24 matches found
CVE-2021-0117
Pointer issues in the firmware for some IntelR Processors may allow a privileged user to potentially enable an escalation of privilege via local access...
CVE-2025-58147
A flaw was found in Xen. Hypercalls using the HVVPSET Sparse format can cause vpmaskset to write out of bounds when converting the bitmap to Xen's format. A buggy or malicious guest can cause Denial of Service DoS affecting the entire host, information leaks, or elevation of privilege...
EUVD-2010-1259
Malware in sbrugna...
EUVD-2021-1710
Malware in sbrugna...
CVE-2025-38456
In the Linux kernel, the following vulnerability has been resolved: ipmi:msghandler: Fix potential memory corruption in ipmicreateuser The "intf" list iterator is an invalid pointer if the correct "intf-intfnum" is not found. Calling atomicdec&intf-nrusers on and invalid pointer will lead to memo...
OESA-2025-1908 ImageMagick security update
Use ImageMagick to create, edit, compose, or convert bitmap images. It can read and write images in a variety of formats over 200 including PNG, JPEG, GIF, HEIC, TIFF, DPX, EXR, WebP, Postscript, PDF, and SVG. Use ImageMagick to resize, flip, mirror, rotate, distort, shear and transform images,...
SUSE-SU-2025:20507-1 Security update for gstreamer-plugins-base
This update for gstreamer-plugins-base fixes the following issues: - CVE-2025-47807: Fixed NULL-pointer dereference in SubRip subtitle parser bsc1244403 - CVE-2025-47808: Fixed NULL-pointer dereference in TMPlayer subtitle parser bsc1244404 - CVE-2025-47806: Fixed Stack buffer overflow in SubRip...
SUSE-SU-2025:1252-1 Security update for the Linux Kernel (Live Patch 24 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-15040024111 fixes several issues. The following security issues were fixed: - CVE-2024-41090: tap: add missing verification for short frame bsc1228714. - CVE-2024-56600: net: inet6: do not leave a dangling sk pointer in inet6create bsc1235218...
Linux Distros Unpatched Vulnerability : CVE-2024-56702
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Mark rawtp arguments with PTRMAYBENULL Arguments to a raw tracepoint are tagged as trusted, which carries the semantics that the pointer will be non-NULL...
SUSE SLES12 Security Update : kernel (Live Patch 58 for SLE 12 SP5) (SUSE-SU-2025:0089-1)
The remote SUSE Linux SLES12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:0089-1 advisory. This update for the Linux Kernel 4.12.14-122222 fixes several issues. The following security issues were fixed: - CVE-2024-50264: vsock/virtio:...
RUSTSEC-2024-0431 Unsound usages of `core::slice::from_raw_parts`
We consider asslice and asslicemut unsound because: the pointer with any bit patterns could be cast to the slice of arbitrary types. The pointer could be created by unsafe new and deprecated fromparts. We consider that fromparts should be removed in latest version because it will help trigger...
RLSA-2024:8870 Moderate: kernel-rt security update
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: net/bluetooth: race condition in conninfomin,maxageset CVE-2024-24857 kernel: dmaengine: fix NULL pointer in channel unregistratio...
SUSE-SU-2023:4370-1 Security update for tiff
This update for tiff fixes the following issues: - CVE-2023-38289: Fixed a NULL pointer dereference in raw2tiff bsc1213589. - CVE-2023-38288: Fixed an integer overflow in raw2tiff bsc1213590. - CVE-2023-3576: Fixed a memory leak in tiffcrop bsc1213273. - CVE-2020-18768: Fixed an out of bounds rea...
OPENSUSE-SU-2022:10153-1 Security update for enlightenment
This update for enlightenment fixes the following issues: Update to 0.25.4 Bugfix release Fix shape handling in various cases that affected apps with shaped input Fix procstats popup and dangling icon for fullscreen windows Fix a vianishing pointer in some cases Workaround Qt issue where it does...
2021.2 IPU – BIOS Advisory
Summary: Potential security vulnerabilities in the BIOS firmware for some Intel® Processors may allow escalation of privilege, denial of service or information disclosure. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2021-0103...
SUSE-SU-2021:2813-1 Security update for qemu
This update for qemu fixes the following issues: Security issues fixed: - usbredir: free call on invalid pointer in bufpalloc bsc1189145, CVE-2021-3682 - NULL pointer dereference in ESP bsc1180433, CVE-2020-35504 bsc1180434, CVE-2020-35505 bsc1180435, CVE-2020-35506 - NULL pointer dereference iss...
SUSE-SU-2021:14772-1 Security update for kvm
This update for kvm fixes the following issues: - CVE-2021-3594: invalid pointer initialization may lead to information disclosure in slirp udp bsc1187367 - CVE-2021-3592: invalid pointer initialization may lead to information disclosure bootp. bsc1187364 - CVE-2021-3416: infinite loop in loopbac...
MGASA-2021-0305 Updated p7zip package fixes security vulnerabilities
In p7zip-17.03, the function NCompress::CCopyCoder::Code in CPP/7zip/Common/StreamObjects.cpp will call outStream-Write where a memcpy uses a NULL pointer as destination address, leading to a crash CVE-2021-3465. Null pointer dereference in function Reserve found in p7zip 16.02 rhbz1951218. Null...
MGASA-2016-0331 Updated freerdp packages fix security vulnerabilities
FreeRDP could crash due to a NULL or invalid pointer CVE-2013-4118, CVE-2013-4119...
Siemens WinCC Exploitable Crashes
Overview ICS-CERT Advisory ICSA-11-175-02P was originally released to the US-CERT Portal on June 24, 2011. This web page release was delayed to allow users sufficient time to download and install the update. ICS-CERT has received a report from independent security researchers Billy Rios and Terry...