DEBIAN-CVE-2022-0396

BIND 9.16.11 - 9.16.26, 9.17.0 - 9.18.0 and versions 9.16.11-S1 - 9.16.26-S1 of the BIND Supported Preview Edition. Specifically crafted TCP streams can cause connections to BIND to remain in CLOSEWAIT status for an indefinite period of time, even after the client has terminated the connection...

ALPINE-CVE-2022-0396

BIND 9.16.11 - 9.16.26, 9.17.0 - 9.18.0 and versions 9.16.11-S1 - 9.16.26-S1 of the BIND Supported Preview Edition. Specifically crafted TCP streams can cause connections to BIND to remain in CLOSEWAIT status for an indefinite period of time, even after the client has terminated the connection...

ISC BIND 资源管理错误漏洞

ISC BIND is a suite of open source software from ISC Corporation that implements the DNS protocol. A resource management error vulnerability exists in ISC BIND, which stems from the fact that a TCP connection with "keep-response-order" enabled may leave the TCP interface in the "CLOSEWAIT " state...

PT-2022-6539

Name of the Vulnerable Software and Affected Versions BIND versions 9.16.11 through 9.16.26 BIND versions 9.17.0 through 9.18.0 BIND Supported Preview Edition versions 9.16.11-S1 through 9.16.26-S1 Description The issue is related to improper resource cleanup, which can be exploited by a remote...

PT-2022-2674

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free flaw was found in the Linux kernel’s Atheros wireless adapter driver. This issue arises when a user forces the ath9k htc wait for target function to fail with some input...

AZL-8347 CVE-2021-4145 affecting package qemu for versions less than 6.2.0-2

A NULL pointer dereference issue was found in the block mirror layer of QEMU in versions prior to 6.2.0. The self pointer is dereferenced in mirrorwaitonconflicts without ensuring that it's not NULL. A malicious unprivileged user within the guest could use this flaw to crash the QEMU process on t...

DEBIAN-CVE-2021-4145

A NULL pointer dereference issue was found in the block mirror layer of QEMU in versions prior to 6.2.0. The self pointer is dereferenced in mirrorwaitonconflicts without ensuring that it's not NULL. A malicious unprivileged user within the guest could use this flaw to crash the QEMU process on t...

Wolfssl 缓冲区错误漏洞

Wolfssl CyaSSL is a small, portable embedded SSL programming library for use by embedded systems developers from Wolfssl, USA. A buffer error vulnerability exists in Wolfssl wolfMQTT, which stems from a call to MqttClientDecodePacket from the product's MqttClientHandlePacket and MqttClientWaitTyp...

PT-2021-26908

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.164 Description The issue concerns an out-of-bounds read and write in hw atl utils fw rpc wait. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2021-27042

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.15 through v5.15.6 Description A potential security issue exists due to a wait fence submitqueue leak. The actual impact and attack plausibility have not yet been proven. This issue was introduced in version v5.15 and ...

PT-2021-27018

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.7 Description The issue concerns an out-of-bounds read and write in the hw atl utils fw rpc wait function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kerne...

PT-2021-26949

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.84 Description The issue concerns an out-of-bounds read and write in hw atl utils fw rpc wait. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2021-26880

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.220 Description The issue concerns an out-of-bounds OOB read and write in hw atl utils fw rpc wait. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-5501

Name of the Vulnerable Software and Affected Versions Linux kernel versions through 5.15.2 Description The issue is related to the function hw atl utils fw rpc wait in the Linux kernel, which allows an attacker to trigger an out-of-bounds write via a crafted length value. This can be exploited by...

UVI-2021-1001847 can: isotp: isotp_sendmsg(): add result check for wait_event_interruptible()

can: isotp: isotpsendmsg: add result check for waiteventinterruptible This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.76 by commit...

PT-2021-30312

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.76 Description A potential issue exists in the isotp sendmsg function due to a missing result check for wait event interruptible. The actual impact and attack plausibility have not yet been proven...

PT-2021-30351

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.15 Description A potential issue exists in the isotp sendmsg function, where the result of wait event interruptible is not properly checked. This issue was introduced in version v5.10 and is fixed in versio...

PT-2021-26317

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.76 Description: A potential issue exists in the isotp sendmsg function, where the result of wait event interruptible is not properly checked. This issue was introduced in Linux Kernel version v5.10 and is...

PT-2021-26356

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.14.15 Description: A potential issue exists in the isotp sendmsg function, where the result of wait event interruptible is not properly checked. This issue was introduced in version v5.10 and is fixed in...

Anyone can extend withdraw wait period by depositing zero collateral

Handle harleythedog Vulnerability details Impact In MochiVault.sol, the deposit function allows anyone to deposit collateral into any position. A malicious user can call this function with amount = 0, which would reset the amount of time the owner has to wait before they can withdraw their...