Microsoft.OpenAPI: Circular schema references may terminate OpenAPI parsing

Impact A small OpenAPI document containing a circular schema reference can cause process termination through stack overflow in Microsoft.OpenApi. The issue affects OpenAPI document parsing through public OpenAPI.NET reader APIs and has been confirmed across both JSON and YAML reader paths. Affect...

kernel: ring-buffer: Validate the persistent meta data subbuf array

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Validate the persistent meta data subbuf array The meta data for a mapped ring buffer contains an array of indexes of all the subbuffers. The first entry is the reader page, and the rest of the entries lay out the...

CVE-2022-4572 UBI Reader UBIFS File output.py ubireader_extract_files path traversal

A vulnerability, which was classified as problematic, has been found in UBI Reader up to 0.8.0. Affected by this issue is the function ubireaderextractfiles of the file ubireader/ubifs/output.py of the component UBIFS File Handler. The manipulation leads to path traversal. The attack may be...

GNU Serveez Information Disclosure Vulnerability

GNU Serveez is a server framework. An information disclosure vulnerability exists in the httpcgiwrite function in http-cgi.c in GNU Serveez 0.2.2 and earlier. An attacker can exploit this vulnerability to obtain information by sending an HTTP POST request to the /cgi-bin/reader URI...