PT-2023-34938 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.11 Description: A memory leak issue was discovered, potentially affecting the security of the system. The issue is related to the use of debugfs lookup in hv balloon. The actual impact and attack plausibili...

PT-2023-35147 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.91 Description: The issue is related to the pt core execute cmd function not using a spinlock. This could potentially lead to security vulnerabilities, although the actual impact and attack plausibility ha...

PT-2023-35164 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v3.6 through v5.15.90 Description: A memory leak issue exists in the highbank mc probe function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions v3.6 through...

PT-2023-35097 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.7 Description: The issue is related to the io uring/poll component. It was introduced in version v6.0 and fixed in version v6.1.7. The actual impact and attack plausibility have not yet been proven...

PT-2023-34928 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.11 Description: The issue is related to a potential null pointer dereference in the sof-audio component of the Linux Kernel. The problem arises when the swidget is not checked for NULL on sink failure in th...

PT-2023-34923 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.11 Description: The issue is related to out-of-bounds reads in the wifi brcmfmac driver. It is noted that the actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kerne...

PT-2023-35080 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.7 Description: The issue is related to a swiotlb bounce buffer leak in confidential VM, which may potentially lead to a security vulnerability. The actual impact and attack plausibility have not yet been...

PT-2023-35050 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.8 Description: The issue concerns the axi chan handle err function, which lacks exception protection processing for vd. This could potentially lead to security vulnerabilities, although the actual impact an...

PT-2023-35184 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.90 Description: The issue concerns the axi chan handle err function, where exception protection processing for vd is lacking. This is an automated identification of a potential security issue, with the...

PT-2023-35012 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.9 Description: The issue is related to race conditions in the l2tp tunnel register function. It was introduced in version v3.6 and fixed in version v6.1.9. The actual impact and attack plausibility have not...

PT-2023-35030 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v6.1.5 through v6.1.7 Description: The issue is related to the use of GFP KERNEL in an atomic context, which may potentially lead to security vulnerabilities. The actual impact and attack plausibility have not yet been...

PT-2023-35115 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.93 Description: The issue is related to an errant WARN ON ONCE in j1939 session deactivate. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

PT-2023-35104 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.93 Description: The issue is related to the use of a flexible array for memcpy destination, which may potentially lead to security vulnerabilities. The actual impact and attack plausibility have not yet be...

PT-2023-34952 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.11 Description: The issue is related to a kernel panic when probing an illegal position in the RISC-V architecture. The actual impact and attack plausibility have not yet been proven. Recommendations: For...

PT-2023-19315 · Owncloud · Owncloud Android App

Name of the Vulnerable Software and Affected Versions: ownCloud Android app version 2.21.1 ownCloud Android app versions 3.0 and earlier Description: The ownCloud Android app is affected by a SQL injection issue in FileContentProvider.kt, which can lead to information disclosure. Two databases,...

PT-2023-35093 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v6.1 through v6.1.6 Description: The issue is related to the headless Adreno GPU in the Linux Kernel. It was introduced in version v6.1 and fixed in version v6.1.7. The actual impact and attack plausibility have not yet...

CVE-2020-36661 Kong lua-multipart multipart.lua is_header redos

A vulnerability was found in Kong lua-multipart 0.5.8-1. It has been declared as problematic. This vulnerability affects the function isheader of the file src/multipart.lua. The manipulation leads to inefficient regular expression complexity. Upgrading to version 0.5.9-1 is able to address this...

PT-2023-4911

Name of the Vulnerable Software and Affected Versions libtiff version 4.4.0 Description The issue is related to an out-of-bounds write in the tiffcrop utility of the libtiff library, specifically in the files libtiff/tif unix.c:368, tools/tiffcrop.c:2903, and tools/tiffcrop.c:6778. This can be...

PT-2023-14986 · Dell · Wyse Management Suite

Name of the Vulnerable Software and Affected Versions: Wyse Management Suite versions 3.8 and below Description: The issue concerns improper access control, allowing a malicious admin user to disable or delete users under administration and unassigned admins for which the group admin is not...

PT-2023-6707 · D Link · D-Link N300 Wi-Fi Router Dir-605L

Name of the Vulnerable Software and Affected Versions: D-Link N300 WI-FI Router DIR-605L version 2.13B01 Description: The issue is related to a stack overflow in the D-Link N300 WI-FI Router DIR-605L, which can be triggered via the config.smtp email subject parameter at the "/goform/formSetEmail"...