CVE-2021-46168

Spin v6.5.1 was discovered to contain an out-of-bounds write in lex at spinlex.c...

CVE-2021-46168

Spin v6.5.1 was discovered to contain an out-of-bounds write in lex at spinlex.c...

CVE-2021-46168

Spin v6.5.1 was discovered to contain an out-of-bounds write in lex at spinlex.c...

Out-of-bounds

Spin v6.5.1 was discovered to contain an out-of-bounds write in lex at spinlex.c...

UBUNTU-CVE-2021-46168

Spin v6.5.1 was discovered to contain an out-of-bounds write in lex at spinlex.c...

CVE-2021-46168

Spin v6.5.1 was discovered to contain an out-of-bounds write in lex at spinlex.c...

CVE-2021-46168

Spin v6.5.1 was discovered to contain an out-of-bounds write in lex at spinlex.c...

CVE-2021-46168

CVE-2021-46168 affects Spin v6.5.1, where an out-of-bounds write is triggered in the lex() function (spinlex.c). The vulnerability is evidenced across multiple sources (e.g., NVD, Red Hat, OSV, CVE records) with CVSS metrics indicating Moderate to High impact on availability locally, and no confi...

CVE-2021-46168

Spin v6.5.1 was discovered to contain an out-of-bounds write in lex at spinlex.c...

Spin buffer error vulnerability

Spin is an open source software verification tool . It is used for explicit state logic model checking. A security vulnerability exists in Spin that stems from an out-of-bounds write found to be included in spinlex.c's lex...

CVE-2021-46168: Out-of-bounds Write

Spin v6.5.1 was discovered to contain an out-of-bounds write in lex at spinlex.c...

PT-2022-12600

Name of the Vulnerable Software and Affected Versions Spin version 6.5.1 Description The issue is related to an out-of-bounds write in the lex function at spinlex.c. Recommendations For Spin version 6.5.1, at the moment, there is no information about a newer version that contains a fix for this...

PT-2025-8237

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A deadlock issue has been identified in the Linux kernel, specifically in the rtw joinbss event prehandle function. This occurs when two threads attempt to access the same lock,...

glibc security update

2.28-164.0.1 - Merge of RH patches for ol8-u5 beta release Review-exception: Routine merge - Provide glibc.pthread.mutexspincount tunable for pthread adaptive - spin mutex Orabug: 27982358. Reviewed-by: Qing Zhao - add Ampere emag to tunable cpu list Patrick McGehearty - add optimized memset for...

glibc security, bug fix, and enhancement update

2.28-164.0.1 - Merge of RH patches for ol8-u5 beta release Review-exception: Routine merge - Provide glibc.pthread.mutexspincount tunable for pthread adaptive - spin mutex Orabug: 27982358. Reviewed-by: Qing Zhao - add Ampere emag to tunable cpu list Patrick McGehearty - add optimized memset for...

CVE-2021-34713

A vulnerability in the Layer 2 punt code of Cisco IOS XR Software running on Cisco ASR 9000 Series Aggregation Services Routers could allow an unauthenticated, adjacent attacker to cause the affected line card to reboot. This vulnerability is due to incorrect handling of specific Ethernet frames...

PT-2021-4131

Name of the Vulnerable Software and Affected Versions Cisco IOS XR Software affected versions not specified Description A vulnerability in the Layer 2 punt code of Cisco IOS XR Software running on Cisco ASR 9000 Series Aggregation Services Routers could allow an unauthenticated, adjacent attacker...

alloc-cortex-m (>=0.3.0, <=0.3.2), alloc-fmt (>=0.1.0, <=0.2.0) +66 more potentially affected by CVE-2019-16137 via spin (>=0.3.5, <=0.4.10)

spin CARGO version =0.3.5, =0.3.0, =0.1.0, =0.1.0, =0.1.0, =0.1.1, =0.1.2, =0.1.3, =0.0.1, =0.2.0, =0.2.1, =0.1.0, =0.1.1, =0.3.0, =0.4.0 and more Source cves: CVE-2019-16137 Source advisory: OSV:GHSA-HV7X-F3PV-GPWR...

alloc-cortex-m (>=0.3.0, <=0.3.2), alloc-fmt (>=0.1.0, <=0.2.0) +66 more potentially affected by CVE-2019-16137 via spin (>=0.3.5, <=0.4.10)

spin CARGO version =0.3.5, =0.3.0, =0.1.0, =0.1.0, =0.1.0, =0.1.1, =0.1.2, =0.1.3, =0.0.1, =0.2.0, =0.2.1, =0.1.0, =0.1.1, =0.3.0, =0.4.0 and more Source cves: CVE-2019-16137 Source advisory: GHSA-HV7X-F3PV-GPWR...

Wrong memory orderings violates mutual exclusion in spin

Wrong memory orderings inside the RwLock implementation allow for two writers to acquire the lock at the same time. The drop implementation used Ordering::Relaxed, which allows the compiler or CPU to reorder a mutable access on the locked data after the lock has been yielded. Only users of the...