92434 matches found
The vulnerability of the dwc3_gadget_ep_skip_trbs() function in the drivers/usb/dwc3/gadget.c module of the Linux device support driver allows a hacker to cause a service failure.
The vulnerability of the dwc3gadgetepskiptrbs function in the drivers/usb/dwc3/gadget.c module of the Linux device support driver framework is related to a stack-based buffer overflow. Exploiting this vulnerability could allow an attacker to cause a system failure...
The vulnerability of the mpi3mr_get_all_tgt_info() function in the drivers/scsi/mpi3mr/mpi3mr_app.c file of the Linux operating system’s SCSI device driver module allows a hacker to cause a service failure.
The vulnerability of the mpi3mrgetalltgtinfo function in the drivers/scsi/mpi3mr/mpi3mrapp.c file of the Linux SCSI device driver module is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the dwc3_probe() function in the drivers/usb/dwc3/core.c file of the DesignWare USB3 controller driver in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the dwc3probe function in the drivers/usb/dwc3/core.c file of the DesignWare USB3 driver for the Controler-based Linux operating system is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the mgmt_init_hdev() function in the net/bluetooth/mgmt.c module of the Linux kernel’s Bluetooth subsystem allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the mgmtinithdev function in the net/bluetooth/mgmt.c module of the Linux kernel’s Bluetooth subsystem is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and...
The vulnerability of the _nfs4_discover_trunking() function in the fs/nfs/nfs4proc.c module, which is part of the NFS client support in Linux kernel, allows a attacker to cause a service failure.
The vulnerability of the nfs4discovertrunking function in the fs/nfs/nfs4proc.c module, which is part of the NFS client support in Linux kernel, involves exposing confidential information. Exploiting this vulnerability could allow an attacker to cause service failures...
The vulnerability of the construct_alloc_key() function in the security/keys/request_key.c module of the Linux kernel’s key management component allows a attacker to cause a service failure.
The vulnerability of the constructallockey function in the security/keys/requestkey.c module of the Linux kernel’s key management component is related to insufficient comparison. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the perl-Crypt-Urandom-Token module, related to insufficient entropy, allows attackers to gain unauthorized access to protected information.
The vulnerability of the perl-Crypt-Urandom-Token module is related to insufficient entropy. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
The vulnerability of the pass_establish() function in the drivers/infiniband/hw/cxgb4/cm.c module of the Linux kernel’s InfiniBand driver allows a attacker to cause a service failure.
The vulnerability of the passestablish function in the drivers/infiniband/hw/cxgb4/cm.c module of the Linux kernel driver for InfiniBand relates to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the imx_pd_connector_get_modes() function in the drivers/gpu/drm/imx/parallel-display.c driver, which supports the Direct Rendering Infrastructure (DRI) of the Linux operating system’s kernel, allows a malicious actor to cause a service failure.
The vulnerability of the imxpdconnectorgetmodes function in the drivers/gpu/drm/imx/parallel-display.c driver, which supports the Direct Rendering Infrastructure DRI of the Linux operating system’s kernel, is related to improper memory release. Exploiting this vulnerability could allow an attacke...
The vulnerability of the cpsw_ethtool_op_begin() function in the drivers/net/ethernet/ti/cpsw_ethtool.c module of the Ethernet adapter support driver for Texas Instruments’ Linux kernel allows a hacker to cause a service failure.
The vulnerability of the cpswethtoolopbegin function in the drivers/net/ethernet/ti/cpswethtool.c module of the Ethernet adapter support driver for Texas Instruments’ Linux kernel exposes confidential information. Exploiting this vulnerability could allow an attacker to cause service failures...
The vulnerabilities of the functions wcd938x_tx_mode_get() and wcd938x_rx_hph_mode_get() in the sound module/soc/codecs/wcd938x.c, which are part of the Linux operating system’s SoC audio support, allow attackers to gain access to protected information or cause service failures.
The vulnerabilities of the functions wcd938xtxmodeget and wcd938xrxhphmodeget in the sound module/soc/codecs/wcd938x.c are related to buffer overflow attacks. Exploiting these vulnerabilities can allow attackers to gain access to protected information or cause system failures...
The vulnerability of the `rx_macro_get_hph_pwr_mode()` function in the sound module/soc/codecs/lpass-rx-macro.c file, which is part of the Linux operating system’s SoC audio support, allows a hacker to gain access to protected information or cause a service failure.
The vulnerability of the rxmacrogethphpwrmode function in the sound module/soc/codecs/lpass-rx-macro.c file, which is part of the Linux operating system’s sound support for SoC cores, involves reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to access...
