771 matches found
Null pointer dereference
A speculative pointer dereference problem exists in the Linux Kernel on the doprlimit function. The resource argument value is controlled and is used in pointer arithmetic for the 'rlim' variable and can be used to leak the contents. We recommend upgrading past version 6.1.8 or...
CVE-2023-0458 Spectre V1 Gadget in do_prlimit in the Linux Kernel
A speculative pointer dereference problem exists in the Linux Kernel on the doprlimit function. The resource argument value is controlled and is used in pointer arithmetic for the 'rlim' variable and can be used to leak the contents. We recommend upgrading past version 6.1.8 or...
CVE-2023-0458
CVE-2023-0458 describes a speculative pointer dereference in the Linux kernel’s do_prlimit() path. The vulnerable path uses a controlled resource argument in pointer arithmetic for the rl im variable, enabling leakage of kernel contents when exploited. The Astra Linux security bulletin corroborat...
The vulnerabilities of the functions d2i_PKCS7(), d2i_PKCS7_bio(), or d2i_PKCS7_fp() implemented in the PKCS #7 standard of the OpenSSL cryptographic library allow a perpetrator to cause a service failure.
The vulnerability of the functions d2iPKCS7, d2iPKCS7bio, or d2iPKCS7fp implemented in the PKCS 7 standard of the OpenSSL cryptographic library is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the rmacinstring function in the editing and reproduction tools for PCAP files, Tcpreplay, allows a hacker to cause a service failure.
The vulnerability of the rmacinstring function in the PCAP-file editing and reproduction utility Tcpreplay is related to pointer arithmetic errors. Exploiting this vulnerability allows an attacker to cause service interruptions remotely...
The vulnerability of the io_file_bitmap_get() function (io_uring/filetable.c) in the Linux kernel allows a hacker to cause a service failure
The vulnerability of the iofilebitmapget function iouring/filetable.c in the Linux kernel is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of software for storing images with a wide dynamic range of brightness, related to pointer swapping errors, allows attackers to trigger a service failure.
The vulnerability of software for storing images with a wide dynamic range of brightness in OpenEXR is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause service interruptions...
The vulnerability of the intuit_diff_type() function in the pch.c component of the Patch program allows a hacker to trigger a service failure.
The vulnerability of the intuitdifftype function in the pch.c component of the Patch program is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to cause a service failure...
UBUNTU-CVE-2021-43314
A heap-based buffer overflows was discovered in upx, during the generic pointer 'p' points to an inaccessible address in func getle32. The problem is essentially caused in PackLinuxElf32::elflookup at plxelf.cpp:5368...
The vulnerability of the ff_hevc_put_hevc_epel_pixels_8_sse function (sse-motion.cc) in the h.265 Libde265 video codec implementation allows a attacker to cause a service failure.
The vulnerability of the ffhevcputhevcepelpixels8sse function sse-motion.cc in the H.265 Libde265 video codec implementation is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure using a specially created file...
The vulnerability in the implementation of the TIPC protocol (Transparent Inter-Process Communication) in the Linux operating system allows a attacker to cause a service failure.
The vulnerability of the TIPC protocol’s implementation in the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
The vulnerability in the `net/unix/diag.c` component of the Linux operating system’s kernel allows a hacker to cause a service failure.
The vulnerability of the net/unix/diag.c component in the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the memory_tier_init() function (mm/memory-tiers.c) in the Linux kernel’s memory management subsystem allows a attacker to trigger a service failure.
The vulnerability of the memorytierinit function mm/memory-tiers.c in the Linux kernel’s memory management subsystem is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to cause a system failure...
The vulnerability of the ufs_mtk_init_va09_pwr_ctrl() function (drivers/scsi/ufs/ufs-mediatek.c) in the Linux operating system’s UFS driver allows a hacker to cause a service failure.
The vulnerability of the ufsmtkinitva09pwrctrl function drivers/scsi/ufs/ufs-mediatek.c in the Linux operating system’s UFS driver is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to cause a service failure...
Security Bulletin: IBM b-type SAN switches and directors affected by Open Source OpenSSL Vulnerabilities (CVE-2016-2177, CVE-2016-2178).
Summary IBM b-type SAN switches and directors addressing Open Source OpenSSL Vulnerabilities CVE-2016-2177, CVE-2016-2178. Vulnerability Details Relevant CVE Information: CVEID: CVE-2016-2177 DESCRIPTION: OpenSSL is vulnerable to a denial of service, caused by the incorrect use of pointer...
K43030517: Linux kernel BPF vulnerability CVE-2019-7308
Security Advisory Description kernel/bpf/verifier.c in the Linux kernel before 4.20.6 performs undesirable out-of-bounds speculation on pointer arithmetic in various cases, including cases of different branches with different state or limits to sanitize, leading to side-channel attacks...
K70992015: Linux kernel vulnerabilty CVE-2021-33200
Security Advisory Description kernel/bpf/verifier.c in the Linux kernel through 5.12.7 enforces incorrect limits for pointer arithmetic operations, aka CID-bb01a1bba579. This can be abused to perform out-of-bounds reads and writes in kernel memory, leading to local privilege escalation to root. I...
SUSE CVE-2008-1685
gcc 4.2.0 through 4.3.0 in GNU Compiler Collection, when casts are not used, considers the sum of a pointer and an int to be greater than or equal to the pointer, which might lead to removal of length testing code that was intended as a protection mechanism against integer overflow and buffer...
SUSE CVE-2008-5187
The load function in the XPM loader for imlib2 1.4.2, and possibly other versions, allows attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted XPM file that triggers a "pointer arithmetic error" and a heap-based buffer overflow, a different vulnerability...
SUSE CVE-2009-0847
The asn1bufimbed function in the ASN.1 decoder in MIT Kerberos 5 aka krb5 1.6.3, when PK-INIT is used, allows remote attackers to cause a denial of service application crash via a crafted length value that triggers an erroneous malloc call, related to incorrect calculations with pointer arithmeti...