CVE-2018-10846

A cache-based side channel attack was found in the way GnuTLS implements CBC-mode cipher suites. An attacker could use a combination of "Just in Time" Prime+probe and Lucky-13 attacks to recover plain text in a cross-VM attack scenario...

The vulnerability of the fsl_lpspi_probe() function in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the fsllpspiprobe function drivers/spi/spi-fsl-lpspi.c in the Linux kernel involves an uncontrolled consumption of resources. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

Vulnerability of the crypto_report() function (crypto/crypto_user_base.c) in the Linux kernel, allowing a hacker to trigger a service failure

The vulnerability of the rtlusbprobe function crypto/cryptouserbase.c in the Linux kernel involves an uncontrolled consumption of resources. Exploiting this vulnerability could allow a hacker to cause a service failure...

Vulnerability of the cx23888_ir_probe() function (drivers/media/pci/cx23885/cx23888-ir.c) in the Linux kernel, allowing a hacker to cause a service failure

The vulnerability of the cx23888irprobe function in the Linux kernel’s drivers/media/pci/cx23885/cx23888-IR.c file leads to uncontrolled resource consumption. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

CVE-2011-3600

The /webtools/control/xmlrpc endpoint in OFBiz XML-RPC event handler is exposed to External Entity Injection by passing DOCTYPE declarations with executable payloads that discloses the contents of files in the filesystem. In addition, it can also be used to probe for open network ports, and figur...

DEBIAN-CVE-2019-19075

A memory leak in the ca8210probe function in drivers/net/ieee802154/ca8210.c in the Linux kernel before 5.3.8 allows attackers to cause a denial of service memory consumption by triggering ca8210getplatformdata failures, aka CID-6402939ec86e...

DEBIAN-CVE-2019-19064

A memory leak in the fsllpspiprobe function in drivers/spi/spi-fsl-lpspi.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service memory consumption by triggering pmruntimegetsync failures, aka CID-057b8945f78f. NOTE: third parties dispute the relevance of this because a...

DEBIAN-CVE-2019-19070

A memory leak in the spigpioprobe function in drivers/spi/spi-gpio.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service memory consumption by triggering devmaddactionorreset failures, aka CID-d3b0ffa1d75d. NOTE: third parties dispute the relevance of this because the...

DEBIAN-CVE-2019-19054

A memory leak in the cx23888irprobe function in drivers/media/pci/cx23885/cx23888-ir.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service memory consumption by triggering kfifoalloc failures, aka CID-a7b2df76b42b...

UBUNTU-CVE-2019-19064

A memory leak in the fsllpspiprobe function in drivers/spi/spi-fsl-lpspi.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service memory consumption by triggering pmruntimegetsync failures, aka CID-057b8945f78f. NOTE: third parties dispute the relevance of this because a...

Linux kernel memory leak vulnerability (CNVD-2019-41262)

The Linux kernel is a computer operating system kernel written in C and assembly language, compliant with the POSIX standard, and distributed under the GNU General Public License. A memory leak vulnerability exists in the fsllpspiprobe function in drivers/spi/spi-fsl-lpspi.c in Linux kernel 5.3.1...

Linux kernel memory leak vulnerability (CNVD-2019-41267)

The Linux kernel is a computer operating system kernel written in C and assembly language, compliant with the POSIX standard, and distributed under the GNU General Public License. A memory leak vulnerability exists in the spigpioprobe function in drivers/spi/spi-gpio.c in Linux kernel 5.3.11 and...

Linux kernel memory leak vulnerability (CNVD-2019-41270)

The Linux kernel is a computer operating system kernel written in C and assembly language, compliant with the POSIX standard, and distributed under the GNU General Public License. A memory disclosure vulnerability exists in the ca8210probe function in drivers/net/ieee802154/ca8210.c in Linux kern...

CVE-2019-16948

An SSRF issue was discovered in Enghouse Web Chat 6.1.300.31. In any POST request, one can replace the port number at WebServiceLocation=http://localhost:8085/UCWebServices/ with a range of ports to determine what is visible on the internal network as opposed to what general web traffic would see...

Linux kernel memory leak vulnerability (CNVD-2019-40135)

The Linux kernel is a computer operating system kernel written in C and assembly language, compliant with the POSIX standard, and distributed under the GNU General Public License. A memory leak vulnerability exists in the dwc3pciprobe function in drivers/usb/dwc3/dwc3-pci.c in Linux kernel 5.3.9...

DEBIAN-CVE-2019-18813

A memory leak in the dwc3pciprobe function in drivers/usb/dwc3/dwc3-pci.c in the Linux kernel through 5.3.9 allows attackers to cause a denial of service memory consumption by triggering platformdeviceaddproperties failures, aka CID-9bbfceea12a8...

kernel: oob memory read in hso_probe in drivers/net/usb/hso.c

A flaw was found in the Linux kernel in the function hsoprobe which reads ifnum value from the USB device as an u8 and uses it without a length check to index an array, resulting in an OOB memory read in hsoprobe or hsogetconfigdata. An attacker with a forged USB device and physical access to a...

kernel: oob memory read in hso_probe in drivers/net/usb/hso.c

A flaw was found in the Linux kernel in the function hsoprobe which reads ifnum value from the USB device as an u8 and uses it without a length check to index an array, resulting in an OOB memory read in hsoprobe or hsogetconfigdata. An attacker with a forged USB device and physical access to a...

The vulnerabilities of the microprogramming software for Cisco Small Business routers of the 250, 350, 350X, 550X series, as well as the virtual machines used for setting up and controlling wired and wireless networks by Cisco FindIT Network Probe, allow attackers to increase their privileges.

The vulnerability of the microprogramming software for Cisco Small Business routers of the 250, 350, 350X, 550X series, as well as the Cisco FindIT Network Probe software for configuring and controlling wired and wireless networks, is related to the presence of a hard-coded pair of open/closed ke...

CVE-2019-10161

It was discovered that libvirtd would permit read-only clients to use the virDomainSaveImageGetXMLDesc API, specifying an arbitrary path which would be accessed with the permissions of the libvirtd process. An attacker with access to the libvirtd socket could use this to probe the existence of...