kernel: use-after-free in __ext4_expand_extra_isize and ext4_xattr_set_entry related to fs/ext4/inode.c and fs/ext4/super.c

A use-after-free flaw was found in the Linux kernel’s ext4 file system functionality when the user mount ext4 partition, with the usage of an additional debug parameter is defining an extra inode size. If this parameter has a non zero value, this flaw allows a local user to crash the system when...

hyperv-daemons bug fix and enhancement update

The hyperv-daemons packages provide a suite of daemons that are needed when a AlmaLinux guest is running on Microsoft Hyper-V. The following daemons are included: - hypervkvpd, the guest Hyper-V Key-Value Pair KVP daemon - hypervvssd, the implementation of Hyper-V VSS functionality - hypervfcopyd...

EulerOS 2.0 SP2 : ImageMagick (EulerOS-SA-2020-2349)

According to the versions of the ImageMagick packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - ImageMagick before 7.0.8-50 has a memory leak vulnerability in the function ReadBMPImage in coders/bmp.c.CVE-2019-13133 - ImageMagick befor...

GDPR CCPA Compliance Support < 2.4 - Unauthenticated PHP Object Injection

The GDPR CCPA Compliance Support WordPress plugin was vulnerable to an Unauthenticated PHP Object Injection security vulnerability. PoC The vulnerability could triggered within the "njtgdprallowpermissions" Base64 encoded cookie value...

Authentication flaw

In SonarQube 8.4.2.36762, an external attacker can achieve authentication bypass through SonarScanner. With an empty value for the -D sonar.login option, anonymous authentication is forced. This allows creating and overwriting public and private projects via the /api/ce/submit endpoint...

OSV-2020-2121 Use-of-uninitialized-value in WelsDec::BaseMC

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26861 Crash type: Use-of-uninitialized-value Crash state: WelsDec::BaseMC WelsDec::GetInterBPred WelsDec::WelsMbInterPrediction...

The vulnerability of the var_interfacestatus function in the microprogramming software for Moxa EDR-810 allows a intruder to trigger an emergency shutdown of the device.

The vulnerability of the varinterfacestatus function in the microprogramming software for Moxa EDR-810 is related to character processing errors. Exploiting this vulnerability can allow a malicious actor to trigger an emergency shutdown by sending a specially crafted SNMP request with a negative...

Unauthorized Access Vulnerability in Lean Value Stream Management System (LVS) at Hangzhou Gila Technology Co.

Hangzhou Gila Technology Co., Ltd. is an enterprise network service provider, is committed to providing customized solutions based on the needs of the enterprise network, to create a cloud service cloud network platform. An unauthorized access vulnerability exists in the Lean Value Stream...

PHP Object Injection

gosa is vulnerable to PHP object injection. The vulnerability allows a remote authenticated attacker to perform file deletions in the context process worker of the web server using a malicious cookie value. This is due to lack of validation during deserializing of cookie value to restore filter...

CVE-2020-5938

On BIG-IP 13.1.0-13.1.3.4, 12.1.0-12.1.5.2, and 11.6.1-11.6.5.2, when negotiating IPSec tunnels with configured, authenticated peers, the peer may negotiate a different key length than the BIG-IP configuration would otherwise allow...

OSV-2020-2103 Use-of-uninitialized-value in tinfl_decompress

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26682 Crash type: Use-of-uninitialized-value Crash state: tinfldecompress mzinflate mzuncompress2...

SonarSource SonarQube Information Disclosure Vulnerability (CNVD-2020-64787)

SonarSource SonarQube is an open source code quality management system from SonarSource Switzerland. An information disclosure vulnerability exists in SonarQube version 8.4.2.36762, which can be exploited by an attacker to discover plaintext SMTP, SVN, and GitLab credentials via an api set value...

skia:sksl2metal: Use-of-uninitialized-value in std::__1::default_delete<SkSL::Symbol const>::operator

Project: https://skia.googlesource.com/skia.git Detailed Report: https://oss-fuzz.com/testcase?key=5139847045709824 Project: skia Fuzzing Engine: libFuzzer Fuzz Target: sksl2metal Job Type: libfuzzermsanskia Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

Information disclosure

The Zigbee protocol implementation on Texas Instruments CC2538 devices with Z-Stack 3.0.1 does not properly process a ZCL Write Attributes No Response message. It crashes in zclParseInWriteCmd and does not update the specific attribute's value...

CVE-2020-27890

The Zigbee protocol implementation on Texas Instruments CC2538 devices with Z-Stack 3.0.1 does not properly process a ZCL Write Attributes No Response message. It crashes in zclParseInWriteCmd and does not update the specific attribute's value...

Recommended update for mailman (moderate)

openSUSE Security Update: Recommended update for mailman Announcement ID: openSUSE-SU-2020:1752-1 Rating: moderate References: 1171363 1173369 Cross-References: CVE-2020-12108 CVE-2020-12137 CVE-2020-15011 Affected Products: openSUSE Backports SLE-15-SP2 An update that fixes three vulnerabilities...

Design/Logic Flaw

In the git-tag-annotation-action open source GitHub Action before version 1.0.1, an attacker can execute arbitrary shell commands if they can control the value of the tag input or manage to alter the value of the GITHUBREF environment variable. The problem has been patched in version 1.0.1. If yo...

Lock and Code S1Ep18: Finding consumer value in Cybersecurity Awareness Month with Jamie Court

This week on Lock and Code, we discuss the top security headlines generated right here on Labs and around the Internet. In addition, we talk to Jamie Court, president of the non-profit advocacy group Consumer Watchdog, about the consumer value in Cybersecurity Awareness Month. Launched initially ...

OSV-2020-2097 Use-of-uninitialized-value in WelsCommon::CMemoryAlign::~CMemoryAlign

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26612 Crash type: Use-of-uninitialized-value Crash state: WelsCommon::CMemoryAlign::CMemoryAlign WelsCommon::CMemoryAlign::CMemoryAlign WelsDec::CWelsDecoder::UninitDecoderCtx...

libyal:libfshfs_volume_fuzzer: Use-of-uninitialized-value in libfshfs_catalog_btree_key_read_data

Detailed Report: https://oss-fuzz.com/testcase?key=6322965261844480 Project: libyal Fuzzing Engine: libFuzzer Fuzz Target: libfshfsvolumefuzzer Job Type: libfuzzermsanlibyal Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: libfshfscatalogbtreekeyreaddata...