3641 matches found
Malicious code in allocation-stats (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-6588 Malicious code in allocation-stats (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in airbrake-stats (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-6534 Malicious code in airbrake-stats (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in admob-site_stats (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in admiral-stats_parser (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in active-redis_stats (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
PT-2024-29732
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the nfsd info.mutex, which can be dereferenced by svc pool stats start immediately after a new netns is created, potentially triggering an oops. The resolution...
BIT-PYTHON-2024-0397 Memory race condition in ssl.SSLContext certificate store methods
A defect was discovered in the Python “ssl” module where there is a memory race condition with the ssl.SSLContext methods “certstorestats” and “getcacerts”. The race condition can be triggered if the methods are called at the same time as certificates are loaded into the SSLContext, such as durin...
CVE-2022-48748 net: bridge: vlan: fix memory leak in __allowed_ingress
In the Linux kernel, the following vulnerability has been resolved: net: bridge: vlan: fix memory leak in allowedingress When using per-vlan state, if vlan snooping and stats are disabled, untagged or priority-tagged ingress frame will go to check pvid state. If the port state is forwarding and t...
CVE-2022-48715: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: scsi: bnx2fc: Make bnx2fcrecvframe mp safe Running tests with a debug kernel shows that bnx2fcrecvframe is modifying the percpu lport stats counters in a non-mpsafe way. Just boot a debug kernel and run the bnx2fc driver with the...
AZL-42784 CVE-2024-0397 affecting package python3 for versions less than 3.12.3-1
A defect was discovered in the Python “ssl” module where there is a memory race condition with the ssl.SSLContext methods “certstorestats” and “getcacerts”. The race condition can be triggered if the methods are called at the same time as certificates are loaded into the SSLContext, such as durin...
CVE-2024-0397 Memory race condition in ssl.SSLContext certificate store methods
A defect was discovered in the Python “ssl” module where there is a memory race condition with the ssl.SSLContext methods “certstorestats” and “getcacerts”. The race condition can be triggered if the methods are called at the same time as certificates are loaded into the SSLContext, such as durin...
cpython Security Vulnerabilities
cpython is the Python Foundation's Python interpreter implemented in the C language. A security vulnerability exists in cpython that stems from a race condition between the certstorestats function and the getcacerts function...
The vulnerability of the ath12k_htt_pull_ppdu_stats() function in the ath12k driver (Qualcomm Technologies Wi-Fi 7) for the Linux operating system allows a hacker to compromise the confidentiality and accessibility of protected information.
The vulnerability of the ath12khttpullppdustats function in the drivers/net/wireless/ath/ath12k/dprx.c file of the ath12k driver Qualcomm Technologies Wi-Fi 7 in the Linux operating system is related to reading memory beyond the allocated buffer. Exploiting this vulnerability could allow an...
Low: postgresql
Issue Overview: postgresql: PostgreSQL pgstatsext and pgstatsextexprs lack authorization checks CVE-2024-4317 Affected Packages: postgresql Note: This advisory is applicable to Amazon Linux 2 - Postgresql14 Extra. Visit this page to learn more about Amazon Linux 2 AL2 Extras and this FAQ section...
PT-2024-28108
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.37 Description The issue is related to the blk-cgroup component in the Linux kernel, where list corruption can occur when resetting io stat. This happens because each iostat instance is added to the blkcg...
kernel: net: bridge: data races indata-races in br_handle_frame_finish()
In the Linux kernel, the following vulnerability has been resolved: net: bridge: use DEVSTATSINC syzbot/KCSAN reported data-races in brhandleframefinish 1 This function can run from multiple cpus without mutual exclusion. Adopt SMP safe DEVSTATSINC to update dev-stats fields. Handles updates to...
PT-2024-29143
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A null pointer dereference issue has been identified in the Linux kernel, specifically in the ethtool get phy stats ethtool function. This issue arises when the 'ops-get ethtool phy stat...