PT-2021-27172

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.88 Description The issue is related to the netdevsim module, where memory for new map's value is not properly zero-initialized in the nsim bpf map alloc function. This could potentially lead to security...

PT-2021-27147

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.168 Description The issue is related to the netdevsim module, where memory for new map's value is not properly zero-initialized in the function nsim bpf map alloc. This could potentially lead to security...

Use of Uninitialized Resource in ms3d

Affected versions of this crate passes an uninitialized buffer to a user-provided Read implementation. Arbitrary Read implementations can read from the uninitialized buffer memory exposure and also can return incorrect number of bytes written to the buffer. Reading from uninitialized memory...

PT-2021-24999

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.12.9 Description: The issue is related to the zero-initialization of the tc skb extension on allocation in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations...

PT-2021-25046

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.42 Description A potential security issue exists due to the lack of zero-initialization of the tc skb extension upon allocation. The actual impact and attack plausibility have not yet been proven...

PT-2021-29040

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.42 Description The issue is related to the zero-initialization of the tc skb extension on allocation in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations...

PT-2021-28993

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.12.9 Description The issue is related to the zero-initialization of the tc skb extension on allocation in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations F...

samba: Netlogon elevation of privilege vulnerability (Zerologon)

A flaw was found in the Microsoft Windows Netlogon Remote Protocol MS-NRPC, where it reuses a known, static, zero-value initialization vector IV in AES-CFB8 mode. This flaw allows an unauthenticated attacker to impersonate a domain-joined computer, including a domain controller, and possibly obta...

`Read` on uninitialized buffer may cause UB ('tectonic_xdv' crate)

Affected versions of this crate passes an uninitialized buffer to a user-provided Read implementation. Arbitrary Read implementations can read from the uninitialized buffer memory exposure and also can return incorrect number of bytes written to the buffer. Reading from uninitialized memory...

Record::read : Custom `Read` on uninitialized buffer may cause UB

Affected versions of this crate passes an uninitialized buffer to a user-provided Read implementation. Record::read Arbitrary Read implementations can read from the uninitialized buffer memory exposure and also can return incorrect number of bytes written to the buffer. Reading from uninitialized...

RUSTSEC-2021-0014 Record::read : Custom `Read` on uninitialized buffer may cause UB

Affected versions of this crate passes an uninitialized buffer to a user-provided Read implementation. Record::read Arbitrary Read implementations can read from the uninitialized buffer memory exposure and also can return incorrect number of bytes written to the buffer. Reading from uninitialized...

Reading uninitialized memory can cause UB (`Deserializer::read_vec`)

Deserializer::readvec created an uninitialized buffer and passes it to a user-provided Read implementation Deserializer.reader.readexact. Passing an uninitialized buffer to an arbitrary Read implementation is currently defined as undefined behavior in Rust. Official documentation for the Read tra...

Code injection

Das U-Boot is a device bootloader that can read its configuration from an AES encrypted file. For devices utilizing this environment encryption mode, U-Boot's use of a zero initialization vector may allow attacks against the underlying cryptographic implementation and allow an attacker to decrypt...

CVE-2017-3225

Das U-Boot is a device bootloader that can read its configuration from an AES encrypted file. For devices utilizing this environment encryption mode, U-Boot's use of a zero initialization vector may allow attacks against the underlying cryptographic implementation and allow an attacker to decrypt...

PT-2018-7260

Name of the Vulnerable Software and Affected Versions: Das U-Boot affected versions not specified Description: The issue concerns Das U-Boot's use of a zero initialization vector in its AES-CBC encryption feature, which may allow attacks against the underlying cryptographic implementation. This...

BSA-2017-444

Security Advisory ID : BSA-2017-444 Component : DENX Das U-Boot Revision : 3.0: Final Das U-Boot is a devicebootloader that can read its configuration from an AES encrypted file. For devices utilizing this environment encryption mode, U-Boot's use of a zero initialization vector and improper...