PT-2021-25200

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.236 Description A memory leak issue exists in the caif device notify function of the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versio...

PT-2021-25184

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.3 through 4.4.271 Description A memory leak issue exists in the caif device notify function of the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-29186

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.272 Description A memory leak issue exists in the caif device notify function of the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel version...

OPENSUSE-SU-2021:0899-1 Security update for salt

This update for salt fixes the following issues: Update to Salt release version 3002.2 jscECO-3212, jscSLE-18033, jscSLE-18028 - Check if dpkgnotify is executable bsc1186674 - Drop support for Python2. Obsoletes python2-salt package jscSLE-18028 - virt module updates network: handle missing ipv4...

CVE-2021-0477

In notifyScreenshotError of ScreenshotNotificationsController.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersion...

SUSE: Security Advisory (SUSE-SU-2013:1668-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

@netsells/reg-suit-basic-git-hash-plugin (>=0.2.0, <=0.2.1), reg-notify-github-plugin (>=0.0.18, <=0.4.2) potentially affected by CVE-2021-32673 via reg-keygen-git-hash-plugin (>=0.0.17, <=0.8.5)

reg-keygen-git-hash-plugin NPM version =0.0.17, =0.2.0, =0.0.18, =0.4.2 Source cves: CVE-2021-32673 Source advisory: GHSA-49Q3-8867-5WMP...

@netsells/reg-suit-basic-git-hash-plugin (>=0.2.0, <=0.2.1), reg-notify-github-plugin (>=0.0.18, <=0.4.2) potentially affected by CVE-2021-32673 via reg-keygen-git-hash-plugin (>=0.0.17, <=0.8.5)

reg-keygen-git-hash-plugin NPM version =0.0.17, =0.2.0, =0.0.18, =0.4.2 Source cves: CVE-2021-32673 Source advisory: MEND:CVE-2021-32673...

PT-2024-11174 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A memory leak issue has been resolved in the Linux kernel. The problem occurs when caif enroll dev fails, and the allocated link support is not assigned to the corresponding structure...

UBUNTU-CVE-2021-33574

The mqnotify function in the GNU C Library aka glibc versions 2.32 and 2.33 has a use-after-free. It may use the notification thread attributes object passed through its struct sigevent parameter after it has been freed by the caller, leading to a denial of service application crash or possibly...

PT-2021-5558

Name of the Vulnerable Software and Affected Versions glibc versions 2.32 and 2.33 Description The issue is related to the mq notify function in the GNU C Library, which has a use-after-free problem. This occurs when the function uses the notification thread attributes object, passed through its...

SUSE-SU-2021:1648-1 Security update for xen

This update for xen fixes the following issues: Security issue fixed: - CVE-2021-28689: Fixed some x86 speculative vulnerabilities with bare non-shim 32-bit PV guests XSA-370 bsc1185104 - Make sure xencommons is in a format as expected by fillup. bsc1185682 Each comment needs to be followed by an...

samba: Missing handle permissions check in SMB1/2/3 ChangeNotify

A flaw was found in the way Samba handled file and directory permissions. This flaw allows an authenticated user to gain access to certain file and directory information, which otherwise would be unavailable. The highest threat from this vulnerability is to confidentiality...

SUSE SLES12 Security Update : xen (SUSE-SU-2021:1580-1)

This update for xen fixes the following issues : A recent systemd update caused a regression in 'xenstored.service' systemd now fails to track units that use systemd-notify. bsc1183790 Add a fix to delay between the call to 'systemd-notify' and the final exit of the wrapper script. bsc1185021,...

SUSE-SU-2021:1580-1 Security update for xen

This update for xen fixes the following issues: - A recent systemd update caused a regression in 'xenstored.service' systemd now fails to track units that use systemd-notify. bsc1183790 - Add a fix to delay between the call to 'systemd-notify' and the final exit of the wrapper script. bsc1185021,...

PT-2021-28429

Name of the Vulnerable Software and Affected Versions: xen affected versions not specified Description: A recent systemd update caused a regression in 'xenstored.service', where systemd now fails to track units that use systemd-notify. The issue is resolved by adding a fix to delay between the ca...

samba: Missing handle permissions check in SMB1/2/3 ChangeNotify

A flaw was found in the way Samba handled file and directory permissions. This flaw allows an authenticated user to gain access to certain file and directory information, which otherwise would be unavailable. The highest threat from this vulnerability is to confidentiality...

USN-4931-1 samba vulnerabilities

Steven French discovered that Samba incorrectly handled ChangeNotify permissions. A remote attacker could possibly use this issue to obtain file name information. CVE-2020-14318 Bas Alberts discovered that Samba incorrectly handled certain winbind requests. A remote attacker could possibly use th...

PT-2021-21280 · Signalwire +1 · Freeswitch +1

Name of the Vulnerable Software and Affected Versions: SignalWire freeswitch versions prior to 1.10.6 Description: An issue was discovered in the function sofia handle sip i notify in sofia.c, which may allow attackers to view sensitive information due to an uninitialized value. Recommendations:...

ALPINE-CVE-2021-27928

A remote code execution issue was discovered in MariaDB 10.2 before 10.2.37, 10.3 before 10.3.28, 10.4 before 10.4.18, and 10.5 before 10.5.9; Percona Server through 2021-03-03; and the wsrep patch through 2021-03-03 for MySQL. An untrusted search path leads to eval injection, in which a database...