The vulnerability of the decompression function Dwa in the IlmImf software library for storing images in OpenEXR format, which has a wide dynamic range of brightness levels. This vulnerability is related to pointer arithmetic errors, allowing attackers to cause service interruptions.

The vulnerability of the decompression function in the Dwa library of the OpenEXR image storage software for images with wide dynamic ranges is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to cause service interruptions...

The vulnerability of the tjInitDecompress() function in the libjpeg-turbo image processing library allows a attacker to compromise the accessibility of protected information.

The vulnerability of the tjInitDecompress function in the libjpeg-turbo image processing library is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to compromise the accessibility of protected information by consuming excessive memory resources...

The vulnerability of the Apache HTTP Server’s web server, related to pointer arithmetic errors, allows attackers to cause service interruptions.

The vulnerability of the Apache HTTP Server is related to pointer arithmetic errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability of the Linux kernel driver in Nitro Enclaves, related to pointer arithmetic errors, allows an attacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Linux kernel driver in Nitro Enclaves is related to errors in pointer assignment when closing file descriptors for enclaves. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability of the syntactic analyzer in the mac80211 subsystem of the Linux operating system’s kernel allows a perpetrator to trigger a service failure due to pointer arithmetic errors.

The vulnerability of the syntactic analyzer in the mac80211 subsystem of the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability allows an attacker to cause a service failure by injecting a 802.11a frame...

The vulnerability of the avahi_s_host_name_resolver_start function in the Avahi service discovery system in local networks allows a attacker to trigger a service failure. This vulnerability is related to pointer arithmetic errors.

The vulnerability of the avahishostnameresolverstart function in the Avahi service discovery system in local networks is related to pointer arithmetic errors. Exploiting this vulnerability can allow attackers to cause service failures...

The vulnerability of the lzo_decompress_buf function in the stream.c component of the Lrzip compression algorithm, related to pointer arithmetic errors, allows a hacker to cause a service failure.

The vulnerability of the lzodecompressbuf function in the stream.c component of the Lrzip compression program is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to cause a service failure by using a specially created compressed file...

The vulnerability of the ucompthread function in the stream.c component of the Lrzip compression program, related to pointer arithmetic errors, allows a malicious actor to cause a service failure.

The vulnerability of the ucompthread function in the stream.c component of the Lrzip compression program is related to pointer arithmetic errors. Exploiting this vulnerability could allow a remote attacker to cause a service failure through the use of a specially created compressed file...

The vulnerability of the Bash command shell, related to pointer arithmetic errors, allows attackers to compromise data integrity and cause service failures.

The vulnerability of the Bash command shell is related to errors due to incorrect command sequencing. Exploiting this vulnerability allows a remote attacker to compromise data integrity and cause service failures...

Privilege Escalation

kernel is vulnerable to Privilege Escalation. An out-of-bounds read and write in kernel/bpf/verifier.c due to incorrect limits enforcement for pointer arithmetic operations can be abused to escalate privileges to root...

The vulnerability of the FreeBSD operating systems, related to pointer arithmetic errors, allows attackers to cause an application to terminate abnormally.

The vulnerability of the FreeBSD operating systems is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause an application to terminate abnormally...

The vulnerability of the sanei_epson_net_read component of the interface that provides access to SANE image scanning devices is related to pointer arithmetic errors, which allow an attacker to cause a service failure.

The vulnerability of the saneiepsonnetread component of the interface that provides access to SANE image scanning devices is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the Apache HTTP Server’s web server, related to pointer arithmetic errors, allows attackers to cause an unexpected termination of the application.

The vulnerability of the Apache HTTP Server is related to pointer arithmetic errors. Exploiting this vulnerability can allow a malicious actor to cause an unexpected termination of the application remotely...

The vulnerability of the relay_open function in the kernel/relay.c file of the Linux operating system, related to pointer arithmetic errors, allows attackers to cause a service failure.

The vulnerability of the relayopen function in the kernel/relay.c file of the Linux operating system is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

SUSE-SU-2021:2208-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP2 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2021-33200: Enforcing incorrect limits for pointer arithmetic operations by the BPF verifier could be abused to perform out-of-bounds reads and writes in...

openSUSE 15 Security Update : kernel (openSUSE-SU-2021:0873-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:0873-1 advisory. - An issue was discovered in the Linux kernel through 5.11.x. kernel/bpf/verifier.c performs undesirable out-of-bounds speculation on point...

The vulnerability of the PHP SOAP extension allows a attacker to trigger an emergency shutdown of the application.

The vulnerability of the PHP SOAP extension interpreter is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker, operating remotely, to cause the application to terminate abnormally...

The vulnerability of Xen hypervisors, related to pointer swapping errors, allows a perpetrator to cause a service failure.

The vulnerability of Xen hypervisors is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

SUSE-SU-2021:2027-1 Security update for the Linux Kernel (Live Patch 13 for SLE 15 SP2)

This update for the Linux Kernel 5.3.18-2464 fixes several issues. The following issues were fixed: - CVE-2021-33200: Enforcing incorrect limits for pointer arithmetic operations by the BPF verifier could be abused to perform out-of-bounds reads and writes in kernel memory bsc1186484. -...

SUSE-SU-2021:1975-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP3 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2021-33200: Enforcing incorrect limits for pointer arithmetic operations by the BPF verifier could be abused to perform out-of-bounds reads and writes ...