PT-2021-26134

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.30 through 5.10.69 Description The issue is related to a use-after-free uaf in blk trace access after removal by sysfs. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2021-25971

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.4.286 Description The issue is related to a use-after-free uaf error in the blk trace access after removal by sysfs. This error was introduced in version v2.6.30 and fixed in version v4.4.286. The actual impac...

PT-2021-29982

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.285 Description The issue is related to a use-after-free uaf in blk trace access after removal by sysfs. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

OSV-2021-1413 UNKNOWN READ in helper_uc_tracecode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39559 Crash type: UNKNOWN READ Crash state: helpeructracecode...

[SECURITY] Fedora 34 Update: rust-backtrace-0.3.61-1.fc34

Library to acquire a stack trace backtrace at runtime in a Rust program...

matio:matio_fuzzer: Null-dereference READ in ubsan_GetStackTrace

Detailed Report: https://oss-fuzz.com/testcase?key=4807548193079296 Project: matio Fuzzing Engine: libFuzzer Fuzz Target: matiofuzzer Job Type: libfuzzerubsanmatio Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: ubsanGetStackTrace Sanitizer: undefin...

[SECURITY] Fedora 35 Update: rust-backtrace-0.3.61-1.fc35

Library to acquire a stack trace backtrace at runtime in a Rust program...

cras:rclient_message: Null-dereference READ in ubsan_GetStackTrace

Detailed Report: https://oss-fuzz.com/testcase?key=5744697679675392 Project: cras Fuzzing Engine: libFuzzer Fuzz Target: rclientmessage Job Type: libfuzzerubsancras Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: ubsanGetStackTrace Sanitizer:...

Linux nfsd trace strlen Buffer Overflow DoS

The vulnerability of the strlen function in the fs/nfsd/trace.h component of the Linux operating system is related to reading data from buffer beyond its allowable limits. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

SUSE-SU-2021:3121-1 Security update for crmsh

This update for crmsh fixes the following issues: - CVE-2020-35459: Fixed usage of utils.mkdirp instead of system mkdir command bsc1179999. - Fixed usage to collect ra trace files bsc1189641...

Security Bulletin: Vulnerability in the AIX trace facility (CVE-2021-29706)

Summary There is a vulnerability in the AIX trace facility. Vulnerability Details CVEID: CVE-2021-29706 DESCRIPTION: IBM AIX could allow a non-privileged local user to exploit a vulnerability in the trace facility to expose sensitive information or cause a denial of service. CVSS Base score: 6.8...

Important: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 8.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

CVE-2021-29851

IBM Planning Analytics 2.0 could allow a remote attacker to obtain sensitive information when a stack trace is returned in the browser. IBM X-Force ID: 205527...

Information disclosure

IBM Planning Analytics 2.0 could allow a remote attacker to obtain sensitive information when a stack trace is returned in the browser. IBM X-Force ID: 205527...

CVE-2021-29851

IBM Planning Analytics 2.0 could allow a remote attacker to obtain sensitive information when a stack trace is returned in the browser. IBM X-Force ID: 205527...

CVE-2021-29851: Undefined Security Weakness

IBM Planning Analytics 2.0 could allow a remote attacker to obtain sensitive information when a stack trace is returned in the browser. IBM X-Force ID: 205527...

PT-2021-18518

Name of the Vulnerable Software and Affected Versions IBM Planning Analytics version 2.0 Description The issue allows a remote attacker to obtain sensitive information when a stack trace is returned in the browser. Recommendations For IBM Planning Analytics version 2.0, consider disabling the...

CVE-2021-29851

IBM Planning Analytics 2.0 could allow a remote attacker to obtain sensitive information when a stack trace is returned in the browser. IBM X-Force ID: 205527...

PT-2021-7235 · Gitlab · Gitlab Runner +1

Name of the Vulnerable Software and Affected Versions: GitLab Runner versions up to 14.3.4 GitLab Runner versions 14.4 to 14.4.2 GitLab Runner versions 14.5 to 14.5.2 Description: The issue is related to information disclosure in GitLab Runner. In specific circumstances, trace file buffers would...

fs/nfsd/trace.h in the Linux kernel before 5.13.4 might allow remote attackers to cause a denial of service (out-of-bounds read in strlen) by sending NFS traffic when the trace event framework is being used for nfsd.

...