14017 matches found
GSD-2022-1005309 tools/power turbostat: Fix file pointer leak
tools/power turbostat: Fix file pointer leak This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...
GSD-2022-1005074 powerpc/pseries/mobility: set NMI watchdog factor during an LPM
powerpc/pseries/mobility: set NMI watchdog factor during an LPM This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.4 by commit...
CVE-2020-36600
Out-of-bounds write vulnerability in the power consumption module. Successful exploitation of this vulnerability may cause the system to restart...
CVE-2020-36600
Out-of-bounds write vulnerability in the power consumption module. Successful exploitation of this vulnerability may cause the system to restart...
Cross site scripting
Out-of-bounds write vulnerability in the power consumption module. Successful exploitation of this vulnerability may cause the system to restart...
CVE-2020-36600
CVE-2020-36600 is an out-of-bounds write vulnerability in the power consumption module, affecting Huawei EMUI and Huawei Magic UI (per CNVD/CNNVD entries) and reported on NVD as a high-severity issue (CVSSv3.1: 7.5, AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). Exploitation reportedly can cause a system ...
CVE-2020-36600
Out-of-bounds write vulnerability in the power consumption module. Successful exploitation of this vulnerability may cause the system to restart...
PT-2022-33567 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.19 through v5.19.1 Description: A file pointer leak was discovered in the power turbostat tool. The issue was introduced in version v5.19 and is fixed in version v5.19.2. The actual impact and attack plausibility have...
PT-2022-33586
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to 5.19.2 Description The issue concerns the conversion of the power field to micro-Watts precision and alignment of drivers. The actual impact and attack plausibility have not yet been proven. Recommendations For...
PT-2022-33715 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.63 Description: The issue is related to a warning in OPP during probe in the pm helpers module. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel version...
CVE-2020-36600: Out-of-bounds Write
Out-of-bounds write vulnerability in the power consumption module. Successful exploitation of this vulnerability may cause the system to restart...
PT-2022-9004
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned. Description The issue is an out-of-bounds write vulnerability in the power consumption module. Successful exploitation of this issue may cause the system to restart. Recommendations At the moment...
The voting power cannot be returned deterministically, if there are multiple checkpoints sharing the same timestamp
Lines of code Vulnerability details Impact Specifically, when writing a checkpoint, the code does not check whether the latest checkpoint is also in the current block. Consider a user makes multiple times of token transfer, the ERC721Votes contract will record multiple checkpoints with the same...
NFT flashloan against governance voting
Lines of code Vulnerability details Impact Specifically, to support a proposal, the voting power is counted at the time of the proposal creation time. However, there are multiple services that support NFT flashloan, e.g., NFTuloan . Since the voting power is counted as the proposal creation time,...
ERC721Votes: Token owners can double voting power through self delegation
Lines of code Vulnerability details The owner of one or many ERC721Votes tokens can double their voting power once and only once by delegating to their own address as their first delegation. Scenario This exploit relies on the initial default value of the delegation mapping in ERC721Votes, which ...
Adversary can gain Infinite voting power due to integer overflow
Lines of code Vulnerability details Impact Specifically, ERC721Votes enables users to delegate their voting power to others. Note that when delegating the voting power, the actual token balance will not change. On the other hand, when transferring tokens, the voting power transfers accordingly:...
Sagemath 9.0 Overflow / Denial Of Service Exploit
sagemath 9.0 and reportedly later on ubuntu 20. sagemath gives access to the python interpreter, so code execution is trivial. We give DoS attacks, which terminates the sagemath process with abort, when raising symbolic expression to large integer power. We get abort with stack: gmp: overflow in...
CVE-2022-38311
Tenda AC18 router v15.03.05.19 and v15.03.05.05 was discovered to contain a stack overflow via the time parameter at /goform/PowerSaveSet...
PT-2022-24362 · Tenda · Tenda Ac18
Name of the Vulnerable Software and Affected Versions: Tenda AC18 router versions 15.03.05.05 through 15.03.05.19 Description: A stack overflow issue was discovered via the time parameter at the "/goform/PowerSaveSet" API endpoint. Recommendations: For versions 15.03.05.05 through 15.03.05.19,...
