4722 matches found
CVE-2023-3456
Vulnerability of kernel raw address leakage in the hang detector module. Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2023-3456
CVE-2023-3456 describes a vulnerability where the kernel raw address leakage occurs in the hang detector module, potentially impacting service confidentiality. The CVE is echoed across multiple sources in the connected set, including Red Hat, NVD, and regional advisories, with Huawei HarmonyOS an...
CVE-2023-3456: Improper Input Validation
Vulnerability of kernel raw address leakage in the hang detector module. Successful exploitation of this vulnerability may affect service confidentiality...
Invision Power Services, Inc.: XSS with Visual Language Editor tags
A security vulnerability allowed an attacker to execute arbitrary code on a website by exploiting the Visual Language Editor tags. By injecting malicious code into a post or comment, the attacker could gain full control of the website and its data. The vulnerability has been patched...
KeePass Password Unencrypted Storage
The vulnerability of the password input field for the KeePass password manager’s administrator password storage is related to the storage of user data in an unencrypted form. Exploiting this vulnerability could allow a malicious actor to retrieve the master password in its raw form...
GHSA-87MF-9WG6-PPF8 Ouroboros is Unsound
In 0.15.0 and prior, Ouroboros works internally by creating a struct where all uses of 'this are replaced by 'static. However, a recent addition to Miri checks that references passed to functions are valid during the entire execution of the function, even when those references are passed inside a...
RUSTSEC-2023-0042 Ouroboros is Unsound
Summary Ouroboros has a soundness problem, but a fix has been implemented in 0.16.0. More details: In 0.15.0, Ouroboros works internally by creating a struct where all uses of 'this are replaced by 'static. However, a recent addition to Miri checks that references passed to functions are valid...
Ouroboros is Unsound
Summary Ouroboros has a soundness problem, but a fix has been implemented in 0.16.0. More details: In 0.15.0, Ouroboros works internally by creating a struct where all uses of 'this are replaced by 'static. However, a recent addition to Miri checks that references passed to functions are valid...
PT-2023-24736 · Moov · Signedxml
Name of the Vulnerable Software and Affected Versions: Moov signedxml versions 1.0.0 and earlier Description: The issue arises from the difference in output when parsing raw XML versus canonicalized XML, allowing an attacker to bypass signature validation through a Signature Wrapping attack. This...
Image Builder security, bug fix, and enhancement update
cockpit-composer 45-1.0.1 - Make per page documentation links point to Oracle Linux Orabug: 32013095 45-1 - New upstream release 44-1 - New upstream release 43-1 - New upstream release 42-1 - New upstream release 40-1 - New upstream release 39-1 - New upstream release 38-1 - New upstream release...
kernel: regmap: spi: Reserve space for register address/padding
A flaw was found in the Linux kernel's Serial Peripheral Interface SPI regmap subsystem. The calculation of maximum transfer limits fails to account for the overhead of register addresses and padding during raw read and write operations. A local user could exploit this flaw to transmit messages...
UBUNTU-CVE-2023-1729
A flaw was found in LibRaw. A heap-buffer-overflow in raw2imageex caused by a maliciously crafted file may lead to an application crash...
Fedora: Security Advisory for LibRaw (FEDORA-2023-fb8f800cb7)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 37 Update: LibRaw-0.20.2-8.fc37
LibRaw is a library for reading RAW files obtained from digital photo cameras CRW/CR2, NEF, RAF, DNG, and others. LibRaw is based on the source codes of the dcraw utility, where part of drawbacks have already been eliminated and part will be fixed in future...
[SECURITY] Fedora 38 Update: LibRaw-0.21.1-4.fc38
LibRaw is a library for reading RAW files obtained from digital photo cameras CRW/CR2, NEF, RAF, DNG, and others. LibRaw is based on the source codes of the dcraw utility, where part of drawbacks have already been eliminated and part will be fixed in future...
kernel: raw: Fix a data-race around sysctl_raw_l3mdev_accept.
A flaw was found in the RAW-IP module in the Linux kernel. A race condition can occur when reading the sysctlrawl3mdevaccept resource due to a missing lock, potentially impacting system stability and resulting in a denial of service...
kernel: regmap: spi: Reserve space for register address/padding
A flaw was found in the Linux kernel's Serial Peripheral Interface SPI regmap subsystem. The calculation of maximum transfer limits fails to account for the overhead of register addresses and padding during raw read and write operations. A local user could exploit this flaw to transmit messages...
kernel: NULL pointer dereference in rawv6_push_pending_frames
A NULL pointer dereference flaw was found in rawv6pushpendingframes in net/ipv6/raw.c in the network subcomponent in the Linux kernel. This flaw causes the system to crash...
PT-2025-8564
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A data-race issue exists around sysctl raw l3mdev accept. The value of sysctl raw l3mdev accept can be changed concurrently while it is being read, which may lead to unpredictable...
UBUNTU-CVE-2023-1836
A cross-site scripting issue has been discovered in GitLab affecting all versions starting from 5.1 before 15.9.6, all versions starting from 15.10 before 15.10.5, all versions starting from 15.11 before 15.11.1. When viewing an XML file in a repository in "raw" mode, it can be made to render as...