GSD-2022-1002754 ASoC: ti: j721e-evm: Fix refcount leak in j721e_soc_probe_*

ASoC: ti: j721e-evm: Fix refcount leak in j721esocprobe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.3 by commit...

new packages: hunspell-ti

An update is available for hunspell-ti. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...

TRENDnet TI-PG1284i integer underflow vulnerability (CNVD-2022-40314)

The TRENDnet TI-PG Series is a series of switches from TRENDnet. A security vulnerability exists in TRENDnet TI-PG1284i versions prior to 2.0.2.S0, no details of the vulnerability are provided at this time...

TRENDnet TI-PG1284i Integer Underflow Vulnerability

The TRENDnet TI-PG Series is a series of switches from TRENDnet. A security vulnerability exists in TRENDnet TI-PG1284i versions prior to 2.0.2.S0, no details of the vulnerability are provided at this time...

TRENDnet TI-PG1284i Null Pointer Dereference Vulnerability

The TRENDnet TI-PG Series is a series of switches from TRENDnet. A security vulnerability exists in TRENDnet TI-PG1284i versions prior to 2.0.2.S0, which can be exploited by an attacker to crash a process by sending a crafted lldp packet to the device...

CVE-2021-33317

The TRENDnet TI-PG1284i switchhw v2.0R prior to version 2.0.2.S0 suffers from a null pointer dereference vulnerability. This vulnerability exists in its lldp related component. Due to fail to check if ChassisID TLV is contained in the packet, by sending a crafted lldp packet to the device, an...

CVE-2021-33315

The TRENDnet TI-PG1284i switchhw v2.0R prior to version 2.0.2.S0 suffers from an integer underflow vulnerability. This vulnerability exists in its lldp related component. Due to lack of proper validation on length field of PortID TLV, by sending a crafted lldp packet to the device, integer...

CVE-2021-33317

The TRENDnet TI-PG1284i switch (Hardware v2.0R) is affected by a null pointer dereference in the LLDP-related component prior to firmware version 2.0.2.S0. The vulnerability arises from failing to verify the presence of the ChassisID TLV in received LLDP packets, allowing a crafted packet to cras...

CVE-2021-33315

CVE-2021-33315 affects TRENDnet TI-PG1284i switches (hw v2.0R) prior to version 2.0.2.S0. The root cause is a lack of validation on the length field of the PortID TLV in the LLDP component, which can trigger an integer underflow and cause a negative value to be passed to memcpy(), potentially lea...

CVE-2021-33316

The TRENDnet TI-PG1284i switchhw v2.0R prior to version 2.0.2.S0 suffers from an integer underflow vulnerability. This vulnerability exists in its lldp related component. Due to lack of proper validation on length field of ChassisID TLV, by sending a crafted lldp packet to the device, integer...

CVE-2021-33315

The TRENDnet TI-PG1284i switchhw v2.0R prior to version 2.0.2.S0 suffers from an integer underflow vulnerability. This vulnerability exists in its lldp related component. Due to lack of proper validation on length field of PortID TLV, by sending a crafted lldp packet to the device, integer...

CVE-2021-33316

The CVE-2021-33316 issue affects TRENDnet TI-PG1284i switches (hardware v2.0R) prior to version 2.0.2.S0. The vulnerability is in the LLDP-related component where a crafted ChassisID TLV length field can trigger an integer underflow, causing a negative length to be passed to memcpy() and potentia...

TRENDnet TI-PG Series 输入验证错误漏洞

The TRENDnet TI-PG Series is a series of switches from TRENDnet. A security vulnerability exists in TRENDnet TI-PG1284i versions prior to 2.0.2.S0, no details of the vulnerability are provided at this time...

TRENDnet TI-PG1284i 代码问题漏洞

The TRENDnet TI-PG Series is a series of switches from TRENDnet. A security vulnerability exists in TRENDnet TI-PG1284i versions prior to 2.0.2.S0, which can be exploited by an attacker to crash a process by sending a crafted lldp packet to the device...

GSD-2022-1001882 media: ti-vpe: cal: Fix a NULL pointer dereference in cal_ctx_v4l2_init_formats()

media: ti-vpe: cal: Fix a NULL pointer dereference in calctxv4l2initformats This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.33 by commit...

GSD-2022-1001574 media: ti-vpe: cal: Fix a NULL pointer dereference in cal_ctx_v4l2_init_formats()

media: ti-vpe: cal: Fix a NULL pointer dereference in calctxv4l2initformats This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.19 by commit...

GSD-2022-1001266 media: ti-vpe: cal: Fix a NULL pointer dereference in cal_ctx_v4l2_init_formats()

media: ti-vpe: cal: Fix a NULL pointer dereference in calctxv4l2initformats This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.2 by commit...

ALPINE-CVE-2022-0865

Reachable Assertion in tiffcp in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 5e180045...

WordPress TI WooCommerce Wishlist plugin SQL injection vulnerability

WordPress is the Wordpress Foundation's suite of blogging platforms developed using the PHP language. The platform supports personal blogging sites on PHP and MySQL servers.A SQL injection vulnerability exists in versions of the WordPress TI WooCommerce Wishlist plugin prior to 1.40.1, which stem...

CVE-2022-0412

CVE-2022-0412 affects the TI WooCommerce Wishlist WordPress plugin (and TI WooCommerce Wishlist Pro) prior to version 1.40.1. The vulnerability arises because the plugin fails to sanitize and escape the item_id parameter before using it in a SQL statement within the wishlist/remove_product REST e...