EulerOS 2.0 SP8 : kernel (EulerOS-SA-2021-1983)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in the Linux kernel before 5.11.7. usbipsockfdstore in drivers/usb/usbip/stubdev.c allows attackers to cause a denial of...

CVE-2021-28687

HVM soft-reset crashes toolstack libxl requires all data structures passed across its public interface to be initialized before use and disposed of afterwards by calling a specific set of functions. Many internal data structures also require this initialize / dispose discipline, but not all of...

ALPINE-CVE-2021-28687

HVM soft-reset crashes toolstack libxl requires all data structures passed across its public interface to be initialized before use and disposed of afterwards by calling a specific set of functions. Many internal data structures also require this initialize / dispose discipline, but not all of...

CVE-2021-28687

HVM soft-reset crashes toolstack libxl requires all data structures passed across its public interface to be initialized before use and disposed of afterwards by calling a specific set of functions. Many internal data structures also require this initialize / dispose discipline, but not all of...

DEBIAN-CVE-2021-28687

HVM soft-reset crashes toolstack libxl requires all data structures passed across its public interface to be initialized before use and disposed of afterwards by calling a specific set of functions. Many internal data structures also require this initialize / dispose discipline, but not all of...

CVE-2021-28687

HVM soft-reset crashes toolstack libxl requires all data structures passed across its public interface to be initialized before use and disposed of afterwards by calling a specific set of functions. Many internal data structures also require this initialize / dispose discipline, but not all of...

Design/Logic Flaw

HVM soft-reset crashes toolstack libxl requires all data structures passed across its public interface to be initialized before use and disposed of afterwards by calling a specific set of functions. Many internal data structures also require this initialize / dispose discipline, but not all of...

CVE-2021-28687

HVM soft-reset crashes toolstack libxl requires all data structures passed across its public interface to be initialized before use and disposed of afterwards by calling a specific set of functions. Many internal data structures also require this initialize / dispose discipline, but not all of...

CVE-2021-28687

CVE-2021-28687 concerns Xen hypervisor in HVM domains. The issue arises from a path where the soft-reset feature does not initialize the libxl__domain_suspend_state structure, causing an assert when the guest initiates a soft reboot. This leads to crashing of the process monitoring the guest. Imp...

CVE-2021-28687

HVM soft-reset crashes toolstack libxl requires all data structures passed across its public interface to be initialized before use and disposed of afterwards by calling a specific set of functions. Many internal data structures also require this initialize / dispose discipline, but not all of...

CVE-2021-28687

HVM soft-reset crashes toolstack libxl requires all data structures passed across its public interface to be initialized before use and disposed of afterwards by calling a specific set of functions. Many internal data structures also require this initialize / dispose discipline, but not all of...

PT-2021-8255 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a soft lookup in the subflow error report function of the Linux kernel's mptcp component. This can cause a soft lockup when the function tries to acquire the...

SQL Injection Vulnerability in BuildingEasy™, a Comprehensive Management Information System of Shanghai Jinhui Software Co.

Shanghai Jinhui Software Co., Ltd. is a double-soft certified enterprise and high-tech enterprise recognized by Shanghai. A SQL injection vulnerability exists in BuildingEasy™, a comprehensive management information system of Shanghai Jinhui Software Co. An attacker can exploit this vulnerability...

Shenzhen Edmansi Technology Co., Ltd. soft Xietong there are information leakage vulnerabilities

SoftAssociate is a set of association office management software customized and developed specifically for software industry associations. Shenzhen Edmansi Technology Co., Ltd. soft Xietong there is an information leakage vulnerability, attackers can use the vulnerability to obtain sensitive...

Command Execution Vulnerability in Soft Rainbow OA Office Platform

Ltd. has been committed to providing all-round solutions, including products, consulting, development, engineering and services, for the government, enterprises and institutions, especially for the domestic large and medium-sized financial enterprises to manage informationization. A command...

SUSE SLES15 Security Update : xen (SUSE-SU-2021:1460-1)

This update for xen fixes the following issues : CVE-2020-28368: Intel RAPL sidechannel attack aka PLATYPUS attack bsc1178591, XSA-351 CVE-2021-3308: IRQ vector leak on x86 bsc1181254, XSA-360 CVE-2021-28687: HVM soft-reset crashes toolstack bsc1183072, XSA-368 L3: conring size for XEN HV's with...

SUSE-SU-2021:1460-1 Security update for xen

This update for xen fixes the following issues: - CVE-2020-28368: Intel RAPL sidechannel attack aka PLATYPUS attack bsc1178591, XSA-351 - CVE-2021-3308: IRQ vector leak on x86 bsc1181254, XSA-360 - CVE-2021-28687: HVM soft-reset crashes toolstack bsc1183072, XSA-368 - L3: conring size for XEN HV'...

`aes-soft` has been merged into the `aes` crate

Please use the aes crate going forward. The new repository location is at: AES-NI is now autodetected at runtime on i686/x86-64 platforms. If AES-NI is not present, the aes crate will fallback to a constant-time portable software implementation. To force the use of a constant-time portable...

RUSTSEC-2021-0060 `aes-soft` has been merged into the `aes` crate

Please use the aes crate going forward. The new repository location is at: AES-NI is now autodetected at runtime on i686/x86-64 platforms. If AES-NI is not present, the aes crate will fallback to a constant-time portable software implementation. To force the use of a constant-time portable...

Sipwise C5 NGCP CSC Cross Site Request Forgery

Sipwise C5 NGCP CSC CSRF Click2Dial Exploit Vendor: Sipwise GmbH Product web page: https://www.sipwise.com Affected version: =CEm39.3.1 NGCP wwwadmin version 3.6.7 Summary: Sipwise C5 also known as NGCP - the Next Generation Communication Platform is a SIP-based Open Source Class 5 VoIP soft-swit...