PT-2023-34935 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.11 Description: A memory leak issue has been identified, potentially related to the use of debugfs lookup in irqdomain.c. The actual impact and attack plausibility have not yet been proven. Recommendations:...

PT-2023-35178 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.90 Description: The issue is related to the btrfs file system, where a failure to write the log tree when syncing the log does not abort the transaction. This could potentially lead to security...

PT-2023-35050 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.8 Description: The issue concerns the axi chan handle err function, which lacks exception protection processing for vd. This could potentially lead to security vulnerabilities, although the actual impact an...

PT-2023-34952 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.11 Description: The issue is related to a kernel panic when probing an illegal position in the RISC-V architecture. The actual impact and attack plausibility have not yet been proven. Recommendations: For...

PT-2023-35106 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.93 Description: A potential double-free issue was identified. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to v5.15.93, update to...

PT-2023-34931 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.11 Description: A potential issue exists in the Linux Kernel, specifically in the get swap pages function, where the lack of cond resched calls may lead to problems. The actual impact and attack plausibilit...

PT-2023-35183 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.90 Description: A general protection fault issue was discovered in the nilfs btree insert function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2023-35045 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.8 Description: The issue is related to a null pointer dereference when the host dies, potentially leading to a security vulnerability. The actual impact and attack plausibility have not yet been proven...

PT-2023-34961 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.11 Description: The issue is related to the bpf and sockmap components in the Linux Kernel. It involves a check for any of tcp bpf prots when cloning a listener. The actual impact and attack plausibility ha...

PT-2023-35328 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.272 Description: The issue concerns the trace printk function, which is related to tracing functionality. The actual impact and potential for attack have not been proven yet. Recommendations: For versions...

PT-2023-35373 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.14.303 Description: The issue is related to an overflow before widen in the bitmap ip create function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2023-35358 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.14.305 Description: The issue is related to a double increment of client count in the dma chan get function. This problem was introduced in version v4.0 and is fixed in Linux Kernel version v4.14.305. The...

PT-2023-34938 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.11 Description: A memory leak issue was discovered, potentially affecting the security of the system. The issue is related to the use of debugfs lookup in hv balloon. The actual impact and attack plausibili...

CVE-2020-36661 Kong lua-multipart multipart.lua is_header redos

A vulnerability was found in Kong lua-multipart 0.5.8-1. It has been declared as problematic. This vulnerability affects the function isheader of the file src/multipart.lua. The manipulation leads to inefficient regular expression complexity. Upgrading to version 0.5.9-1 is able to address this...

PT-2023-4911

Name of the Vulnerable Software and Affected Versions libtiff version 4.4.0 Description The issue is related to an out-of-bounds write in the tiffcrop utility of the libtiff library, specifically in the files libtiff/tif unix.c:368, tools/tiffcrop.c:2903, and tools/tiffcrop.c:6778. This can be...

PT-2023-14986 · Dell · Wyse Management Suite

Name of the Vulnerable Software and Affected Versions: Wyse Management Suite versions 3.8 and below Description: The issue concerns improper access control, allowing a malicious admin user to disable or delete users under administration and unassigned admins for which the group admin is not...

PT-2023-6707 · D Link · D-Link N300 Wi-Fi Router Dir-605L

Name of the Vulnerable Software and Affected Versions: D-Link N300 WI-FI Router DIR-605L version 2.13B01 Description: The issue is related to a stack overflow in the D-Link N300 WI-FI Router DIR-605L, which can be triggered via the config.smtp email subject parameter at the "/goform/formSetEmail"...

PT-2023-16520 · Modoboa · Modoboa

Name of the Vulnerable Software and Affected Versions: modoboa/modoboa versions prior to 2.0.4 Description: The issue is related to an Authentication Bypass by Primary Weakness. There is no information provided about the estimated number of potentially affected devices worldwide or real-world...

PT-2023-14980 · Aleos · Aleos

Name of the Vulnerable Software and Affected Versions: ALEOS versions prior to 4.16 Description: The issue allows a user with valid credentials to reconfigure the device, exposing the ACEManager credentials on the pre-login status page. Recommendations: For versions prior to 4.16, update to versi...

CVE-2023-23626 Denial of service when feeding malformed size arguments in go-bitfield

go-bitfield is a simple bitfield package for the go language aiming to be more performant that the standard library. When feeding untrusted user input into the size parameter of NewBitfield and FromBytes functions, an attacker can trigger panics. This happen when the size is a not a multiple of 8...