GSD-2022-1003252 f2fs: fix to do sanity check on block address in f2fs_do_zero_range()

f2fs: fix to do sanity check on block address in f2fsdozerorange This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.46 by commit...

GSD-2022-1003111 drm/plane: Move range check for format_count earlier

drm/plane: Move range check for formatcount earlier This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.14 by commit...

GSD-2022-1002821 drm/plane: Move range check for format_count earlier

drm/plane: Move range check for formatcount earlier This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.3 by commit...

PT-2022-31965

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.198 Description The issue concerns a lack of sanity check on block address in the f2fs do zero range function. This could potentially lead to security vulnerabilities, although the actual impact and attack...

PT-2022-32051

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.198 Description The issue is related to a range check for format count in the drm/plane component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel version...

PT-2022-31770

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.121 Description The issue concerns a sanity check on block address in the f2fs do zero range function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-31885

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.121 Description The issue is related to a range check for format count in the drm/plane component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versio...

PT-2022-31649

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.46 Description The issue is related to a range check for format count in the drm/plane component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel version...

PT-2022-31213

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.14 Description The issue concerns a sanity check on block address in the f2fs do zero range function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-31274

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.14 Description A potential deadlock issue was identified in the blk ia range sysfs show function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel version...

PT-2022-31374

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.14 Description The issue is related to a range check for format count in the drm/plane component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel version...

PT-2022-30932

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.16 through v5.18.2 Description A potential deadlock issue was identified in the blk ia range sysfs show function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-30877

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.3 Description The issue concerns a sanity check on block address in the f2fs do zero range function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-31515

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.46 Description The issue concerns a sanity check on block address in the f2fs do zero range function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

curl security vulnerabilities

curl is a tool for transferring data from or to a server. A security vulnerability exists in curl versions 7.69.0 through 7.83.1, which stems from the fact that curl can accidentally inflate the permissions of a target file during a rename operation...

Zulip security vulnerabilities

Zulip is a powerful open source group chat application from the Zulip team. Used to combine the immediacy of real-time chat with the productivity benefits of threaded conversations. A logic error vulnerability exists in Zulip versions 2.1.0 through 5.2, which originates when the server incorrectl...

CVE-2022-23056

In ERPNext, versions v13.0.0-beta.13 through v13.30.0 are vulnerable to Stored XSS at the Patient History page which allows a low privilege user to conduct an account takeover attack...

PT-2022-15837 · Unknown · Openlibrary

Name of the Vulnerable Software and Affected Versions: openlibrary versions deploy-2016-07-0 through deploy-2021-12-22 Description: The issue is related to Reflected XSS. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where...

Habitatica input validation vulnerability

habitica is an open-source habit-forming program open-sourced by HabitRPG USA. An input validation error vulnerability exists in habitica versions v4.119.0 through v4.232.2. An attacker exploits this vulnerability to open redirects via the login page...

PT-2022-3088 · Jtekt · Jtekt Toyopuc Plcs

Name of the Vulnerable Software and Affected Versions: JTEKT TOYOPUC PLCs through 2022-04-29 Description: The issue is related to the mishandling of authentication in JTEKT TOYOPUC PLCs. They utilize the CMPLink/TCP protocol, which is configurable on ports 1024-65534 on either TCP or UDP, for...