20 matches found
Cross site request forgery (csrf)
Due to incorrect access control in Plone version v6.0.9, remote attackers can view and list all files hosted on the website via sending a crafted request...
CVE-2023-39016
bboss-persistent v6.0.9 and below was discovered to contain a code injection vulnerability in the component com.frameworkset.common.poolman.util.SQLManager.createPool. This vulnerability is exploited via passing an unchecked argument...
GSD-2022-1007805 wifi: mac80211: fix general-protection-fault in ieee80211_subif_start_xmit()
wifi: mac80211: fix general-protection-fault in ieee80211subifstartxmit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.9 by commit...
GSD-2022-1007800 net: tun: Fix memory leaks of napi_get_frags
net: tun: Fix memory leaks of napigetfrags This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.9 by commit...
GSD-2022-1007797 phy: ralink: mt7621-pci: add sentinel to quirks table
phy: ralink: mt7621-pci: add sentinel to quirks table This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.9 by commit...
GSD-2022-1007787 dmaengine: ti: k3-udma-glue: fix memory leak when register device fail
dmaengine: ti: k3-udma-glue: fix memory leak when register device fail This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.9 by commit...
GSD-2022-1007786 net: lapbether: fix issue of invalid opcode in lapbeth_open()
net: lapbether: fix issue of invalid opcode in lapbethopen This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.9 by commit...
GSD-2022-1007779 net: macvlan: fix memory leaks of macvlan_common_newlink
net: macvlan: fix memory leaks of macvlancommonnewlink This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.9 by commit...
GSD-2022-1007776 nilfs2: fix deadlock in nilfs_count_free_blocks()
nilfs2: fix deadlock in nilfscountfreeblocks This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.9 by commit...
GSD-2022-1007774 phy: qcom-qmp-combo: fix NULL-deref on runtime resume
phy: qcom-qmp-combo: fix NULL-deref on runtime resume This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.9 by commit...
GSD-2022-1007770 can: dev: fix skb drop check
can: dev: fix skb drop check This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.9 by commit 386c49fe31ee748e053860b3bac7794a933ac9ac, it was...
GSD-2022-1007769 drm/amdkfd: Migrate in CPU page fault use current mm
drm/amdkfd: Migrate in CPU page fault use current mm This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.9 by commit...
GSD-2022-1007757 ALSA: hda: fix potential memleak in 'add_widget_node'
ALSA: hda: fix potential memleak in 'addwidgetnode' This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.9 by commit...
PT-2022-36016 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.13 through v6.0.9 Description: A memory leak issue was discovered in the check func call function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions v5.13...
PT-2022-36052 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.9 Description: The issue is related to the addition of a sentinel to the quirks table in the Linux Kernel, specifically in the phy: ralink: mt7621-pci module. The actual impact and attack plausibility have...
PT-2022-35976 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.6 through v6.0.9 Description: A memory leak issue was discovered in the tracing component, specifically in the test gen synth cmd and test empty synth event functions. This issue was introduced in version v5.6 and is...
GHSA-PP3C-CF6J-M3FF Server-Side Request Forgery in Jodd HTTP
Jodd HTTP v6.0.9 was discovered to contain multiple CLRF injection vulnerabilities via the components jodd.http.HttpRequestset and jodd.http.HttpRequestsend. These vulnerabilities allow attackers to execute Server-Side Request Forgery SSRF via a crafted TCP payload...
CVE-2022-29631
Jodd HTTP v6.0.9 was discovered to contain multiple CLRF injection vulnerabilities via the components jodd.http.HttpRequestset and jodd.http.HttpRequestsend. These vulnerabilities allow attackers to execute Server-Side Request Forgery SSRF via a crafted TCP payload...
CVE-2022-29631
Jodd HTTP v6.0.9 was discovered to contain multiple CLRF injection vulnerabilities via the components jodd.http.HttpRequestset and jodd.http.HttpRequestsend. These vulnerabilities allow attackers to execute Server-Side Request Forgery SSRF via a crafted TCP payload...
CVE-2022-29631
Jodd HTTP v6.0.9 was discovered to contain multiple CLRF injection vulnerabilities via the components jodd.http.HttpRequestset and jodd.http.HttpRequestsend. These vulnerabilities allow attackers to execute Server-Side Request Forgery SSRF via a crafted TCP payload...