DLA-3236-1 openexr - security update

Bulletin has no description...

PT-2022-23142 · WordPress · Wp Csv Exporter

Name of the Vulnerable Software and Affected Versions: WP CSV Exporter WordPress plugin versions prior to 1.3.7 Description: The issue arises from the WP CSV Exporter WordPress plugin's failure to properly escape fields when exporting data as CSV, leading to a CSV injection vulnerability...

PT-2022-27102 · Phpmyfaq · Phpmyfaq

Name of the Vulnerable Software and Affected Versions: phpMyFAQ versions prior to 3.1.9 Description: The issue is related to stored Cross-site Scripting XSS in the GitHub repository thorsten/phpmyfaq. This type of attack occurs when an application stores user input in a database or file and later...

DLA-3190-2 grub2 - security update

Bulletin has no description...

PT-2022-18466 · Secomea · Secomea Gatemanager

Name of the Vulnerable Software and Affected Versions: Secomea GateManager versions 9.4 through 9.7 Description: A vulnerability in the web server of Secomea GateManager allows a local user to impersonate as the previous user under some failed login conditions. Recommendations: For Secomea...

GSD-2022-1007883 net: use struct_group to copy ip/ipv6 header addresses

net: use structgroup to copy ip/ipv6 header addresses This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.80 by commit...

PT-2022-36316 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.156 Description: The issue is related to an alignment problem in the bpf prog test run skb function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2022-36604 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.9.333 Description: The issue concerns an attempt to access uninitialized memory in the Bluetooth L2CAP component. The actual impact and potential for attack have not been proven yet. Recommendations: For Linu...

PT-2022-36015 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.10 Description: The issue is related to the calculation of CQEs from the user visible value in io uring. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2022-36361 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.154 Description: The issue is related to a potential security vulnerability in the btrfs filesystem, specifically in the find parent nodes function during backref walking, which may cause an inode list lea...

PT-2022-36541 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.14.300 Description: The issue is related to a possible memory leak in the iio sysfs trig init function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2022-36057 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.9 Description: The issue is related to a wrong reg type conversion in the release reference function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2022-36154 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.80 Description: The issue is related to a null pointer dereference in the ftrace add mod function. The actual impact and attack plausibility have not yet been proven. Recommendations: For versions prior to...

PT-2022-36134 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.80 Description: A potential security issue exists due to inconsistent minimal MTU enforcement in macvlan. The actual impact and attack plausibility have not yet been proven. It was introduced in version...

PT-2022-36312 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.156 Description: A potential memory leak issue was identified in the siox device add function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

DLA-3233-1 leptonlib - security update

Bulletin has no description...

PT-2022-36124 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.80 Description: A use-after-free issue was found in the ntfs attr find function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

PT-2022-36051 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.14 through v6.0.8 Description: A memory leak issue was discovered in the ipc wwan dellink function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions v5.14...

PT-2022-36498 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.265 Description: A potential security issue has been identified in the ext4 file system, related to the ext4 da release space function. The actual impact and attack plausibility have not yet been proven...

PT-2022-36302 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.156 Description: A potential memory leak issue exists in the mISDN dsp element register function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...