GSD-2022-1000281 ASoC: ops: Reject out of bounds values in snd_soc_put_volsw()

ASoC: ops: Reject out of bounds values in sndsocputvolsw This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.22 by commit...

GSD-2022-1000216 ASoC: ops: Reject out of bounds values in snd_soc_put_volsw_sx()

ASoC: ops: Reject out of bounds values in sndsocputvolswsx This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.99 by commit...

GSD-2022-1000215 ASoC: ops: Reject out of bounds values in snd_soc_put_volsw()

ASoC: ops: Reject out of bounds values in sndsocputvolsw This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.99 by commit...

GSD-2022-1000169 ASoC: ops: Reject out of bounds values in snd_soc_put_xr_sx()

ASoC: ops: Reject out of bounds values in sndsocputxrsx This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.178 by commit...

GSD-2022-1000168 ASoC: ops: Reject out of bounds values in snd_soc_put_volsw_sx()

ASoC: ops: Reject out of bounds values in sndsocputvolswsx This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.178 by commit...

GSD-2022-1000167 ASoC: ops: Reject out of bounds values in snd_soc_put_volsw()

ASoC: ops: Reject out of bounds values in sndsocputvolsw This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.178 by commit...

GSD-2022-1000137 ASoC: ops: Reject out of bounds values in snd_soc_put_xr_sx()

ASoC: ops: Reject out of bounds values in sndsocputxrsx This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.228 by commit...

GSD-2022-1000136 ASoC: ops: Reject out of bounds values in snd_soc_put_volsw_sx()

ASoC: ops: Reject out of bounds values in sndsocputvolswsx This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.228 by commit...

GSD-2022-1000135 ASoC: ops: Reject out of bounds values in snd_soc_put_volsw()

ASoC: ops: Reject out of bounds values in sndsocputvolsw This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.228 by commit...

GSD-2022-1000109 ASoC: ops: Reject out of bounds values in snd_soc_put_volsw()

ASoC: ops: Reject out of bounds values in sndsocputvolsw This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.265 by commit...

GSD-2022-1000090 ASoC: ops: Reject out of bounds values in snd_soc_put_xr_sx()

ASoC: ops: Reject out of bounds values in sndsocputxrsx This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.300 by commit...

GSD-2022-1000088 ASoC: ops: Reject out of bounds values in snd_soc_put_volsw()

ASoC: ops: Reject out of bounds values in sndsocputvolsw This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.300 by commit...

CVE-2021-4138

Improved Host header checks to reject requests not sent to a well-known local hostname or IP, or the server-specified hostname...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none...

CVE-2021-45098

An issue was discovered in Suricata before 6.0.4. It is possible to bypass/evade any HTTP-based signature by faking an RST TCP packet with random TCP options of the md5header from the client side. After the three-way handshake, it's possible to inject an RST ACK with a random TCP md5header option...

Clarify `mediaType` handling

Impact In the OCI Image Specification version 1.0.1 and prior, manifest and index documents are not self-describing and documents with a single digest could be interpreted as either a manifest or an index. Patches The Image Specification will be updated to recommend that both manifest and index...

nodejs: Incomplete validation of tls rejectUnauthorized parameter

A flaw was found in Node.js. If the Node.js HTTPS API is used incorrectly and "undefined" is passed for the "rejectUnauthorized" parameter, no error is returned, and the connections to servers with an expired certificate are accepted. The highest threat from this vulnerability is to integrity...

go-toolset:ol8 security update

go-toolset 1.15.14-2 - Revert to Go 1.15.14 - Related: rhbz1995126 - Reverts: rhbz1994087 1.15.15-1 - Rebase to Go 1.15.15 - Resolves: rhbz1994087 - Add reject leading zeros patch - Resolves: rhbz1994010...

nodejs: Incomplete validation of tls rejectUnauthorized parameter

A flaw was found in Node.js. If the Node.js HTTPS API is used incorrectly and "undefined" is passed for the "rejectUnauthorized" parameter, no error is returned, and the connections to servers with an expired certificate are accepted. The highest threat from this vulnerability is to integrity...

ALPINE-CVE-2021-22939

If the Node.js https API was used incorrectly and "undefined" was in passed for the "rejectUnauthorized" parameter, no error was returned and connections to servers with an expired certificate would have been accepted...