SUSE-SU-2023:1874-1 Security update for wayland

This update for wayland fixes the following issues: - CVE-2021-3782: Fixed a reference-count overflow in libwayland-server SHM handling. bsc1190486...

SUSE-SU-2023:1873-1 Security update for wayland

This update for wayland fixes the following issues: - CVE-2021-3782: Fixed a reference-count overflow in libwayland-server SHM handling. bsc1190486...

SUSE-SU-2023:1860-1 Security update for wayland

This update for wayland fixes the following issues: - CVE-2021-3782: Fixed a reference-count overflow in libwayland-server SHM handling. bsc1190486...

SUSE CVE-2017-17563

An issue was discovered in Xen through 4.9.x allowing guest OS users to cause a denial of service host OS crash or gain host OS privileges by leveraging an incorrect mask for reference-count overflow checking in shadow mode...

Security Bulletin: ISC DHCP server for IBM i is vulnerable to a denial of service attack due to a memory leak and refererence count overflow (CVE-2022-2928, CVE-2022-2929)

Summary ISC DHCP server on IBM i is vulnerable to a denial of service attack due to a memory leak in the fqdnuniversedecode function and a reference count overflow in the addoption function as described in the vulnerability details section. IBM i has addressed the vulnerabilities in ISC DHCP serv...

CLSA-2022-1669241675 Fix CVE(s): CVE-2022-2928, CVE-2022-2929

SECURITY UPDATE: option refcount overflow - debian/patches/CVE-2022-2928.patch: fix work with reference counter 'refcount' - CVE-2022-2928 SECURITY UPDATE: DHCP memory leak - debian/patches/CVE-2022-2929.patch: free memory when incorrect 'fqdn' labels are used - CVE-2022-2929...

Ubuntu 16.04 ESM : Wayland vulnerability (USN-5614-2)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-5614-2 advisory. USN-5614-1 fixed a vulnerability in Wayland. This update provides the corresponding update for Ubuntu 16.04 ESM. Tenable has extracted the preceding description...

PT-2024-8221

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a reference count leak on the zero page in the Linux kernel's vfio/type1 component. This leak occurs because the page is handled as an invalid or reserved page...

UBUNTU-CVE-2021-3782

An internal reference count is held on the buffer pool, incremented every time a new buffer is created from the pool. The reference count is maintained as an int; on LP64 systems this can cause the reference count to overflow if the client creates a large number of wlshm buffer objects, or if it...

CVE-2021-3782

An internal reference count is held on the buffer pool, incremented every time a new buffer is created from the pool. The reference count is maintained as an int; on LP64 systems this can cause the reference count to overflow if the client creates a large number of wlshm buffer objects, or if it...

NewStart CGSL MAIN 4.06 : kernel Multiple Vulnerabilities (NS-SA-2022-0075)

The remote NewStart CGSL host, running version MAIN 4.06, has kernel packages installed that are affected by multiple vulnerabilities: - The offset2lib patch as used by the Linux Kernel contains a vulnerability, if RLIMITSTACK is set to RLIMINFINITY and 1 Gigabyte of memory is allocated the maxim...

PT-2022-6706

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS Evolved versions prior to 20.4R3-S1-EVO Juniper Networks Junos OS Evolved version 21.1 versions prior to 21.1R3-EVO Juniper Networks Junos OS Evolved version 21.2 versions prior to 21.2R3-EVO Juniper Networks Junos OS...

Mageia: Security Advisory (MGASA-2018-0410)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2021-8110 · Xwayland +9 · Xwayland +9

Name of the Vulnerable Software and Affected Versions: Wayland affected versions not specified Description: The issue is related to an integer overflow in the reference count of the buffer pool. This can occur when a large number of wl shm buffer objects are created or when the server is coerced...

SUSE: Security Advisory (SUSE-SU-2018:0810-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2019-1671)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FreeBSD : FreeBSD -- Reference count overflow in mqueue filesystem 32-bit compat (53b3474c-f680-11e9-a87f-a4badb2f4699)

System calls operating on file descriptors obtain a reference to relevant struct file which due to a programming error was not always put back, which in turn could be used to overflow the counter of affected struct file. Impact : A local user can use this flaw to obtain access to files,...

FreeBSD -- Reference count overflow in mqueue filesystem 32-bit compat

Problem Description: System calls operating on file descriptors obtain a reference to relevant struct file which due to a programming error was not always put back, which in turn could be used to overflow the counter of affected struct file. Impact: A local user can use this flaw to obtain access...

FreeBSD : FreeBSD -- Reference count overflow in mqueue filesystem (deb6e164-b30b-11e9-a87f-a4badb2f4699)

System calls operating on file descriptors obtain a reference to relevant struct file which due to a programming error was not always put back, which in turn could be used to overflow the counter of affected struct file. Impact : A local user can use this flaw to obtain access to files,...

CVE-2019-5603

In FreeBSD 12.0-STABLE before r350261, 12.0-RELEASE before 12.0-RELEASE-p8, 11.3-STABLE before r350263, 11.3-RELEASE before 11.3-RELEASE-p1, and 11.2-RELEASE before 11.2-RELEASE-p12, system calls operating on file descriptors as part of mqueuefs did not properly release the reference allowing a...