4980 matches found
Linux nfsd trace strlen Buffer Overflow DoS
The vulnerability of the strlen function in the fs/nfsd/trace.h component of the Linux operating system is related to reading data from buffer beyond its allowable limits. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...
SUSE-SU-2021:3121-1 Security update for crmsh
This update for crmsh fixes the following issues: - CVE-2020-35459: Fixed usage of utils.mkdirp instead of system mkdir command bsc1179999. - Fixed usage to collect ra trace files bsc1189641...
Security Bulletin: Vulnerability in the AIX trace facility (CVE-2021-29706)
Summary There is a vulnerability in the AIX trace facility. Vulnerability Details CVEID: CVE-2021-29706 DESCRIPTION: IBM AIX could allow a non-privileged local user to exploit a vulnerability in the trace facility to expose sensitive information or cause a denial of service. CVSS Base score: 6.8...
Important: Red Hat Security Advisory: kernel security and bug fix update
An update for kernel is now available for Red Hat Enterprise Linux 8.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...
CVE-2021-29851
IBM Planning Analytics 2.0 could allow a remote attacker to obtain sensitive information when a stack trace is returned in the browser. IBM X-Force ID: 205527...
Information disclosure
IBM Planning Analytics 2.0 could allow a remote attacker to obtain sensitive information when a stack trace is returned in the browser. IBM X-Force ID: 205527...
CVE-2021-29851
IBM Planning Analytics 2.0 could allow a remote attacker to obtain sensitive information when a stack trace is returned in the browser. IBM X-Force ID: 205527...
PT-2021-18518
Name of the Vulnerable Software and Affected Versions IBM Planning Analytics version 2.0 Description The issue allows a remote attacker to obtain sensitive information when a stack trace is returned in the browser. Recommendations For IBM Planning Analytics version 2.0, consider disabling the...
CVE-2021-29851: Undefined Security Weakness
IBM Planning Analytics 2.0 could allow a remote attacker to obtain sensitive information when a stack trace is returned in the browser. IBM X-Force ID: 205527...
CVE-2021-29851
IBM Planning Analytics 2.0 could allow a remote attacker to obtain sensitive information when a stack trace is returned in the browser. IBM X-Force ID: 205527...
PT-2021-7235 · Gitlab · Gitlab Runner +1
Name of the Vulnerable Software and Affected Versions: GitLab Runner versions up to 14.3.4 GitLab Runner versions 14.4 to 14.4.2 GitLab Runner versions 14.5 to 14.5.2 Description: The issue is related to information disclosure in GitLab Runner. In specific circumstances, trace file buffers would...
fs/nfsd/trace.h in the Linux kernel before 5.13.4 might allow remote attackers to cause a denial of service (out-of-bounds read in strlen) by sending NFS traffic when the trace event framework is being used for nfsd.
...
CVE-2021-38202
A flaw was found in Linux kernel. A remote attacker could cause a denial of service attack by sending NFS traffic when trace event framework is being used for nfsd. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. Mitigation...
IBM Planning Analytics has an unspecified vulnerability (CNVD-2021-61430)
IBM Planning Analytics is a business planning and analysis solution from IBM Corporation. The solution supports automated execution of business planning, budgeting, and analysis processes.A security vulnerability exists in the Planning Analytics spreadsheet service component of IBM Planning...
CVE-2021-29739
IBM Planning Analytics Local 2.0 could allow a remote attacker to obtain sensitive information when a stack trace is returned in the browser. X-Force ID: 198846...
CVE-2021-29739
IBM Planning Analytics Local 2.0 could allow a remote attacker to obtain sensitive information when a stack trace is returned in the browser. X-Force ID: 198846...
Information disclosure
IBM Planning Analytics Local 2.0 could allow a remote attacker to obtain sensitive information when a stack trace is returned in the browser. X-Force ID: 198846...
CVE-2021-29739
IBM Planning Analytics Local 2.0 is affected by CVE-2021-29739 in the Planning Analytics Spreadsheet Services component, where returning a stack trace in a browser could disclose sensitive information to a remote attacker. Public documentation across multiple sources (NVD entry; CNVD/CNNVD entrie...
PT-2021-18441
Name of the Vulnerable Software and Affected Versions IBM Planning Analytics Local version 2.0 Description The issue allows a remote attacker to obtain sensitive information when a stack trace is returned in the browser. Recommendations For IBM Planning Analytics Local version 2.0, update to a...
