CVE-2021-3490

The eBPF ALU32 bounds tracking for bitwise ops AND, OR and XOR in the Linux kernel did not properly update 32-bit bounds, which could be turned into out of bounds reads and writes in the Linux kernel and therefore, arbitrary code execution. This issue was fixed via commit 049c4e13714e "bpf: Fix...

DEBIAN-CVE-2021-3490

The eBPF ALU32 bounds tracking for bitwise ops AND, OR and XOR in the Linux kernel did not properly update 32-bit bounds, which could be turned into out of bounds reads and writes in the Linux kernel and therefore, arbitrary code execution. This issue was fixed via commit 049c4e13714e "bpf: Fix...

Out-of-bounds

The eBPF ALU32 bounds tracking for bitwise ops AND, OR and XOR in the Linux kernel did not properly update 32-bit bounds, which could be turned into out of bounds reads and writes in the Linux kernel and therefore, arbitrary code execution. This issue was fixed via commit 049c4e13714e "bpf: Fix...

CVE-2021-3490

The eBPF ALU32 bounds tracking for bitwise ops AND, OR and XOR in the Linux kernel did not properly update 32-bit bounds, which could be turned into out of bounds reads and writes in the Linux kernel and therefore, arbitrary code execution. This issue was fixed via commit 049c4e13714e "bpf: Fix...

CVE-2021-3490

The eBPF ALU32 bounds tracking for bitwise ops AND, OR and XOR in the Linux kernel did not properly update 32-bit bounds, which could be turned into out of bounds reads and writes in the Linux kernel and therefore, arbitrary code execution. This issue was fixed via commit 049c4e13714e "bpf: Fix...

CVE-2021-3490 Linux kernel eBPF bitwise ops ALU32 bounds tracking

The eBPF ALU32 bounds tracking for bitwise ops AND, OR and XOR in the Linux kernel did not properly update 32-bit bounds, which could be turned into out of bounds reads and writes in the Linux kernel and therefore, arbitrary code execution. This issue was fixed via commit 049c4e13714e "bpf: Fix...

CVE-2021-3490

Technical details about CVE-2021-3490 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2021-33839

Luca through 1.7.4 on Android allows remote attackers to obtain sensitive information about COVID-19 tracking because the QR code of a Public Location can be intentionally confused with the QR code of a Private Meeting...

CVE-2021-33838

Luca through 1.7.4 on Android allows remote attackers to obtain sensitive information about COVID-19 tracking because requests related to Check-In State occur shortly after requests for Phone Number Registration...

CVE-2021-33838

Luca through 1.7.4 on Android allows remote attackers to obtain sensitive information about COVID-19 tracking because requests related to Check-In State occur shortly after requests for Phone Number Registration...

CVE-2021-33838

Luca through 1.7.4 on Android allows remote attackers to obtain sensitive information about COVID-19 tracking because requests related to Check-In State occur shortly after requests for Phone Number Registration...

CVE-2021-33839

Luca through 1.7.4 on Android allows remote attackers to obtain sensitive information about COVID-19 tracking because the QR code of a Public Location can be intentionally confused with the QR code of a Private Meeting...

Traccar has a weak password vulnerability

Traccar is an open source GPS tracking system. Traccar suffers from a weak password vulnerability that can be exploited by attackers to obtain sensitive information...

CVE-2021-33838

Luca through 1.7.4 on Android allows remote attackers to obtain sensitive information about COVID-19 tracking because requests related to Check-In State occur shortly after requests for Phone Number Registration...

CVE-2021-33838

The CVE-2021-33838 issue affects Luca app on Android (versions 1.7.4 and earlier). The root cause is a sequence where requests related to Check-In State occur shortly after Phone Number Registration, enabling remote attackers to obtain sensitive COVID-19 tracking information. Impact is described ...

CVE-2021-33839

Luca through 1.7.4 on Android allows remote attackers to obtain sensitive information about COVID-19 tracking because the QR code of a Public Location can be intentionally confused with the QR code of a Private Meeting...

CVE-2021-33839

CVE-2021-33839 affects Luca for Android up to version 1.7.4. The root cause is the QR code handling that can confuse a Public Location QR with a Private Meeting QR, enabling remote attackers to obtain sensitive COVID-19 tracking information. Impact: confidentiality at HIGH (C in CVSS3.1), exploit...

Microsoft’s Vote Tracking Software Clears a Major Hurdle

Hart InterCivic will be the first private vendor to partner with the company on using its open-source ElectionGuard system...

Luca 信息泄露漏洞

Gtlab luca is a Gtlab open source application. A secure and encrypted exchange of contact information. A security vulnerability exists in Luca, which originated from a vulnerability that can be exploited by a remote attacker to obtain sensitive information about COVID-19 tracking...

PT-2021-20339 · Luca · Luca

Name of the Vulnerable Software and Affected Versions: Luca versions 1.7.4 and earlier Description: The issue allows remote attackers to obtain sensitive information about COVID-19 tracking. This is because requests related to Check-In State occur shortly after requests for Phone Number...