SUSE CVE-2006-1173

Sendmail before 8.13.7 allows remote attackers to cause a denial of service via deeply nested, malformed multipart MIME messages that exhaust the stack during the recursive mime8to7 function for performing 8-bit to 7-bit conversion, which prevents Sendmail from delivering queued messages and migh...

SUSE CVE-2018-1999003

A Improper authorization vulnerability exists in Jenkins 2.132 and earlier, 2.121.1 and earlier in Queue.java that allows attackers with Overall/Read permission to cancel queued builds...

kernel: media: stk1160: If start stream fails, return buffers with VB2_BUF_STATE_QUEUED

In the Linux kernel, the following vulnerability has been resolved: media: stk1160: If start stream fails, return buffers with VB2BUFSTATEQUEUED If the callback 'startstreaming' fails, then all queued buffers in the driver should be returned with state 'VB2BUFSTATEQUEUED'. Currently, they are...

PT-2022-34677 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 2.6.39 through 5.4.212 Description: The issue is related to a potential security problem in the Linux Kernel, where it is assumed that a certain packet skb remains available after being added to a queue for a child...

A queued proposal will never be executed

Lines of code Vulnerability details All the relevant fields for a proposal is set in queue but executed is marked as true, even before the proposal is even queued. When it comes time to execute a proposal, this will be impossible since state will always return ProposalState.Executed. The conditio...

No rewards will be queued for users at intervals

Lines of code Vulnerability details Impact The 20% penalty that is taken from users who claim their rewards but choose not to stake in the AuraLocker is sent to the penaltyForwarder. Thereafter, it gets distributed to the locker to be queued but the issue in AuraLocker.queueNewRewards is that the...

Incorrect Authorization in Jenkins

A Improper authorization vulnerability exists in Jenkins 2.132 and earlier, 2.121.1 and earlier in Queue.java that allows attackers with Overall/Read permission to cancel queued builds...

GHSA-P265-XR98-3VMR Incorrect Authorization in Jenkins

A Improper authorization vulnerability exists in Jenkins 2.132 and earlier, 2.121.1 and earlier in Queue.java that allows attackers with Overall/Read permission to cancel queued builds...

PT-2022-30635

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.238 Description The issue arises when the start stream fails, and buffers are returned with VB2 BUF STATE QUEUED. The actual impact and attack plausibility have not yet been proven. Recommendations For Linu...

PT-2022-30148

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.33 Description The issue arises when the start stream fails, and buffers are returned with VB2 BUF STATE QUEUED. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2022-29838

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.19 Description The issue arises when the start stream fails, and buffers are returned with VB2 BUF STATE QUEUED. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2022-29531

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.2 Description The issue arises when the start stream fails, and buffers are returned with VB2 BUF STATE QUEUED. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2022-30378

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.110 Description The issue arises when the start stream fails, and buffers are returned with VB2 BUF STATE QUEUED. The actual impact and attack plausibility have not yet been proven. Recommendations For Linu...

PT-2022-30717

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.276 Description The issue arises when the start stream fails, and buffers are returned with VB2 BUF STATE QUEUED. The actual impact and attack plausibility have not yet been proven. Recommendations For Linu...

PT-2022-30532

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.189 Description The issue occurs when the start stream fails, and it returns buffers with VB2 BUF STATE QUEUED. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2021-27231

Name of the Vulnerable Software and Affected Versions xen/netback versions prior to v5.15.11 Description The issue is related to the xen/netback component, where it does not properly limit the number of packages that can be queued. This could potentially lead to security vulnerabilities, although...

GSD-2021-1000050 locking/qrwlock: Fix ordering in queued_write_lock_slowpath()

locking/qrwlock: Fix ordering in queuedwritelockslowpath This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.115 by commit...

GSD-2021-1000240 vsock/virtio: free queued packets when closing socket

vsock/virtio: free queued packets when closing socket This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.4 by commit...

GSD-2021-1000047 locking/qrwlock: Fix ordering in queued_write_lock_slowpath()

locking/qrwlock: Fix ordering in queuedwritelockslowpath This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.11.17 by commit...

GSD-2021-1000350 vsock/virtio: free queued packets when closing socket

vsock/virtio: free queued packets when closing socket This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.37 by commit...