CVE-2023-20584

CVE-2023-20584 involves AMD IOMMU handling of certain address ranges with invalid DTEs. The issue can allow a local privileged attacker with a compromised Hypervisor to induce DTE faults and bypass SEV-SNP RMP checks, potentially compromising guest integrity. Connected advisories note affected ke...

PT-2024-11957 · Iommu +9 · Iommu +9

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue concerns the improper handling of certain special address ranges with invalid device table entries DTEs by the IOMMU. This may allow an attack...

PT-2024-5705 · Microsoft · Windows Kernel +1

Name of the Vulnerable Software and Affected Versions: Windows Kernel affected versions not specified Description: The issue is related to an elevation-of-privilege vulnerability in the Windows Kernel. It is associated with the failure to neutralize special elements. Exploitation of this issue ma...

kernel: mm: khugepaged: skip huge page collapse for special files

In the Linux kernel, the following vulnerability has been resolved: mm: khugepaged: skip huge page collapse for special files The read-only THP for filesystems will collapse THP for files opened readonly and mapped with VMEXEC. The intended usecase is to avoid TLB misses for large text segments...

The vulnerability of Rockwell Automation’s 5015-AENFTXT EtherNet/IP adapter software, related to insufficient validation of input data, allows a intruder to trigger a service failure.

The vulnerability of the microprogramming software for Rockwell Automation’s EtherNet/IP adapters model 5015-AENFTXT lies in insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to trigger a service failure by sending specially crafted PTP packets...

SUSE CVE-2024-41073

In the Linux kernel, the following vulnerability has been resolved: nvme: avoid double free special payload If a discard request needs to be retried, and that retry may fail before a new special payload is added, a double free will result. Clear the RQFSPECIALLOAD when the request is cleaned...

ROS-20240806-06

Vulnerability of ruby-find-library-file function of EMACS text editor is related to incorrect neutralization of special elements. neutralization of special elements. Exploitation of the vulnerability could allow an attacker to execute arbitrary code Vulnerability in the lib-src/etags.c file of th...

The vulnerability of the command-line interface (CLI) of the Junos OS Evolved routers from the PTX Series, ACX Series, and QFX Series allows a attacker to elevate their privileges to the root level.

The vulnerability of the command-line interface CLI of Junos OS Evolved routers from the PTX Series, ACX Series, and QFX Series exists due to the lack of measures taken to neutralize special elements used in operating system commands. Exploiting this vulnerability can allow an attacker to elevate...

The vulnerability of the microprogrammed software of AVTECH AVM1203 lies in the lack of measures taken to neutralize the special elements used in the operating system commands. This allows a intruder to gain full access to the device.

The vulnerability of the IP camera software of AVTECH AVM1203 is related to the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability can allow a remote attacker to gain full access to the device...

UBUNTU-CVE-2024-41123

REXML is an XML toolkit for Ruby. The REXML gem before 3.3.2 has some DoS vulnerabilities when it parses an XML that has many specific characters such as whitespace character, and . The REXML gem 3.3.3 or later include the patches to fix these vulnerabilities...

REXML 安全漏洞

REXML is a Ruby open source XML toolkit for Ruby. A security vulnerability exists in REXML versions prior to 3.3.2, which stems from a number of DoS vulnerabilities when parsing XML containing many special characters...

The vulnerability of the lib-src/etags.c file in the ctags text editor EMACS allows a hacker to execute arbitrary code.

The vulnerability of the lib-src/etags.c file in the ctags text editor EMACS is related to the improper elimination of special elements. Exploiting this vulnerability may allow an attacker to execute arbitrary code...

The vulnerability of Microprogrammed Software for FutureNet NXR, FutureNet VXR, and FutureNet WXR arises from the lack of measures taken to neutralize special elements used in the operating system’s command set. This allows attackers to gain unauthorized access to protected information, execute arbitrary commands, or cause service failures.

The vulnerability of the microprogrammed software of FutureNet NXR, FutureNet VXR, and FutureNet WXR is related to the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability can allow an attacker, operating remotely, to gain...

AZL-47997 CVE-2024-41073 affecting package kernel for versions less than 5.15.164.1-1

In the Linux kernel, the following vulnerability has been resolved: nvme: avoid double free special payload If a discard request needs to be retried, and that retry may fail before a new special payload is added, a double free will result. Clear the RQFSPECIALLOAD when the request is cleaned...

DEBIAN-CVE-2024-41073

In the Linux kernel, the following vulnerability has been resolved: nvme: avoid double free special payload If a discard request needs to be retried, and that retry may fail before a new special payload is added, a double free will result. Clear the RQFSPECIALLOAD when the request is cleaned...

UBUNTU-CVE-2024-41073

In the Linux kernel, the following vulnerability has been resolved: nvme: avoid double free special payload If a discard request needs to be retried, and that retry may fail before a new special payload is added, a double free will result. Clear the RQFSPECIALLOAD when the request is cleaned...

CVE-2024-41073

CVE-2024-41073 affects the Linux kernel NVMe driver: a discarded special payload could be double-freed on a retry unless RQF_SPECIAL_LOAD is cleared during request cleanup. The fix is to clear RQF_SPECIAL_LOAD when cleaning the request to prevent the double-free scenario; multiple advisories (ALM...

CVE-2024-41073 nvme: avoid double free special payload

In the Linux kernel, the following vulnerability has been resolved: nvme: avoid double free special payload If a discard request needs to be retried, and that retry may fail before a new special payload is added, a double free will result. Clear the RQFSPECIALLOAD when the request is cleaned...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a double release if a retry is required to discard a request and the retry fails before adding a new special...

VDA "Unregistered" due to special characters in 'BrowserName' property of published application

VDA might turn to "Unregistered" state when 'BrowserName' property of published application contains special characters, e.g. a pair of brackets...