Photon OS 4.0: Pmd PHSA-2023-4.0-0415

An update of the pmd package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-4.0-0415. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid20364...

PT-2024-29212

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.43 Description The Linux kernel has a vulnerability related to the creation of PMD-sized page cache. On ARM64 systems, when the base page size is 64KB, HPAGE PMD ORDER is 13, which cannot be supported by...

Jenkins Report Info Plugin Path Traversal vulnerability

Jenkins Report Info Plugin 1.2 and earlier does not perform path validation of the workspace directory while serving report files. Additionally, Report Info Plugin does not support distributed builds. This results in a path traversal vulnerability, allowing attackers with Item/Configure permissio...

GHSA-CW5R-JX8R-9F7X Jenkins Report Info Plugin Path Traversal vulnerability

Jenkins Report Info Plugin 1.2 and earlier does not perform path validation of the workspace directory while serving report files. Additionally, Report Info Plugin does not support distributed builds. This results in a path traversal vulnerability, allowing attackers with Item/Configure permissio...

CVE-2024-5273

Jenkins Report Info Plugin 1.2 and earlier does not perform path validation of the workspace directory while serving report files, allowing attackers with Item/Configure permission to retrieve Surefire failures, PMD violations, Findbugs bugs, and Checkstyle errors on the controller file system by...

CVE-2024-5273

Jenkins Report Info Plugin 1.2 and earlier does not perform path validation of the workspace directory while serving report files, allowing attackers with Item/Configure permission to retrieve Surefire failures, PMD violations, Findbugs bugs, and Checkstyle errors on the controller file system by...

CVE-2024-5273

Jenkins Report Info Plugin 1.2 and earlier does not perform path validation of the workspace directory while serving report files, allowing attackers with Item/Configure permission to retrieve Surefire failures, PMD violations, Findbugs bugs, and Checkstyle errors on the controller file system by...

Malicious code in pmd-github-action (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 25570da8772dbadd784a50cef765f49e039bdd693711fa519447931729c5ec72 The OpenSSF Package Analysis project identified 'pmd-github-action' @ 7.2.9 npm as malicious. It is considered malicious because: - The package...

MAL-2023-8125 Malicious code in pmd-github-action (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 25570da8772dbadd784a50cef765f49e039bdd693711fa519447931729c5ec72 The OpenSSF Package Analysis project identified 'pmd-github-action' @ 7.2.9 npm as malicious. It is considered malicious because: - The package...

Critical Photon OS Security Update - PHSA-2023-5.0-0037

Updates of 'samba-client', 'go', 'calico', 'bindutils', 'pmd-ng' packages of Photon OS have been released...

SUSE CVE-2014-8173

The pmdnoneortranshugeorclearbad function in include/asm-generic/pgtable.h in the Linux kernel before 3.13 on NUMA systems does not properly determine whether a Page Middle Directory PMD entry is a transparent huge-table entry, which allows local users to cause a denial of service NULL pointer...

SUSE CVE-2018-1000008

Jenkins PMD Plugin 3.49 and earlier processes XML external entities in files it parses as part of the build process, allowing attackers with user permissions in Jenkins to extract secrets from the Jenkins master, perform server-side request forgery, or denial-of-service attacks...

SUSE CVE-2020-29368

An issue was discovered in splithugepmd in mm/hugememory.c in the Linux kernel before 5.7.5. The copy-on-write implementation can grant unintended write access because of a race condition in a THP mapcount check, aka CID-c444eb564fb1...

GSD-2023-1002016 arm64/mm: fix incorrect file_map_count for invalid pmd

arm64/mm: fix incorrect filemapcount for invalid pmd This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.7 by commit...

PT-2023-34933 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.11 Description: The issue is related to mm/MADV COLLAPSE, which involves catching certain pmd lookups. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2023-9438 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.1.0-rc3+ Description: The issue is related to the arm64/mm component of the Linux kernel, where incorrect handling of memory allocation errors can lead to a denial of service. On arm64, the pmd leaf function...

kernel: the copy-on-write implementation can grant unintended write access because of a race condition in a THP mapcount check

An issue was discovered in splithugepmd in mm/hugememory.c in the Linux kernel. The copy-on-write implementation can grant unintended write access because of a race condition in a THP mapcount check...

kernel: the copy-on-write implementation can grant unintended write access because of a race condition in a THP mapcount check

An issue was discovered in splithugepmd in mm/hugememory.c in the Linux kernel. The copy-on-write implementation can grant unintended write access because of a race condition in a THP mapcount check...

XXE vulnerability in Jenkins PMD Plugin

Jenkins PMD Plugin 3.49 and earlier processes XML external entities in files it parses as part of the build process, allowing attackers with user permissions in Jenkins to extract secrets from the Jenkins master, perform server-side request forgery, or denial-of-service attacks...

GHSA-687X-269M-7CV9 XXE vulnerability in Jenkins PMD Plugin

Jenkins PMD Plugin 3.49 and earlier processes XML external entities in files it parses as part of the build process, allowing attackers with user permissions in Jenkins to extract secrets from the Jenkins master, perform server-side request forgery, or denial-of-service attacks...