The vulnerability of the sgl_sge_nr_set() function in the drivers/crypto/hisilicon/zip/zip_crypto.c file of the Linux kernel cryptographic accelerator driver allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the sglsgenrset function in the drivers/crypto/hisilicon/zip/zipcrypto.c file of the Linux kernel’s cryptographic accelerator driver is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow a remote attacker to gain unauthorized access to...

The vulnerabilities of the functions mlx5e_tc_esw_init() and mlx5e_tc_esw_cleanup() in the driver/net/ethernet/mellanox/mlx5/core/en_tc.c file of the Mellanox Ethernet network adapter driver for the Linux operating system, which allow a malicious actor to cause service failures.

The vulnerabilities of the functions mlx5etceswinit and mlx5etceswcleanup in the driver module drivers/net/ethernet/mellanox/mlx5/core/entc.c of the Mellanox Ethernet network adapter driver for the Linux operating system are related to pointer manipulation. Exploiting these vulnerabilities could...

The vulnerability of the setuptools project’s packaging simplification library stems from an incorrect limitation on the path to the restricted-access directory. This allows attackers to gain unauthorized access to protected information.

The vulnerability of the setuptools project’s packaging simplification library is related to an incorrect restriction on the path name to the restricted access directory. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

The vulnerability of the python-urllib3 library, related to incorrect processing of highly compressed input data, allows attackers to cause service failures.

The vulnerability of the python-urllib3 library is related to incorrect processing of highly compressed input data. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the TLS traffic proxy mechanism in NGINX Plus and NGINX OSS allows a hacker to inject data in an open text format.

The vulnerability of the TLS traffic proxy mechanism in NGINX Plus and NGINX OSS lies in the loading of external, unreliable data alongside reliable data. Exploiting this vulnerability allows a malicious actor to inject data in an open text format remotely...

The vulnerability of the ingress controller in the Kubernetes cluster ingress-nginx, related to insufficient validation of incoming data, allows a hacker to execute arbitrary code.

The vulnerability of the ingress controller in the Kubernetes cluster ingress-nginx is related to insufficient validation of incoming data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the libsoup library, related to deficiencies in HTTP request processing, allows attackers to send hidden HTTP requests (HTTP Request Smuggling attack).

The vulnerability of the libsoup library is related to deficiencies in handling http requests. Exploiting this vulnerability allows a remote attacker to send hidden HTTP requests HTTP Request Smuggling attack...

The vulnerability of the mt7921_mcu_parse_response() function in the drivers/net/wireless/mediatek/mt76/mt7921/mcu.c file of the Mediatek wireless communication adapter driver for the Linux operating system allows a hacker to access protected information or cause a service failure.

The vulnerability of the mt7921mcuparseresponse function in the drivers/net/wireless/mediatek/mt76/mt7921/mcu.c file of the Mediatek wireless communication adapter driver for the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the OpenLDAP package, related to reading beyond the buffer in memory, allows a attacker to cause a service failure.

The vulnerability of the OpenLDAP package relates to reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the Avahi service detection system in local networks, related to the lack of use of the assert() function, allows a perpetrator to trigger a service failure.

The vulnerability of the Avahi service detection system in local networks is related to the lack of use of the assert function. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

The vulnerability of the ingress controller in the Kubernetes cluster ingress-nginx, related to insufficient input data validation, allows a attacker to cause a service failure.

The vulnerability of the ingress controller in the Kubernetes cluster ingress-nginx is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of the Wireshark traffic analyzer relates to writing beyond the buffer boundaries in memory, allowing a hacker to execute arbitrary code.

The vulnerability of the Wireshark traffic analyzer relates to writing beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Python library for working with PDF files, PyPDF, relates to the execution of a loop with an unreachable exit condition, allowing a hacker to cause a service failure.

The vulnerability of the Python library for working with PDF files, PyPDF, is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the library for working with XML in Python’s python-xmltodict allows attackers to execute arbitrary code due to errors in XML request processing.

The vulnerability of the Python-xmltodict library for working with XML is related to errors in processing XML requests. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

The vulnerability of the filelock library, related to synchronization errors when using a shared resource, allows a hacker to cause a service failure.

The vulnerability of the filelock library is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the libxml2 library, related to uncontrolled recursion, allows attackers to trigger a service failure.

The vulnerability of the libxml2 library is related to uncontrolled recursion. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause service failures...

The vulnerability of the libexpat library for analyzing XML files, related to integer overflow, allows attackers to cause a service failure.

The vulnerability of the libexpat library for analyzing XML files is related to integer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the MongoDB database management system, related to the lack of use of the assert() function, allows a attacker to trigger a service failure.

The vulnerability of the MongoDB database management system is related to the lack of use of the assert function. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of the __f2fs_submit_merged_write() function in the fs/f2fs/data.c file of the F2FS file system in the Linux operating system allows a hacker to gain access to protected information or cause service failures.

