protobuf-java: potential DoS in the parsing procedure for binary data

A flaw was found in protobuf-java. Google Protocol Buffer protobuf-java allows the interleaving of com.google.protobuf.UnknownFieldSet fields. By persuading a victim to open specially-crafted content, a remote attacker could cause a timeout in the ProtobufFuzzer function, resulting in a denial of...

PT-2022-6038 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions 5.15 through 5.19 before 5.19.2 Description: The issue is related to a heap-based buffer overflow in the Linux kernel's ksmbd subsystem, specifically in the set ntacl dacl function. This overflow is connected to the use ...

SUSE-SU-2022:2637-1 Security update for mokutil

This update for mokutil fixes the following issues: - Adds SBAT revocation support to mokutil. bsc1198458 New options added see manpage: - mokutil --sbat List all entries in SBAT. - mokutil --set-sbat-policy latest | previous | delete To set the SBAT acceptance policy. - mokutil...

mariadb: server crash at Field::set_default via specially crafted SQL statements

A flaw was found in MariaDB. The component, Field::setdefault, allows attackers to cause a denial of service DoS via specially crafted SQL statements, affecting availability...

Linux Kernel User Namespace Handler Root Access

The vulnerability of the nftseteleminit function in the net/netfilter/nftablesapi.c file of the User Namespace Handler component in the Linux operating system kernel is caused by a buffer overflow. Exploiting this vulnerability could allow a remote attacker to gain root access...

TCL LinkHub Mesh Wi-Fi buffer error vulnerability

TCL LinkHub Mesh Wi-Fi is a router from TCL Corporation.A buffer overflow vulnerability exists in TCL LinkHub Mesh Wi-Fi, which stems from a lack of proper validation of user-supplied data in the confsrv ucloudsetnodelocation function, and could be exploited by an attacker to execute arbitrary co...

TCL LinkHub Mesh Wi-Fi security vulnerability

TCL LinkHub Mesh Wi-Fi is a router from TCL. The TCL LinkHub Mesh Wi-Fi ucloudsetnodelocation feature is vulnerable to a stack buffer overflow vulnerability that can be exploited by attackers to cause a buffer overflow...

TCL LinkHub Mesh Wi-Fi buffer error vulnerability

TCL LinkHub Mesh Wi-Fi is a router from TCL. A buffer error vulnerability exists in TCL LinkHub Mesh Wi-Fi MS1G0001.0014 version, which stems from a stack-based buffer overflow vulnerability in the confsrv setmfrule function...

TCL LinkHub Mesh Wi-Fi buffer error vulnerability

TCL LinkHub Mesh Wi-Fi is a router from TCL. A buffer error vulnerability exists in TCL LinkHub Mesh Wi-Fi MS1G0001.0014 version, which stems from a stack-based buffer overflow vulnerability in the confsrv setmfrule function...

Robustel R1510 Set Sys Time Command Execution

The vulnerability of the setsystime function implementation in Robustel R1510 VPN routers lies in the lack of measures to neutralize the special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands by sending speciall...

PT-2022-33174

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.325 Description The issue is related to a data race between perf event set output and perf mmap close. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-32686

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.54 Description The issue is related to the netfilter component, specifically the nft set pipapo. It involves the release of elements in a clone from an abort path. The actual impact and attack plausibility...

PT-2022-32948

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v3.10 through v5.4.207 Description A data race issue exists between perf event set output and perf mmap close. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2022-32806

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.10 through 5.10.133 Description A data race issue exists between perf event set output and perf mmap close. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2022-33047

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v3.10 through v4.19.253 Description A data race issue exists between perf event set output and perf mmap close. The actual impact and attack plausibility have not yet been proven. This issue was introduced in version v3.1...

PT-2022-32820

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.132 Description The issue is related to a potential NULL dereference in the aspeed pinmux set mux function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kern...

PT-2022-32470

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.11 Description The issue is related to the netfilter component, specifically the nft set pipapo, where elements in a clone are not properly released from the abort path. This could potentially lead to...

PT-2022-37150

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow WRITE crash. Technical details about the crash include the function names dynapi set helper, dwg dynapi enti...

PT-2022-33119

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.290 Description A data race issue exists between perf event set output and perf mmap close. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prio...

PT-2022-32423

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.13 Description The issue is related to a potential NULL dereference in the aspeed pinmux set mux function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kerne...