8475 matches found
GSD-2021-1001711 ext4: fix reserved space counter leakage
ext4: fix reserved space counter leakage This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.10 by commit...
UVI-2021-1001640 ext4: fix reserved space counter leakage
ext4: fix reserved space counter leakage This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.71 by commit...
GSD-2021-1001640 ext4: fix reserved space counter leakage
ext4: fix reserved space counter leakage This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.71 by commit...
GSD-2021-1001589 ext4: fix reserved space counter leakage
ext4: fix reserved space counter leakage This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.151 by commit...
UVI-2021-1001589 ext4: fix reserved space counter leakage
ext4: fix reserved space counter leakage This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.151 by commit...
PT-2021-26181
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 3.8 through 5.14.9 Description: A potential security issue exists due to a reserved space counter leakage in the ext4 filesystem. The actual impact and attack plausibility have not yet been proven. Recommendations: For...
CVE-2021-40729
Adobe Acrobat Reader DC version 21.007.20095 and earlier, 21.007.20096 and earlier, 20.004.30015 and earlier, and 17.011.30202 and earlier is affected by a out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass...
CVE-2021-26318
A timing and power-based side channel attack leveraging the x86 PREFETCH instructions on some AMD CPUs could potentially result in leaked kernel address space information...
UBUNTU-CVE-2021-26318
A timing and power-based side channel attack leveraging the x86 PREFETCH instructions on some AMD CPUs could potentially result in leaked kernel address space information...
CVE-2021-26318
CVE-2021-26318 corresponds to a timing and power-based side-channel issue on some AMD CPUs that could potentially leak kernel address space information via the x86 PREFETCH instruction. Affected software/hardware: all AMD CPUs (per AMD: Side-channels Related to the x86 PREFETCH Instruction). Root...
HTTP Request Smuggling
Overview llhttp is a set of Ruby bindings for llhttp. Affected versions of this package are vulnerable to HTTP Request Smuggling via llhttp. The HTTP parser accepts requests with a space SP right after the header name before the colon. Remediation There is no fixed version for llhttp. References ...
The vulnerability of the Internet Explorer browser, related to vulnerabilities in access control, allows attackers to bypass the ASLR (Address Space Layout Randomization) protection mechanism and execute arbitrary code.
The vulnerability of the Internet Explorer browser is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass the ASLR Address Space Layout Randomization protection mechanism by using a specially crafted website and executing arbitrary code...
Advanced Micro Devices Cpu 信息泄露漏洞
The Advanced Micro Devices Cpu Amd Cpu is an excellent central processor for Amd from Advanced Micro Devices, USA . The Advanced Micro Devices Cpu has a security vulnerability that can be exploited by an attacker to cause kernel address space information disclosure on some AMD cpus utilizing the...
CVE-2021-26318
A timing and power-based side channel attack leveraging the x86 PREFETCH instructions on some AMD CPUs could potentially result in leaked kernel address space information...
CVE-2021-41546
A vulnerability has been identified in RUGGEDCOM ROX MX5000 All versions V2.14.1, RUGGEDCOM ROX RX1400 All versions V2.14.1, RUGGEDCOM ROX RX1500 All versions V2.14.1, RUGGEDCOM ROX RX1501 All versions V2.14.1, RUGGEDCOM ROX RX1510 All versions V2.14.1, RUGGEDCOM ROX RX1511 All versions V2.14.1,...
Denial of service
A vulnerability has been identified in RUGGEDCOM ROX MX5000 All versions V2.14.1, RUGGEDCOM ROX RX1400 All versions V2.14.1, RUGGEDCOM ROX RX1500 All versions V2.14.1, RUGGEDCOM ROX RX1501 All versions V2.14.1, RUGGEDCOM ROX RX1510 All versions V2.14.1, RUGGEDCOM ROX RX1511 All versions V2.14.1,...
Siemens Ruggedcom Rox Mx5000 资源管理错误漏洞
ROX-based VPN endpoints and firewall appliances are used to connect devices that operate in harsh environments, such as electric utility substations and transportation control cabinets. A denial of service vulnerability exists in the Siemens RUGGEDCOM ROX devices, which originates from a dump cra...
Side-channels Related to the x86 PREFETCH Instruction
Bulletin ID: AMD-SB-1017 Potential Impact: Leaked kernel address space information Severity: Medium Summary Researchers from Graz University of Technology with CISPA Helmholtz Center for Information Security have demonstrated timing and power-based side channel attacks leveraging the x86 PREFETCH...