go -- crypto/tls: clients can panic when provided a certificate of the wrong type for the negotiated parameters

The Go project reports: crypto/tls clients can panic when provided a certificate of the wrong type for the negotiated parameters. net/http clients performing HTTPS requests are also affected. The panic can be triggered by an attacker in a privileged network position without access to the server...

golang: archive/zip: malformed archive may cause panic or memory exhaustion

A vulnerability was found in archive/zip of the Go standard library. Applications written in Go can panic or potentially exhaust system memory when parsing malformed ZIP files...

GSD-2021-1001092 usb: dwc3: core: fix kernel panic when do reboot

usb: dwc3: core: fix kernel panic when do reboot This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.13 by commit...

UVI-2021-1001092 usb: dwc3: core: fix kernel panic when do reboot

usb: dwc3: core: fix kernel panic when do reboot This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.13 by commit...

GSD-2021-1001079 PCI: aardvark: Fix kernel panic during PIO transfer

PCI: aardvark: Fix kernel panic during PIO transfer This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.13 by commit...

UVI-2021-1001079 PCI: aardvark: Fix kernel panic during PIO transfer

PCI: aardvark: Fix kernel panic during PIO transfer This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.13 by commit...

GSD-2021-1001009 usb: dwc3: core: fix kernel panic when do reboot

usb: dwc3: core: fix kernel panic when do reboot This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.46 by commit...

UVI-2021-1001009 usb: dwc3: core: fix kernel panic when do reboot

usb: dwc3: core: fix kernel panic when do reboot This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.46 by commit...

UVI-2021-1000998 PCI: aardvark: Fix kernel panic during PIO transfer

PCI: aardvark: Fix kernel panic during PIO transfer This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.46 by commit...

GSD-2021-1000998 PCI: aardvark: Fix kernel panic during PIO transfer

PCI: aardvark: Fix kernel panic during PIO transfer This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.46 by commit...

GSD-2021-1000936 usb: dwc3: core: fix kernel panic when do reboot

usb: dwc3: core: fix kernel panic when do reboot This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.128 by commit...

UVI-2021-1000936 usb: dwc3: core: fix kernel panic when do reboot

usb: dwc3: core: fix kernel panic when do reboot This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.128 by commit...

UVI-2021-1000930 PCI: aardvark: Fix kernel panic during PIO transfer

PCI: aardvark: Fix kernel panic during PIO transfer This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.128 by commit...

GSD-2021-1000930 PCI: aardvark: Fix kernel panic during PIO transfer

PCI: aardvark: Fix kernel panic during PIO transfer This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.128 by commit...

Google Golang has an unspecified vulnerability

Google Golang is a statically strongly typed, compiled language from Google, U.S. A security vulnerability exists in Google Golang that could be exploited by attackers to cause a panic or unrecoverable fatal error and lead to a denial of service condition...

Denial of service in geth

Impact Denial-of-service crash during block processing Details Affected versions suffer from a vulnerability which can be exploited through the MULMOD operation, by specifying a modulo of 0: mulmoda,b,0, causing a panic in the underlying library. The crash was in the uint256 library, where a buff...

Important: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

RHEL 8 : kernel-rt (RHSA-2021:2599)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:2599 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirement...

SUSE-SU-2021:2186-1 Security update for go1.16

This update for go1.16 fixes the following issues: Update to 1.16.5. Includes these security fixes - CVE-2021-33195: net: Lookup functions may return invalid host names bsc1187443. - CVE-2021-33196: archive/zip: malformed archive may cause panic or memory exhaustion bsc1186622. - CVE-2021-33197:...

Google Golang 安全漏洞

Google Golang is a statically strongly typed, compiled language from Google, U.S. A security vulnerability exists in Google Golang that could be exploited by attackers to cause a panic or unrecoverable fatal error and lead to a denial of service condition...