The vulnerability of the f2fssubmitmergedwrite function in the fs/f2fs/data.c file of the F2FS file system in the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to access protected information or cause service failures...

The vulnerability of the Avahi service detection system in local networks, related to uncontrolled resource consumption, allows a hacker to cause a service failure.

The vulnerability of the Avahi service detection system in local networks is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a hacker to cause a service failure...

The vulnerability of the Wireshark traffic analyzer lies in the execution of a loop with an unavailable exit condition, allowing a hacker to cause a service failure.

The vulnerability of the Wireshark traffic analyzer relates to the execution of a loop with an unavailable exit condition. Exploiting this vulnerability can allow a hacker to cause a service failure...

The vulnerability of the Coredns DNS server, related to unlimited resource distribution, allows attackers to cause service failures.

The vulnerability of the coredns DNS server is related to the unlimited distribution of resources. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the ixgberemove() function in the drivers/net/ethernet/intel/ixgbe/ixgbe_main.c file of the Linux kernel’s Ethernet network adapter driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ixgberemove function in the drivers/net/ethernet/intel/ixgbe/ixgbemain.c file of the Linux kernel’s Ethernet network adapter driver is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the tcm_loop_setup_hba_bus() function in the drivers/target/loopback/tcm_loop.c module of the TCM driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the tcmloopsetuphbabus function in the drivers/target/loopback/tcmloop.c module of the Linux TCM driver is related to the distribution of resources without any restrictions or regulation. Exploiting this vulnerability could allow a attacker to cause service failures...

The vulnerability in the function ath9k_htc_probe_device() of the drivers/net/wireless/ath/ath9k/htc_drv_init.c file, a driver for Atheros/Qualcomm wireless adapter devices in the Linux operating system, allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the ath9khtcprobedevice function in the drivers/net/wireless/ath/ath9k/htcdrvinit.c file of the Atheros/Qualcomm wireless adapter driver for the Linux operating system is related to the reutilization of previously freed memory due to incorrect initialization. Exploiting this...

The vulnerabilities of the functions tcpci_register_port() and tcpci_unregister_port() in the driver/drivers/usb/typec/tcpm/tcpci.c module of the Linux kernel’s USB TypeC port controller driver allow attackers to compromise the integrity of protected information or cause service failures.

The vulnerabilities of the functions tcpciregisterport and tcpciunregisterport in the driver/drivers/usb/typec/tcpm/tcpci.c module of the USB TypeC port controller driver in the Linux kernel are related to the failure to release resources after their useful lifespan has ended. Exploiting these...

The vulnerability of the __perf_event_overflow() function in the kernel/events/core.c module, which manages kernel events in Linux operating systems, allows a hacker to trigger a service failure.

The vulnerability of the perfeventoverflow function in the kernel/events/core.c module, which manages kernel events in Linux operating systems, is related to buffer overflows based on stacks. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the rendering mechanism of Blink in Google Chrome and Microsoft Edge browsers allows a hacker to trigger a service failure.

The vulnerability of the rendering mechanism in Google Chrome and Microsoft Edge browsers relates to the possibility of using memory after it is freed. Exploiting this vulnerability can allow a malicious actor to cause a service failure through a specially created HTML page...

The vulnerability of the lbs_init_adapter() function in the drivers/net/wireless/marvell/libertas/main.c file of the Marvell network adapter driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the lbsinitadapter function in the drivers/net/wireless/marvell/libertas/main.c file of the Marvell wireless adapter driver in the Linux operating system kernel is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service...

The vulnerability of the ext4_clu_mapped() function in the fs/ext4/extents.c module of the Ext4 file system in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ext4clumapped function in the fs/ext4/extents.c module of the Ext4 file system in the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the init_amd() function in the arch/x86/lib/clear_page_64.S file of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the initamd function in the arch/x86/lib/clearpage64.S file of the Linux operating system is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the be_cmd_read_port_transceiver_data() function in the drivers/net/ethernet/emulex/benet/be_cmds.c module of the Linux kernel’s Ethernet adapter support driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the becmdreadporttransceiverdata function in the drivers/net/ethernet/emulex/benet/becmds.c file, a driver for supporting Ethernet network adapters in the Linux operating system, stems from the copying of buffers without checking the size of the input data a classic buffer...

The vulnerability of the gs_can_open() function in the drivers/net/can/usb/gs_usb.c module of the Linux kernel’s CAN network device driver allows a hacker to cause a service failure.

