kernel: buffer overflow in mwifiex_cmd_802_11_ad_hoc_start function in drivers/net/wireless/marvell/mwifiex/join.c via a long SSID value

A flaw was found in the Linux kernel. The marvell wifi driver could allow a local attacker to execute arbitrary code via a long SSID value in mwifiexcmd80211adhocstart function. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

PT-2021-16201

Name of the Vulnerable Software and Affected Versions Simple Download Monitor WordPress plugin versions prior to 3.9.5 Description The issue arises from the failure to escape certain parameters before outputting them back in attributes, leading to Reflected Cross-Site Scripting issues. The...

PT-2021-23174 · Google · Tensorflow

Name of the Vulnerable Software and Affected Versions: TensorFlow versions prior to 2.7.0 TensorFlow versions 2.6.1 and earlier TensorFlow versions 2.5.2 and earlier TensorFlow versions 2.4.4 and earlier Description: The issue arises from a conditional statement within the tf.range kernel, where...

UBUNTU-CVE-2021-38502

Thunderbird ignored the configuration to require STARTTLS security for an SMTP connection. A MITM could perform a downgrade attack to intercept transmitted messages, or could take control of the authenticated session to execute SMTP commands chosen by the MITM. If an unprotected authentication...

curl: Server responses received before STARTTLS processed after TLS handshake

A flaw was found in curl. The flaw lies in how curl handles cached or pipelined responses that it receives from either a IMAP, POP3, SMTP or FTP server before the TLS upgrade using STARTTLS. In such a scenario curl even after upgrading to TLS would trust these cached responses treating them as...

bluez bug fix and enhancement update

The bluez packages contain the following utilities for use in Bluetooth applications: hcitool, hciattach, hciconfig, bluetoothd, l2ping, start scripts AlmaLinux, and pcmcia configuration files. Bug Fixes and Enhancements: Dell 8.4 BUG Bluetooth keyboard paired and connected but does not work on...

CLSA-2021-1635459163 Fix CVE(s): CVE-2021-22946, CVE-2021-22947

SECURITY UPDATE: Protocol downgrade required TLS bypassed - debian/patches/CVE-2021-22946-pre1.patch: separate FTPS from FTP over HTTPS proxy in lib/ftp.c, lib/urldata.h. - debian/patches/CVE-2021-22946-pre2.patch: support PREAUTH response code in lib/imap.c, lib/imap.h, tests/data/Makefile.inc,...

GSD-2021-1001879 blk-cgroup: blk_cgroup_bio_start() should use irq-safe operations on blkg->iostat_cpu

blk-cgroup: blkcgroupbiostart should use irq-safe operations on blkg-iostatcpu This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.15 by commi...

PT-2021-30349

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.15 Description The issue is related to a use-after-free UAF bug in the j1939 netdev start function, specifically affecting the rx kref of j1939 priv. The actual impact and attack plausibility have not yet...

PT-2021-30286

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.156 Description A use-after-free UAF issue exists in the j1939 netdev start function, specifically affecting the rx kref of j1939 priv. This issue was introduced in version v5.4 and is fixed in version...

PT-2021-26287

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.156 Description: The issue concerns a problem with stack handling in the idle kvm start guest function. It was introduced in version v5.2 and fixed in version v5.4.156. The actual impact and attack...

PT-2021-30344

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.15 Description The issue is related to the blk-cgroup, specifically the blk cgroup bio start function, which should use irq-safe operations on blkg-iostat cpu. The actual impact and attack plausibility have...

PT-2021-30310

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.76 Description The issue is related to a use-after-free UAF bug in the j1939 netdev start function, specifically affecting the rx kref of j1939 priv. This bug was introduced in version v5.4 and is fixed in...

PT-2021-30341

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.15 Description The issue concerns a problem with stack handling in the idle kvm start guest function. The actual impact and potential for attack have not been confirmed. Recommendations For Linux Kernel...

PT-2021-26310

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.76 Description: The issue concerns a problem with stack handling in the idle kvm start guest function. The actual impact and potential for attack have not been confirmed. Recommendations: For Linux Kernel...

PT-2021-26346

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.14.15 Description: The issue concerns a problem with stack handling in the idle kvm start guest function. The actual impact and potential for attack have not been confirmed. Recommendations: For Linux Kernel...

PT-2021-26349

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.14.15 Description: The issue is related to the blk-cgroup, specifically the blk cgroup bio start function, which should use irq-safe operations on blkg-iostat cpu. The actual impact and attack plausibility ha...

PT-2021-30282

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.156 Description The issue concerns a problem with stack handling in the idle kvm start guest function. The actual impact and potential for attack have not been confirmed. Recommendations For Linux Kernel...

PT-2021-26315

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.76 Description: A use-after-free UAF issue exists in the j1939 netdev start function, specifically affecting the rx kref of j1939 priv. The actual impact and attack plausibility have not yet been proven...

PT-2021-30305

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.76 Description The issue concerns the stack handling in the idle kvm start guest function. It was introduced in version v5.2 and fixed in version v5.10.76. The actual impact and attack plausibility have not...