PT-2021-26502

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.75 Description The issue is related to a shift-out-of-bounds error with byte size cells in nvmem. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel version...

PT-2021-30619

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15 Description The issue is related to a shift-out-of-bounds error with byte size cells in nvmem. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2021-30379

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.4.290 Description The issue is related to a shift-out-of-bounds error in the nvmem module, which may potentially lead to security vulnerabilities. The actual impact and attack plausibility have not yet been...

PT-2021-30397

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.288 Description The issue is related to a shift-out-of-bounds error in the nvmem module, which may potentially lead to security vulnerabilities. The actual impact and attack plausibility have not yet been...

PT-2021-30463

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.155 Description The issue is related to a shift-out-of-bounds error in the nvmem module, which may potentially lead to security vulnerabilities. The actual impact and attack plausibility have not yet been...

PT-2021-26402

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.288 Description The issue is related to a shift-out-of-bounds error with byte size cells in nvmem. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel version...

PT-2021-30497

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.75 Description The issue is related to a shift-out-of-bounds error in the nvmem module, which may potentially lead to security vulnerabilities. The actual impact and attack plausibility have not yet been...

PT-2021-26554

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.14 Description The issue is related to a shift-out-of-bounds error in the nvmem module, which may potentially lead to security vulnerabilities. The actual impact and attack plausibility have not yet been...

kernel: Overlayfs in the Linux kernel and shiftfs not restoring original value on error leading to a refcount underflow

A flaw was found in the Linux kernel. In Overlayfs, vma-vmfile was replaced in the mmap handlers and, on errors, the original value is not restored. A local attacker with special user privilege or root can cause a kernel internal information leak. The highest threat from this vulnerability is to...

EulerOS 2.0 SP3 : OpenEXR (EulerOS-SA-2021-2600)

According to the versions of the OpenEXR package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw found in function dataWindowForTile of IlmImf/ImfTiledMisc.cpp. An attacker who is able to submit a crafted file to be processed by OpenE...

PT-2024-11472

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.15.0-rc3+ Description The issue arises when a cell has 'nbits' equal to a multiple of BITS PER BYTE. The logic p &= GENMASKcell-nbits%BITS PER BYTE - 1, 0 becomes undefined behavior because nbits modulo BITS PE...

grok:grk_decompress_fuzzer: Use-of-uninitialized-value in unsigned long grk::N_SSE4::vscheduler<grk::N_SSE4::DecompressDcShiftIrrev>

Project: https://github.com/GrokImageCompression/grok.git https://github.com/GrokImageCompression/grok-test-data.git Detailed Report: https://oss-fuzz.com/testcase?key=4578834326880256 Project: grok Fuzzing Engine: libFuzzer Fuzz Target: grkdecompressfuzzer Job Type: libfuzzermsangrok Platform Id...

EulerOS 2.0 SP5 : OpenEXR (EulerOS-SA-2021-2514)

According to the versions of the OpenEXR package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw found in function dataWindowForTile of IlmImf/ImfTiledMisc.cpp. An attacker who is able to submit a crafted file to be processed by OpenE...

Huawei EulerOS: Security Advisory for OpenEXR (EulerOS-SA-2021-2477)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Red Hat OpenShift 安全漏洞

Red Hat OpenShift is a Platform-as-a-Service PaaS cloud computing platform from Red Hat, Inc. that supports building, testing, deploying and running applications. A security vulnerability exists in Red Hat OpenShift Serverless, which is due to an incomplete fix for other Red Hat vulnerabilities...

Security at Scale in the Open-Source Supply Chain

“We’ve all heard of paying it forward, but this is ridiculous!” That’s probably what most of us think when one of our partners or vendors inadvertently leaves an open door into our shared supply-chain network; an attacker can enter at any time. Well, we probably think in slightly more...

ROS-2-2240

2.2240 Multiple vulnerabilities in libwebp 1. Vulnerability description: CVE-2020-36332 A vulnerability in the libwebp library for encoding and decoding WebP images, is related to improper control of internal resource consumption. Exploitation of the vulnerability could allow an attacker acting...

OESA-2021-1327 leptonica security update

The library supports many operations that are useful on Document images Natural images Fundamental image processing and image analysis operations Rasterop aka bitblt Affine transforms scaling, translation, rotation, shear on images of arbitrary pixel depth Projective and bi-linear transforms Bina...

openSUSE 15 Security Update : openexr (openSUSE-SU-2021:1198-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:1198-1 advisory. - A flaw found in function dataWindowForTile of IlmImf/ImfTiledMisc.cpp. An attacker who is able to submit a crafted file to be processed b...

openSUSE: Security Advisory for openexr (openSUSE-SU-2021:1198-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...