PT-2021-28562

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.10 through v5.11.19 Description The issue is related to the restructuring of the trace clock global function to prevent it from blocking. The actual impact and attack plausibility have not yet been proven...

PT-2021-24606

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.36 Description The issue is related to the restructuring of the trace clock global function to prevent it from blocking. The actual impact and attack plausibility have not yet been proven. Recommendations F...

PT-2021-24641

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.118 Description The issue is related to the restructuring of the trace clock global function to prevent it from blocking. The actual impact and attack plausibility have not yet been proven. Recommendations F...

PT-2021-28600

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.36 Description The issue is related to the restructuring of the trace clock global function to never block. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kern...

PT-2021-28522

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.10 through v5.12.3 Description The issue is related to the restructuring of the trace clock global function to prevent it from blocking. The actual impact and potential for attack have not been proven yet...

PT-2021-28635

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.118 Description The issue is related to the restructuring of the trace clock global function to prevent it from blocking. The actual impact and potential for attack have not been proven yet. Recommendations...

PT-2021-24528

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.10 through v5.12.3 Description: The issue is related to the restructuring of the trace clock global function to prevent it from blocking. The actual impact and attack plausibility have not yet been proven...

CVE-2019-4722: Improper Handling of Exceptional Conditions

IBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to obtain sensitive information via a stack trace due to mishandling of certain error conditions. IBM X-Force ID: 172128...

PT-2021-3239

Name of the Vulnerable Software and Affected Versions IBM Cognos Analytics versions 11.0 through 11.1 Description The issue is related to the mishandling of certain error conditions, which could allow a remote attacker to obtain sensitive information via a stack trace. This could enable an...

CVE-2021-29507

GENIVI Diagnostic Log and Trace DLT provides a log and trace interface. In versions of GENIVI DLT between 2.10.0 and 2.18.6, a configuration file containing the special characters could cause a vulnerable component to crash. All the applications which are using the configuration file could fail t...

DEBIAN-CVE-2021-29507

GENIVI Diagnostic Log and Trace DLT provides a log and trace interface. In versions of GENIVI DLT between 2.10.0 and 2.18.6, a configuration file containing the special characters could cause a vulnerable component to crash. All the applications which are using the configuration file could fail t...

UBUNTU-CVE-2021-29507

GENIVI Diagnostic Log and Trace DLT provides a log and trace interface. In versions of GENIVI DLT between 2.10.0 and 2.18.6, a configuration file containing the special characters could cause a vulnerable component to crash. All the applications which are using the configuration file could fail t...

Information disclosure

GENIVI Diagnostic Log and Trace DLT provides a log and trace interface. In versions of GENIVI DLT between 2.10.0 and 2.18.6, a configuration file containing the special characters could cause a vulnerable component to crash. All the applications which are using the configuration file could fail t...

CVE-2021-29507 dlt-daemon could crash if there is special character in dlt.conf

GENIVI Diagnostic Log and Trace DLT provides a log and trace interface. In versions of GENIVI DLT between 2.10.0 and 2.18.6, a configuration file containing the special characters could cause a vulnerable component to crash. All the applications which are using the configuration file could fail t...

CVE-2021-29507

GENIVI Diagnostic Log and Trace (DLT) affects GENIVI DLT versions 2.10.0–2.18.6. The vulnerability arises when a configuration file contains special characters, causing a vulnerable component to crash and preventing applications from generating dlt logs. As documented, there was no patch at publi...

CVE-2021-29507: Improper Input Validation

GENIVI Diagnostic Log and Trace DLT provides a log and trace interface. In versions of GENIVI DLT between 2.10.0 and 2.18.6, a configuration file containing the special characters could cause a vulnerable component to crash. All the applications which are using the configuration file could fail t...

IBM Cognos Analytics 信息泄露漏洞

IBM Cognos Analytics is a suite of business intelligence software from IBM in the United States. The software includes reports, dashboards, and scorecards, and can assist companies in adjusting their decisions by analyzing such things as key factors and key people. IBM Cognos Analytics suffers fr...

PT-2021-28267

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash caused by an unknown read. The crash occurs in the Json::decodePrefixedString function, which is called by...

perfetto:trace_processor_fuzzer: Crash in Json::decodePrefixedString

Project: https://android.googlesource.com/platform/external/perfetto/ Detailed Report: https://oss-fuzz.com/testcase?key=4546621204463616 Project: perfetto Fuzzing Engine: libFuzzer Fuzz Target: traceprocessorfuzzer Job Type: libfuzzerasanperfetto Platform Id: linux Crash Type: UNKNOWN READ Crash...

httpd: mod_http2 concurrent pool usage

A flaw was found in Apache httpd in versions 2.4.20 to 2.4.43. Logging using the wrong pool by modhttp2 at debug/trace log level may lead to potential crashes and denial of service. The highest threat from this vulnerability is to system availability...