EUVD-2017-18044

Malware in sbrugna...

EUVD-2020-28858

Malware in sbrugna...

EUVD-2017-2389

Malware in sbrugna...

EUVD-2003-0068

Malware in sbrugna...

EUVD-2019-5279

Malware in sbrugna...

EUVD-2017-8046

Malware in sbrugna...

EUVD-2017-1251

Malware in sbrugna...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-984807)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-984807 advisory. In the Linux kernel, the following vulnerability has been resolved: xhci: handle isoc Babble and Buffer Overrun events properly xHCI 4.9 explicitly forbids assuming...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414295)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414295 advisory. The fix for XSA-423 added logic to Linux'es netback driver to deal with a frontend splitting a packet in a way such that not all of the headers would come in one...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414621)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414621 advisory. An issue was discovered in the Linux kernel through 5.11.10. drivers/net/ethernet/freescale/gianfar.c in the Freescale Gianfar Ethernet driver allows attackers to...

CVE-2025-59733

When decoding an OpenEXR file that uses DWAA or DWAB compression, there's an implicit assumption that all image channels have the same pixel type and size, and that if there are four channels, the first four are "B", "G", "R" and "A". The channel parsing code can be found in decodeheader. The...

EUVD-2025-32519

When calculating the content path in handling of MPEG-DASH manifests, there's an out-of-bounds NUL-byte write one byte past the end of the buffer.When we call xmlNodeGetContent below 0, it returns a buffer precisely allocated to match the string length, using strdup internally. If this buffer is...

ROS-20251006-01

A vulnerability in the certtool utility of the GnuTLS transport layer security library is related to an operation exceeding the buffer boundaries. operation outside of a buffer in memory. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...

CVE-2023-53553

In the Linux kernel, the following vulnerability has been resolved: HID: hyperv: avoid struct memcpy overrun warning A previous patch addressed the fortified memcpy warning for most builds, but I still see this one with gcc-9: In file included from include/linux/string.h:254, from...

UBUNTU-CVE-2023-53589

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: don't trust firmware nchannels If the firmware sends us a corrupted MCC response with nchannels much larger than the command response can be, we might copy far too much uninitialized memory and even crash if t...

UBUNTU-CVE-2023-53553

In the Linux kernel, the following vulnerability has been resolved: HID: hyperv: avoid struct memcpy overrun warning A previous patch addressed the fortified memcpy warning for most builds, but I still see this one with gcc-9: In file included from include/linux/string.h:254, from...

CVE-2023-53553

CVE-2023-53553 is a Linux kernel issue tied to Hyper-V HID handling. The vulnerability arises from a fortify memcpy-related codepath in HID Hyper-V (mousevsc_on_receive) where a __write_overflow_field warning could be triggered, prompting a patch to rework the code to avoid the warning. Connected...

CVE-2025-39949

In the Linux kernel, the following vulnerability has been resolved: qed: Don't collect too many protection override GRC elements In the protection override dump path, the firmware can return far too many GRC elements, resulting in attempting to write past the end of the previously-kmalloc'ed dump...

CVE-2025-39949 qed: Don't collect too many protection override GRC elements

In the Linux kernel, the following vulnerability has been resolved: qed: Don't collect too many protection override GRC elements In the protection override dump path, the firmware can return far too many GRC elements, resulting in attempting to write past the end of the previously-kmalloc'ed dump...

CVE-2025-39949

CVE-2025-39949 is a Linux kernel vulnerability in the qed protection override dump path. The firmware could return more GRC elements than the allocated dump buffer, enabling a write past the end of the buffer and causing a kernel panic (BUG: unable to handle kernel paging request). The issue is f...