GSD-2021-1000048 locking/qrwlock: Fix ordering in queued_write_lock_slowpath()

locking/qrwlock: Fix ordering in queuedwritelockslowpath This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.189 by commit...

UVI-2021-1000240 vsock/virtio: free queued packets when closing socket

vsock/virtio: free queued packets when closing socket This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.4 by commit...

PT-2021-28515

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 4.15 through 5.11.16 Description The issue is related to the ordering in queued write lock slowpath in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-28705

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.2 through v5.12.3 Description The issue concerns the handling of queued packets when closing a socket in the vsock/virtio component. It was introduced in version v5.2 and fixed in version v5.12.4. The actual impact and...

PT-2021-24524

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.115 Description: The issue concerns the ordering in queued write lock slowpath within the Linux Kernel. It was introduced in version v4.15 and fixed in version v5.4.115. The actual impact and attack...

WS-2021-0301

Linux/Kernel in versionsv5.12-rc1-dontus to v5.12.3 is vulnerable to free queued packets when closing sockety...

PT-2021-24518

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.33 Description: The issue is related to the ordering in queued write lock slowpath in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations: For versions pri...

PT-2021-24522

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.189 Description: The issue is related to the ordering in queued write lock slowpath in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kerne...

PT-2021-28512

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.33 Description The issue is related to the ordering in queued write lock slowpath in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-28516

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.189 Description The issue is related to the ordering in queued write lock slowpath in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations For versions prior...

PT-2021-24521

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 4.15 through 5.11.16 Description: The issue is related to the ordering in queued write lock slowpath in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

PT-2021-28518

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.115 Description The issue is related to the ordering in queued write lock slowpath in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-24821

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.37 Description: The issue concerns the handling of queued packets when closing a socket in the vsock/virtio component. It was introduced in version v5.2 and fixed in version v5.10.37. The actual impact and...

PT-2021-24711

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.2 through v5.12.3 Description The issue concerns the handling of queued packets when closing a socket in the vsock/virtio component. It was introduced in version v5.2 and fixed in version v5.12.4. The actual impact and...

PT-2021-8278

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the locking mechanism in the Linux kernel, specifically in the queued write lock slowpath function. A reader can acquire the lock without holding the wait lock,...

Silverstripe CMS Injection Vulnerability

Silverstripe CMS is an application from Silverstripe New Zealand. Empower powerful digital teams by creating a platform for digital change. A security vulnerability exists in Silverstripe CMS versions 3 and 4, which stems from a vulnerability in the symbiote/silverstripe-queuedjobs module that...

CVE-2021-27938

A vulnerability has been identified in the Silverstripe CMS 3 and 4 version of the symbiote/silverstripe-queuedjobs module. A Cross Site Scripting vulnerability allows an attacker to inject an arbitrary payload in the CreateQueuedJobTask dev task via a specially crafted URL...

CVE-2021-27938

A vulnerability has been identified in the Silverstripe CMS 3 and 4 version of the symbiote/silverstripe-queuedjobs module. A Cross Site Scripting vulnerability allows an attacker to inject an arbitrary payload in the CreateQueuedJobTask dev task via a specially crafted URL...

HTTP/2: flood using PING frames results in unbounded memory growth

A flaw was found in HTTP/2. Using PING frames and queuing of response PING ACK frames, a flood attack could occur resulting in unbounded memory growth. The highest threat from this vulnerability is to system availability...

HTTP/2: flood using HEADERS frames results in unbounded memory growth

A flaw was found in HTTP/2. Using HEADER frames with invalid HTTP headers and queuing of response RSTSTREAM frames, an attacker could cause a flood resulting in unbounded memory growth. The highest threat from this vulnerability is to system availability...