-1
In librt in the GNU C Library aka glibc through 2.34, sysdeps/unix/sysv/linux/mqnotify.c mishandles certain NOTIFYREMOVED data, leading to a NULL pointer dereference. NOTE: this vulnerability was introduced as a side effect of the CVE-2021-33574 fix...
UBUNTU-CVE-2021-38604
In librt in the GNU C Library aka glibc through 2.34, sysdeps/unix/sysv/linux/mqnotify.c mishandles certain NOTIFYREMOVED data, leading to a NULL pointer dereference. NOTE: this vulnerability was introduced as a side effect of the CVE-2021-33574 fix...
GNU C Library code vulnerabilities
The GNU C Library glibc, libc6 is an open-source, free C language compiler released under the LGPL license. A security vulnerability exists in the GNU C Library aka glibc version 2.34 and earlier versions of librt, which stems from sysdeps/unix/sysv/linux/mqnotify.c incorrectly handling certain...
WordPress Ad Blocker Notify Lite plugin <= 2.4.0 - Reflected Cross-Site Scripting (XSS) vulnerability
Reflected Cross-Site Scripting XSS vulnerability discovered by iohex and WPScanTeam in WordPress Ad Blocker Notify Lite plugin versions = 2.4.0. Solution 2021-08-25 - no patched version is available. Deactivate and delete...
CVE-2020-18170
An issue in the SeChangeNotifyPrivilege component of Abloy Key Manager Version 7.14301.0.0 allows attackers to escalate privileges via a change in permissions...
MariaDB wsrep_notify_cmd Input Sanitization Information Disclosure
The vulnerability of the wsrepnotifyCmd modification in the MariaDB database is related to the lack of measures for cleaning input data. Exploiting this vulnerability can allow a malicious actor to gain access to confidential information or cause service failures...
PT-2021-29303
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.273 Description The issue is related to the bonding driver in the Linux Kernel, where the notify work is initialized earlier to avoid uninitialized use. The actual impact and attack plausibility have not yet...
PT-2021-25340
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.195 Description: The issue is related to the bonding driver in the Linux Kernel, where the notify work is initialized earlier to avoid uninitialized use. The actual impact and attack plausibility have not...
PT-2021-29477
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.12.11 Description The issue is related to the bonding driver in the Linux Kernel, where the notify work is initialized earlier to avoid uninitialized use. The actual impact and attack plausibility have not yet...
PT-2021-25410
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.44 Description: The issue is related to the bonding driver in the Linux Kernel, where the notify work is initialized earlier to avoid uninitialized use. The actual impact and attack plausibility have not y...
PT-2021-25323
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.14.237 Description: The issue is related to the initialization of notify work in the bonding module, which could lead to uninitialized use. The actual impact and attack plausibility have not yet been proven...
PT-2021-25483
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.12.11 Description: The issue is related to the bonding driver in the Linux Kernel, where the notify work is initialized earlier to avoid uninitialized use. The actual impact and attack plausibility have not y...
PT-2021-25358
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.126 Description: The issue is related to the bonding driver in the Linux Kernel, where the notify work is initialized earlier to avoid uninitialized use. The actual impact and attack plausibility have not y...
PT-2021-29352
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.126 Description The issue is related to the bonding driver in the Linux Kernel, where the notify work is initialized earlier to avoid uninitialized use. The actual impact and attack plausibility have not yet...
PT-2021-29404
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.44 Description The issue is related to the bonding driver in the Linux Kernel, where the notify work is initialized earlier to avoid uninitialized use. The actual impact and attack plausibility have not yet...
UVI-2021-1000828 bonding: init notify_work earlier to avoid uninitialized use
bonding: init notifywork earlier to avoid uninitialized use This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.4.273 by commit...