Unity Linux 20.1050e Security Update: kernel (UTSA-2025-989993)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989993 advisory. In the Linux kernel, the following vulnerability has been resolved: rtl818x: Prevent using not initialized queues Using not existing queues can panic the kernel with...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988728)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988728 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: firewire-lib: fix uninitialized flag for AV/C deferred transaction AV/C deferred transactio...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989468)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989468 advisory. In the Linux kernel, the following vulnerability has been resolved: net: fix uninit-value in caifseqpktsendmsg When nrsegs equal to zero in iovecfromuser, the object...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988785)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988785 advisory. In the Linux kernel, the following vulnerability has been resolved: staging: rtl8712: fix uninit-value in r871xudrvinit When 'tmpU1b' returns from r8712read8padapter...

Samba Information Disclosure (CVE-2025-9640)

In the vfsstreamsxattr module, where uninitialized heap memory could be written into alternate data streams. This allows an authenticated user to read residual memory content that may include sensitive data, resulting in an information disclosure vulnerability. Note that Nessus has not tested for...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989850)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989850 advisory. In the Linux kernel, the following vulnerability has been resolved: sfc: fix TX channel offset when using legacy interrupts In legacy interrupt mode the...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990360)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990360 advisory. In the Linux kernel, the following vulnerability has been resolved: ipvs: fix UB due to uninitialized stack access in ipvsprotocolinit Under certain kernel...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989096)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989096 advisory. In the Linux kernel, the following vulnerability has been resolved: block: Fix wrong offset in biotruncate biotruncate clears the buffer outside of last block of bde...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989063)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989063 advisory. In the Linux kernel, the following vulnerability has been resolved: usbnet: fix memory leak in error case usbnetwritecmdasync mixed up which buffers need to be freed...

CVE-2025-45663

An issue in NetSurf v3.11 causes the application to read uninitialized heap memory when creating a domevent structure. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and...

CVE-2025-45663

An issue in NetSurf v3.11 causes the application to read uninitialized heap memory when creating a domevent structure...

UBUNTU-CVE-2025-45663

An issue in NetSurf v3.11 causes the application to read uninitialized heap memory when creating a domevent structure...

CLSA-2025-1762180717 Fix CVE(s): CVE-2022-2343, CVE-2022-2522

SECURITY UPDATE: Reading past end of completion with a long line and 'infercase' set - debian/patches/CVE-2022-2343.patch: Allocate the string if needed - CVE-2022-2343 SECURITY UPDATE: Accessing uninitialized memory when completing long line - debian/patches/CVE-2022-2522.patch: Terminate string...

Improper Resource Management

Dragonfly is vulnerable to Improper Resource Management. The vulnerability is due to the processPieceFromSource method failing to update the usedTraffic field because of an uninitialized variable, which allows an attacker to exploit incorrect rate limiting and cause a denial-of-service condition...

CVE-2025-45663

NetSurf v3.11 is affected by CVE-2025-45663 due to a vulnerability in dom_event structure creation that reads uninitialized heap memory. The Red Hat, Debian, Ubuntu, and OSV entries corroborate the issue in NetSurf 3.11; however, the provided documents do not specify a fix or patched version. The...

CVE-2025-45663

An issue in NetSurf v3.11 causes the application to read uninitialized heap memory when creating a domevent structure...

NetSurf 安全漏洞

NetSurf is a lightweight browser from the NetSurf organization. A security vulnerability exists in NetSurf version v3.11 that originates from reading uninitialized heap memory when creating a domevent structure...

CVE-2025-45663

An issue in NetSurf v3.11 causes the application to read uninitialized heap memory when creating a domevent structure...

PT-2025-44770

Name of the Vulnerable Software and Affected Versions Netsurf version 3.11 Description An issue exists in NetSurf version 3.11 where the application reads uninitialized heap memory during the creation of a dom event structure. Recommendations At the moment, there is no information about a newer...

PT-2025-52913

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains an issue where the ns list node for initial namespaces is not always initialized. This can lead to problems with namespace management. Recommendations At the...