CVE-2021-43957: Bypass for CVE-2020-29446 (Local file disclosure / path traversal within WEB-INF)

Affected versions of Atlassian Fisheye & Crucible allowed remote attackers to browse local files via an Insecure Direct Object References IDOR vulnerability in the WEB-INF directory and bypass the fix for CVE-2020-29446 due to a lack of url decoding. The affected versions are before version 4.8.9...

SUSE-SU-2022:0726-1 Security update for mariadb

This update for mariadb fixes the following issues: - Update to 10.4.24 bsc1196016: 10.4.24: CVE-2021-46665 CVE-2021-46664 CVE-2021-46661 CVE-2021-46668 CVE-2021-46663 10.4.23: CVE-2022-24052 CVE-2022-24051 CVE-2022-24050 CVE-2022-24048 CVE-2021-46659, bsc1195339 - The following issues have alrea...

UBUNTU-CVE-2021-38577

REJECT DO NOT USE THIS CANDIDATE NUMBER. Reason: This CVE has been rejected as it was incorrectly assigned. All references and descriptions in this candidate have been removed to prevent accidental usage...

GHSA-J34V-3552-5R7J Multiple security issues in Pomerium's embedded envoy

Envoy, which Pomerium is based on, has issued multiple CVEs impacting stability and security. Though Pomerium may not be vulnerable to all of the issues, it is recommended that all users upgrade to Pomerium v0.16.4 as soon as possible to minimize risk. Impact - Possible DoS or crash - Resources...

Moderate: Red Hat Security Advisory: OpenShift Logging bug fix and security update (5.3.5)

OpenShift Logging bug fix and security update 5.3.5 Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the...

The vulnerability of the software for configuring and diagnosing processes in ToolboxST arises from improper restrictions on XML references to external objects, which allows attackers to disclose sensitive information.

The vulnerability of the software for configuring and diagnosing processes in ToolboxST is related to incorrect restrictions on XML references to external objects. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information...

GSD-2022-1000683 moxart: fix potential use-after-free on remove path

moxart: fix potential use-after-free on remove path This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.9 by commit...

GSD-2022-1000671 net: ieee802154: ca8210: Stop leaking skb's

net: ieee802154: ca8210: Stop leaking skb's This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.8 by commit...

GSD-2022-1000664 IB/hfi1: Fix AIP early init panic

IB/hfi1: Fix AIP early init panic This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.8 by commit 1899c3cad265c4583658aed5293d02e8af84276b, it...

GSD-2022-1000660 mm/kmemleak: avoid scanning potential huge holes

mm/kmemleak: avoid scanning potential huge holes This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.8 by commit...

GSD-2022-1000651 ASoC: ops: Reject out of bounds values in snd_soc_put_volsw()

ASoC: ops: Reject out of bounds values in sndsocputvolsw This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.8 by commit...

GSD-2022-1000646 rtnetlink: make sure to refresh master_dev/m_ops in __rtnl_newlink()

rtnetlink: make sure to refresh masterdev/mops in rtnlnewlink This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.6 by commit...

GSD-2022-1000644 net: amd-xgbe: Fix skb data length underflow

net: amd-xgbe: Fix skb data length underflow This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.6 by commit...

GSD-2022-1000629 powerpc/perf: Fix power_pmu_disable to call clear_pmi_irq_pending only if PMI is pending

powerpc/perf: Fix powerpmudisable to call clearpmiirqpending only if PMI is pending This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.5 by...

GSD-2022-1000628 block: fix memory leak in disk_register_independent_access_ranges

block: fix memory leak in diskregisterindependentaccessranges This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.5 by commit...

GSD-2022-1000627 phylib: fix potential use-after-free

phylib: fix potential use-after-free This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.5 by commit cb2fab10fc5e7a3aa1bb0a68a3abdcf3e37852af,...

GSD-2022-1000619 i40e: Fix queues reservation for XDP

i40e: Fix queues reservation for XDP This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.5 by commit 4b3aa858268b7b9aeef02e5f9c4cd8f8fac101c8,...

GSD-2022-1000616 USB: core: Fix hang in usb_kill_urb by adding memory barriers

USB: core: Fix hang in usbkillurb by adding memory barriers This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.5 by commit...

GSD-2022-1000615 usb: gadget: f_sourcesink: Fix isoc transfer for USB_SPEED_SUPER_PLUS

usb: gadget: fsourcesink: Fix isoc transfer for USBSPEEDSUPERPLUS This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.5 by commit...

GSD-2022-1000611 KVM: x86: Free kvm_cpuid_entry2 array on post-KVM_RUN KVM_SET_CPUID{,2}

KVM: x86: Free kvmcpuidentry2 array on post-KVMRUN KVMSETCPUID,2 This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.5 by commit...