The vulnerability of the gscanopen function in the drivers/net/can/usb/gsusb.c module of the Linux kernel-based network device driver framework is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the erspan_fb_xmit() function in the net/ipv4/ip_gre.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the erspanfbxmit function in the net/ipv4/ipgre.c module of the Linux kernel exposes confidential information. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerabilities of the functions tcp_cdg_init() and tcp_cdg_release() in the net/ipv4/tcp_cdg.c module of the Linux operating system allow attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the functions tcpcdginit and tcpcdgrelease in the net/ipv4/tcpcdg.c module of the Linux operating system is related to the repeated release of previously released memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the Digital Credentials API component in browsers Google Chrome and Microsoft Edge allows a perpetrator to trigger a service failure.

The vulnerability of the Digital Credentials API for Google Chrome and Microsoft Edge browsers relates to the possibility of using memory after it is freed. Exploiting this vulnerability could allow a malicious actor to cause a service failure through a specially created HTML page...

The vulnerability of the Navigation function in Google Chrome and Microsoft Edge browsers allows a hacker to trigger a service failure.

The vulnerability of the Navigation function in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially created HTML page...

The vulnerability of the mp2629_read_raw() function in the drivers/iio/adc/mp2629_adc.c file of various types of built-in sensor sensors in the Linux operating system allows a hacker to gain access to protected information or cause service failures.

The vulnerability of the mp2629readraw function in the drivers/iio/adc/mp2629adc.c file of various types of built-in sensors in the Linux operating system is related to reading beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to access protected information or cau...

The vulnerability of the piix4_probe() function in the driver module i2c/busses/i2c-piix4.c of the I2C hardware layer of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the piix4probe function in the driver module i2c/busses/i2c-piix4.c of the I2C hardware layer of the Linux operating system is related to the occurrence of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the iio_device_register_eventset() function in the drivers/iio/industrialio-event.c module allows a hacker to cause a service failure for various types of built-in sensors in the Linux operating system.

The vulnerability of the iiodeviceregistereventset function in the drivers/iio/industrialio-event.c module of various types of embedded sensors for Linux operating systems is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the ANGLE library in Google Chrome and Microsoft Edge browsers allows a hacker to induce a service failure.

The vulnerability of the ANGLE library in Google Chrome and Microsoft Edge is related to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially crafted HTML page...

The vulnerability of the osnoise_cpus_write() function in the kernel/trace/trace_osnoise.c module, which supports Linux kernel tracing, allows a hacker to cause a service failure.

The vulnerability of the osnoisecpuswrite function in the kernel/trace/traceosnoise.c module, which supports kernel tracing in Linux operating systems, relates to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the p9_tag_alloc() function in the net/9p/client.c module of the 9P protocol implementation in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the p9tagalloc function in the net/9p/client.c module of the 9P protocol implementation in the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity...

The vulnerability of the sctpGenerateIftsn() function in the net/sctp/streamInterleave.c module of the Linux kernel allows a hacker to trigger a service failure.

The vulnerability of the sctpGenerateIftsn function in the net/sctp/streamInterleave.c module of the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the dm_integrity_ctr() function in the drivers/md/dm-integrity.c file of the support for multiple devices (RAID and LVM) in the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the dmintegrityctr function in the drivers/md/dm-integrity.c file of the support for multiple devices RAID and LVM in the Linux kernel is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to compromis...

The vulnerability of the nldev_stat_set_counter_dynamic_doit() function in the drivers/infiniband/core/nldev.c file of the Linux operating system’s kernel support for InfiniBand driver module allows a hacker to trigger a service failure.

The vulnerability of the nldevstatsetcounterdynamicdoit function in the drivers/infiniband/core/nldev.c file of the Linux operating system’s InfiniBand support driver module is related to a fixed-point overflow or cyclic shift. Exploiting this vulnerability could allow an attacker to cause a...

The vulnerability of the nft_do_chain() function in the net/netfilter/nf_tables_core.c module of the netfilter component of the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the nftdochain function in the net/netfilter/nftablescore.c module of the netfilter component of the Linux operating system is related to improper initialization. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the pci_get_other_drvdata() function in the drivers/net/ethernet/mellanox/mlx5/core/dev.c file of the Mellanox Ethernet network adapter support driver for Linux kernel allows a attacker to cause a service failure.

The vulnerability of the pcigetotherdrvdata function in the drivers/net/ethernet/mellanox/mlx5/core/dev.c file of the Mellanox Ethernet adapter support driver in the Linux operating system is related to an unauthorized call to a verification function. Exploiting this vulnerability could allow an...

The vulnerability of the mtk_iommu_remove() function in the drivers/iommu/mtk_iommu.c module of the Linux kernel’s IOMMU support driver allows a attacker to cause a service failure.

The vulnerability of the mtkiommuremove function in the drivers/iommu/mtkiommu.c module of the Linux kernel’s IOMMU support driver exposes confidential information. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the ni_write inode() function in the fs/ntfs3/frecord.c module of the NTFS file system in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the niwrite inode function in the fs/ntfs3/frecord.c file of the NTFS file system in the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...