138 matches found
PT-2021-27270
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.169 Description The issue is related to the phonet/pep, which refuses to enable an unbound pipe. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...
pep_sock_accept in net/phonet/pep.c in the Linux kernel through 5.15.8 has a refcount leak.
...
PT-2021-8140
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The vulnerability is related to the phonet/pep component of the Linux kernel, which incorrectly handles unbound pipes. This can lead to two problems: sending a pipe enablement request wi...
DEBIAN-CVE-2021-45095
pepsockaccept in net/phonet/pep.c in the Linux kernel through 5.15.8 has a refcount leak...
UBUNTU-CVE-2021-45095
pepsockaccept in net/phonet/pep.c in the Linux kernel through 5.15.8 has a refcount leak...
Linux kernel 信息泄露漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the U.S. KVM is one of the kernel-based virtual machines. overlayfs is one of the file systems. A security vulnerability exists in the Linux kernel that stems from a reference count leak in...
PT-2021-5656 · Linux +5 · Linux Kernel +5
Name of the Vulnerable Software and Affected Versions: Linux kernel versions through 5.15.8 Description: The issue is related to a refcount leak in the pep sock accept function in the Linux kernel. This leak is associated with insufficient protection of internal data. Exploitation of this issue m...
SUSE: Security Advisory (SUSE-SU-2020:3737-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
pep-web.org Cross Site Scripting vulnerability OBB-1475646
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
pep-web.org Cross Site Scripting vulnerability OBB-1384438
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
pep-web.org Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1153614 Security Researcher ELProfesor Helped patch 2814 vulnerabilities Received 8 Coordinated Disclosure badges Received 107 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting pep-web.org website an...
Fedora 31 : python38 (2019-d11594bf0a)
This is a beta preview of Python 3.8 Python 3.8 is still in development. This release, 3.8.0b4 is the last of four planned beta release previews. Beta release previews are intended to give the wider community the opportunity to test new features and bug fixes and to prepare their projects to...
Fedora 29 : python38 (2019-d58eb75449)
This is a beta preview of Python 3.8 Python 3.8 is still in development. This release, 3.8.0b4 is the last of four planned beta release previews. Beta release previews are intended to give the wider community the opportunity to test new features and bug fixes and to prepare their projects to...
Fedora 30 : python38 (2019-4954d8773c)
This is a beta preview of Python 3.8 Python 3.8 is still in development. This release, 3.8.0b4 is the last of four planned beta release previews. Beta release previews are intended to give the wider community the opportunity to test new features and bug fixes and to prepare their projects to...
FreeBSD : slixmpp -- improper access control (526d9642-3ae7-11e9-a669-8c164582fbac)
NVD reports : slixmpp version before commit 7cd73b594e8122dddf847953fcfc85ab4d316416 contains an incorrect Access Control vulnerability in XEP-0223 plugin Persistent Storage of Private Data via PubSub options profile, used for the configuration of default access model that can result in all of th...
Access Control Bypass
slixmpp is vulnerable to access control bypass. The vulnerability exists because the default permissions for persistent storage of private data on a PEP node is not set properly, disclosing private data that have been published to a PEP node to all the contacts of the victim...
CVE-2019-1000021
slixmpp version before commit 7cd73b594e8122dddf847953fcfc85ab4d316416 contains an incorrect Access Control vulnerability in XEP-0223 plugin Persistent Storage of Private Data via PubSub options profile, used for the configuration of default access model that can result in all of the contacts of...
PYSEC-2019-121
slixmpp version before commit 7cd73b594e8122dddf847953fcfc85ab4d316416 contains an incorrect Access Control vulnerability in XEP-0223 plugin Persistent Storage of Private Data via PubSub options profile, used for the configuration of default access model that can result in all of the contacts of...
PYSEC-2019-121
slixmpp version before commit 7cd73b594e8122dddf847953fcfc85ab4d316416 contains an incorrect Access Control vulnerability in XEP-0223 plugin Persistent Storage of Private Data via PubSub options profile, used for the configuration of default access model that can result in all of the contacts of...
PYSEC-2019-51
slixmpp version before commit 7cd73b594e8122dddf847953fcfc85ab4d316416 contains an incorrect Access Control vulnerability in XEP-0223 plugin Persistent Storage of Private Data via PubSub options profile, used for the configuration of default access model that can result in all of the contacts of...