153 matches found
Use-after-free in Linux kernel's net/sched: sch_qfq component
...
DEBIAN-CVE-2023-4921
A use-after-free vulnerability in the Linux kernel's net/sched: schqfq component can be exploited to achieve local privilege escalation. When the plug qdisc is used as a class of the qfq qdisc, sending network packets triggers use-after-free in qfqdequeue due to the incorrect .peek handler of...
Important: kernel
Issue Overview: An issue in "Zen 2" CPUs, under specific microarchitectural circumstances, may allow an attacker to potentially access sensitive information. CVE-2023-20593 An out-of-bounds write vulnerability in the Linux kernel's net/sched: schqfq component can be exploited to achieve local...
DEBIAN-CVE-2023-3611
An out-of-bounds write vulnerability in the Linux kernel's net/sched: schqfq component can be exploited to achieve local privilege escalation. The qfqchangeagg function in net/sched/schqfq.c allows an out-of-bounds write because lmax is updated according to packet sizes without bounds checks. We...
UBUNTU-CVE-2023-3611
An out-of-bounds write vulnerability in the Linux kernel's net/sched: schqfq component can be exploited to achieve local privilege escalation. The qfqchangeagg function in net/sched/schqfq.c allows an out-of-bounds write because lmax is updated according to packet sizes without bounds checks. We...
PT-2025-13367 · Linux +4 · Linux Kernel +4
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to the fixed version Description: A use-after-free issue has been identified in the Linux kernel, specifically in the sch taprio component. This issue occurs when a taprio qdisc is installed with an invalid TCA RAT...
crosby-on-eden.cumbria.sch.uk Cross Site Scripting vulnerability OBB-3217584
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
PT-2023-35013 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.9 Description: A potential issue exists in the Linux Kernel, specifically in the sch taprio component of the net/sched module. The problem is related to a possible use-after-free scenario. The actual impact...
DEBIAN-CVE-2022-47929
In the Linux kernel before 6.1.6, a NULL pointer dereference bug in the traffic control subsystem allows an unprivileged user to trigger a denial of service system crash via a crafted traffic control configuration that is set up with "tc qdisc" and "tc class" commands. This affects qdiscgraft in...
AZL-13050 CVE-2022-47929 affecting package kernel for versions less than 5.15.92.1-1
In the Linux kernel before 6.1.6, a NULL pointer dereference bug in the traffic control subsystem allows an unprivileged user to trigger a denial of service system crash via a crafted traffic control configuration that is set up with "tc qdisc" and "tc class" commands. This affects qdiscgraft in...
DEBIAN-CVE-2023-23454
cbqclassify in net/sched/schcbq.c in the Linux kernel through 6.1.4 allows attackers to cause a denial of service slab-out-of-bounds read because of type confusion non-negative numbers can sometimes indicate a TCACTSHOT condition rather than valid classification results...
redhill.bromley.sch.uk Cross Site Scripting vulnerability OBB-3094333
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
A flaw was found in the Linux kernel’s networking code. A use-after-free was found in the way the sch_sfb enqueue function used the socket buffer (SKB) cb field after the same SKB had been enqueued (and freed) into a child qdisc. This flaw allows a local unprivileged user to crash the system causing a denial of service.
...
Malicious code in sch-frontend-integration (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c8df0a30057039a07f47a29f52f2ae43e6fb46fb1e63983f39b4d26aa0f719ff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-5960 Malicious code in sch-frontend-integration (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c8df0a30057039a07f47a29f52f2ae43e6fb46fb1e63983f39b4d26aa0f719ff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
limehurst.oldham.sch.uk Improper Access Control vulnerability OBB-2416227
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
heathside.surrey.sch.uk Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1082500 Security Researcher securaji Helped patch 77 vulnerabilities Received 3 Coordinated Disclosure badges Received 4 recommendations , a holder of 3 badges for responsible and coordinated disclosure, found a security vulnerability affecting heathside.surrey.sch.uk...
astamsoccer.sch.id XSS vulnerability
Open Bug Bounty ID: OBB-206924 Description| Value ---|--- Affected Website:| astamsoccer.sch.id Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
CVE-2014-3346
The web framework in Cisco Transport Gateway for Smart Call Home aka TG-SCH or Transport Gateway Installation Software does not validate an unspecified parameter, which allows remote authenticated users to cause a denial of service service crash via a crafted string, aka Bug ID CSCuq31819...
Information disclosure
The web framework in Cisco Transport Gateway for Smart Call Home aka TG-SCH or Transport Gateway Installation Software does not validate an unspecified parameter, which allows remote authenticated users to cause a denial of service service crash via a crafted string, aka Bug ID CSCuq31819...