14219 matches found
CVE-2023-54314 media: af9005: Fix null-ptr-deref in af9005_i2c_xfer
In the Linux kernel, the following vulnerability has been resolved: media: af9005: Fix null-ptr-deref in af9005i2cxfer In af9005i2cxfer, msg is controlled by user. When msgi.buf is null and msgi.len is zero, former checks on msgi.buf would be passed. Malicious data finally reach af9005i2cxfer. If...
CVE-2023-54314 media: af9005: Fix null-ptr-deref in af9005_i2c_xfer
In the Linux kernel, the following vulnerability has been resolved: media: af9005: Fix null-ptr-deref in af9005i2cxfer In af9005i2cxfer, msg is controlled by user. When msgi.buf is null and msgi.len is zero, former checks on msgi.buf would be passed. Malicious data finally reach af9005i2cxfer. If...
CVE-2023-54266 media: dvb-usb: m920x: Fix a potential memory leak in m920x_i2c_xfer()
In the Linux kernel, the following vulnerability has been resolved: media: dvb-usb: m920x: Fix a potential memory leak in m920xi2cxfer 'read' is freed when it is known to be NULL, but not when a read error occurs. Revert the logic to avoid a small leak, should a m920xread call fail...
CVE-2023-54266 media: dvb-usb: m920x: Fix a potential memory leak in m920x_i2c_xfer()
In the Linux kernel, the following vulnerability has been resolved: media: dvb-usb: m920x: Fix a potential memory leak in m920xi2cxfer 'read' is freed when it is known to be NULL, but not when a read error occurs. Revert the logic to avoid a small leak, should a m920xread call fail...
CVE-2023-54266
In the Linux kernel, the following vulnerability has been resolved: media: dvb-usb: m920x: Fix a potential memory leak in m920xi2cxfer 'read' is freed when it is known to be NULL, but not when a read error occurs. Revert the logic to avoid a small leak, should a m920xread call fail...
CVE-2023-54175
The CVE-2023-54175 issue affects the Linux kernel i2c xiic driver, where xiic_xfer() acquired a runtime PM reference on entry but had an error path that could leak that reference. The provided documents confirm a resolution: ensure the error path releases the runtime PM reference, preventing leak...
CVE-2023-54175 i2c: xiic: xiic_xfer(): Fix runtime PM leak on error path
In the Linux kernel, the following vulnerability has been resolved: i2c: xiic: xiicxfer: Fix runtime PM leak on error path The xiicxfer function gets a runtime PM reference when the function is entered. This reference is released when the function is exited. There is currently one error path wher...
PT-2025-54246
Name of the Vulnerable Software and Affected Versions Fetch FTP Client version 5.8.2 Description The Fetch FTP Client is subject to a denial of service condition. Attackers can exploit this by sending long server responses, specifically those exceeding 2K bytes, which leads to 100% CPU consumptio...
PT-2025-54095
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel related to a potential memory leak within the m920x i2c xfer function. Specifically, memory associated with read may be freed incorrectly when it is NUL...
NLB mKlik Macedonia SQL注入漏洞
NLB mKlik Macedonia is an official mobile banking application of NLB in the Republic of North Macedonia. A SQL injection vulnerability exists in NLB mKlik Macedonia version 3.3.12, which stems from improper cleanup of the international transfer parameter and could lead to an SQL injection attack...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-992631)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992631 advisory. In the Linux kernel, the following vulnerability has been resolved: media: dw2102: Fix null-ptr-deref in dw2102i2ctransfer In dw2102i2ctransfer, msg is controlled by...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992415)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992415 advisory. In the Linux kernel, the following vulnerability has been resolved: vhost/vsock: Use kvmalloc/kvfree for larger packets. When copying a large file over sftp over...
PT-2025-54004
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s xiic xfer function related to runtime power management. Specifically, a runtime PM reference is not always released when the function exits due to an...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992590)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992590 advisory. In the Linux kernel, the following vulnerability has been resolved: media: dw2102: Fix null-ptr-deref in dw2102i2ctransfer In dw2102i2ctransfer, msg is controlled by...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel, which stems from mishandling of the m920xi2cxfer error in media: dvb-usb: m920x, which could lead to a memory leak...
PT-2025-54243
Name of the Vulnerable Software and Affected Versions SOUND4 IMPACT/FIRST/PULSE/Eco versions 2.x and earlier Description The software contains a conditional command injection issue. Local authenticated users can create malicious files in the /tmp directory. Unauthenticated attackers can execute...
Fetch 安全漏洞
Fetch is an FTP file transfer client from Fetch USA. A security vulnerability exists in Fetch version 5.8.2, which stems from consuming 100% CPU while processing an extremely long server response, which may result in a denial of service...
Security Bulletin: Vulnerability in SSH servers which implement file transfer protocols affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.
Summary Potential vulnerability in SSH servers which implement file transfer protocols has been identified that affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component. . The vulnerability have been addressed. Refer to...
curl: WebSocket Logic Error: Control Frame (PING/PONG) Starvation causes Connection Drop (DoS) during large transfers
Summary: I have discovered a logic flaw in lib/ws.c regarding the handling of WebSocket Control Frames PING/PONG. According to RFC 6455, Control Frames should be processed as soon as possible, even in the middle of fragmented data frames, to maintain connection state Keep-Alive. However, libcurl...
