PT-2022-1459

Name of the Vulnerable Software and Affected Versions util-linux affected versions not specified Description The issue is related to incorrect permissions and access privileges in the util-linux package. A logic error was found in the libmount library, specifically in the function that allows an...

util-linux 权限许可和访问控制问题漏洞

util-linux is an open source software package. util-linux has a security vulnerability that allows an attacker to trigger a denial of service by causing a fatal error in util-linux via libmount...

com.goldmansachs.reladomo:reladomo-test-util (>=16.0.0, <=18.0.0) potentially affected by CVE-2022-23221 via com.h2database:h2 (1.3.169)

com.h2database:h2 MAVEN version 1.3.169 is affected by a known vulnerability. The following packages have a transitive dependency on com.h2database:h2 and may be impacted: - com.goldmansachs.reladomo:reladomo-test-util =16.0.0, =18.0.0 Source cves: CVE-2022-23221 Source advisory:...

CVE-2022-22890

There is an Assertion 'argumentstype != SCANNERARGUMENTSPRESENT && argumentstype != SCANNERARGUMENTSPRESENTNOREG' failed at /jerry-core/parser/js/js-scanner-util.c in Jerryscript 3.0.0...

UBUNTU-CVE-2022-22890

There is an Assertion 'argumentstype != SCANNERARGUMENTSPRESENT && argumentstype != SCANNERARGUMENTSPRESENTNOREG' failed at /jerry-core/parser/js/js-scanner-util.c in Jerryscript 3.0.0...

Flatpak path traversal vulnerability

Flatpak is an application virtualization system for Linux desktop application computing environments. flatpak is vulnerable and can be exploited by malicious applications to replace appstream util binaries and potentially perform other malicious operations...

CVE-2021-39683

In copyfrommbox of sssiceutil.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

CVE-2022-21682

Flatpak is a Linux application sandboxing and distribution framework. A path traversal vulnerability affects versions of Flatpak prior to 1.12.3 and 1.10.6. flatpak-builder applies finish-args last in the build. At this point the build directory will have the full access that is specified in the...

PT-2022-15033

Name of the Vulnerable Software and Affected Versions Flatpak versions prior to 1.12.3 and 1.10.6 Description A path traversal issue affects Flatpak, a Linux application sandboxing and distribution framework. The flatpak-builder applies finish-args last in the build, granting the build directory...

CVE-2022-21682

Flatpak is a Linux application sandboxing and distribution framework. A path traversal vulnerability affects versions of Flatpak prior to 1.12.3 and 1.10.6. flatpak-builder applies finish-args last in the build. At this point the build directory will have the full access that is specified in the...

org.typelevel:jawn-ast_2.11 (>=1.0.0-rc1, <=1.0.0-rc2), org.typelevel:jawn-json4s_2.11 (>=1.0.0-rc1, <=1.0.0-rc2) +3 more potentially affected by CVE-2022-21653 via org.typelevel:jawn-parser_2.11 (>=1.0.0-rc1, <=1.0.0-rc2)

org.typelevel:jawn-parser2.11 MAVEN version =1.0.0-rc1, =1.0.0-rc1, =1.0.0-rc1, =1.0.0-rc1, =1.0.0-rc1, =1.0.0-rc1, =1.0.0-rc2 Source cves: CVE-2022-21653 Source advisory: GHSA-VC89-HCCF-RQ55...

org.typelevel:jawn-ast_0.27 (1.0.0), org.typelevel:jawn-util_0.27 (1.0.0) potentially affected by CVE-2022-21653 via org.typelevel:jawn-parser_0.27 (1.0.0)

org.typelevel:jawn-parser0.27 MAVEN version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.typelevel:jawn-parser0.27 and may be impacted: - org.typelevel:jawn-ast0.27 1.0.0 - org.typelevel:jawn-util0.27 1.0.0 Source cves: CVE-2022-21653 Sour...

org.typelevel:jawn-ast_0.27 (>=1.0.0, <=1.0.2), org.typelevel:jawn-json4s_0.27 (>=1.0.1, <=1.0.2) +3 more potentially affected by CVE-2022-21653 via org.typelevel:jawn-parser_0.27 (>=1.0.0, <=1.0.2)

org.typelevel:jawn-parser0.27 MAVEN version =1.0.0, =1.0.0, =1.0.1, =1.0.1, =1.0.1, =1.0.0, =1.0.2 Source cves: CVE-2022-21653 Source advisory: GHSA-VC89-HCCF-RQ55...

org.typelevel:jawn-ast_0.27 (1.0.2), org.typelevel:jawn-json4s_0.27 (1.0.2) +3 more potentially affected by CVE-2022-21653 via org.typelevel:jawn-parser_0.27 (1.0.2)

org.typelevel:jawn-parser0.27 MAVEN version 1.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.typelevel:jawn-parser0.27 and may be impacted: - org.typelevel:jawn-ast0.27 1.0.2 - org.typelevel:jawn-json4s0.27 1.0.2 - org.typelevel:jawn-play0.27...

org.typelevel:jawn-ast_0.27 (1.0.1), org.typelevel:jawn-json4s_0.27 (1.0.1) +3 more potentially affected by CVE-2022-21653 via org.typelevel:jawn-parser_0.27 (1.0.1)

org.typelevel:jawn-parser0.27 MAVEN version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.typelevel:jawn-parser0.27 and may be impacted: - org.typelevel:jawn-ast0.27 1.0.1 - org.typelevel:jawn-json4s0.27 1.0.1 - org.typelevel:jawn-play0.27...

GHSA-CWVC-87XQ-PC5M Out-of-bounds Write and Race Condition in metrics-util

In the affected versions of the crate, AtomicBucket unconditionally implements Send/Sync traits. Therefore, users can create a data race to the inner T: !Sync by using the AtomicBucket::datawith API. Such data races can potentially cause memory corruption or other undefined behavior. The flaw was...

actix_web_metrics_mw (>=0.0.1, <=0.3.1), capsule (>=0.1.1, <=0.1.5) +32 more potentially affected by CVE-2021-45704 via metrics-util (>=0.1.0, <=0.6.2)

metrics-util CARGO version =0.1.0, =0.0.1, =0.1.1, =0.37.0-pre, =0.2.0, =0.9.0, =0.1.0, =0.5.0, =0.9.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0, =0.1.1 and more Source cves: CVE-2021-45704 Source advisory: OSV:GHSA-CWVC-87XQ-PC5M...

UBUNTU-CVE-2021-44590

In libming 0.4.8, a memory exhaustion vulnerability exist in the function cws2fws in util/main.c. Remote attackers could launch denial of service attacks by submitting a crafted SWF file that exploits this vulnerability...

EulerOS Virtualization 3.0.2.6 : util-linux (EulerOS-SA-2021-2864)

According to the versions of the util-linux packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - DISPUTED An integer overflow in util-linux through 2.37.1 can potentially cause a buffer overflow if an attacker were able to...

AZL-8960 CVE-2021-45953 affecting package dnsmasq for versions less than 2.89-1

Dnsmasq 2.86 has a heap-based buffer overflow in extractname called from hashquestions and fuzzutil.c. NOTE: the vendor's position is that CVE-2021-45951 through CVE-2021-45957 "do not represent real vulnerabilities, to the best of our knowledge...