The vulnerability of the fpu_alloc_guest_fpstate() function in the arch/x86/kernel/fpu/core.c module, which is part of the Linux operating system’s x86 kernel support, allows a hacker to trigger a service failure.
The vulnerability of the fpuallocguestfpstate function in the arch/x86/kernel/fpu/core.c module of the Linux operating system’s kernel support for x86 platforms is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the ocelot_stats_deinit() function in the drivers/net/ethernet/mscc/ocelot_stats.c module of the Microsemi network adapter driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the ocelotstatsdeinit function in the drivers/net/ethernet/mscc/ocelotstats.c module of the Microsemi network adapter driver for the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to...
The vulnerability of the atl_resume_common() function in the drivers/net/ethernet/aquantia/atlantic/aq_pci_func.c file of the Ethernet adapter support driver for the AQuantia Atlantic motherboard in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the atlresumecommon function in the drivers/net/ethernet/aquantia/atlantic/aqpcifunc.c file of the Ethernet adapter support driver for the AQuantia Atlantic chipset in the Linux operating system exposes confidential information. Exploiting this vulnerability could allow an...
The vulnerability of the functions test_no_shared_qgroup() and test_multiple_refs() in the fs/btrfs/tests/qgroup-tests.c file of the btrfs filesystem in the Linux operating system allows a attacker to cause a service failure.
The vulnerabilities of the functions testnosharedqgroup and testmultiplerefs in the fs/btrfs/tests/qgroup-tests.c file of the btrfs filesystem in the Linux operating system involve unconstrained and unrestricted resource allocation. Exploiting these vulnerabilities could allow an attacker to caus...
The vulnerability of the cdns3_allocate_trb_pool() function in the drivers/usb/cdns3/cdns3-gadget.c file of the Linux device driver framework allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the cdns3allocatetrbpool function in the drivers/usb/cdns3/cdns3-gadget.c driver for Linux USB device drivers is related to the distribution of resources without any restrictions or regulation. Exploiting this vulnerability could allow an attacker to compromise the...
The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine allows attackers to trigger a service failure.
The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow a malicious actor to cause a service failure through a specially crafted HTML page...
The vulnerability of the loop_queue_rq() function in the drivers/block/loop.c module of the Linux kernel’s block devices driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the loopqueuerq function in the drivers/block/loop.c module of the Linux kernel’s block devices driver is related to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...
The vulnerability of the ccu_mp_recalc_rate() function in the drivers/clk/sunxi-ng/ccu_mp.c module of the Linux operating system’s Samsung Exynos CPU driver allows a malicious actor to cause a service failure.
The vulnerability of the ccumprecalcrate function in the drivers/clk/sunxi-ng/ccump.c module of the Linux-based Samsung Exynos CPU controller driver is related to a division by zero error. Exploiting this vulnerability could allow an attacker to cause a system failure...
The vulnerability of the idpf_vport_rel() function in the drivers/net/ethernet/intel/idpf/idpf_lib.c file of the Intel Ethernet network adapter driver for the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the idpfvportrel function in the drivers/net/ethernet/intel/idpf/idpflib.c file of the Intel Ethernet network adapter driver for the Linux operating system is related to improper memory release. Exploiting this vulnerability could allow a remote attacker to cause a service...
The vulnerability of the bridge_platform_create() function in the arch/mips/sgi-ip27/ip27-xtalk.c module, which supports the MIPS architecture of the Linux operating system, allows a attacker to cause a service failure.
The vulnerability of the bridgeplatformcreate function in the arch/mips/sgi-ip27/ip27-xtalk.c module, which is part of the Linux operating system’s MIPS architecture support, is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the WebRTC component in Google Chrome and Microsoft Edge browsers allows a hacker to induce a service failure.
The vulnerability of the WebRTC component in Google Chrome and Microsoft Edge relates to the possibility of using memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure through a specially created HTML page...
The vulnerability of the pcf50633_adc_async_read() function in the drivers/mfd/pcf50633-adc.c module of the control device multifunctional devices driver for the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the pcf50633adcasyncread function in the drivers/mfd/pcf50633-adc.c module of the Linux kernel’s multifunctional device controller driver relates to the lack of checking for the return value. Exploiting this vulnerability could allow an attacker to cause a system failure...
The vulnerability of the WebGL component in Google Chrome and Microsoft Edge browsers allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of Google Chrome and Microsoft Edge browsers’ WebGL component relates to reading data beyond the permitted range in memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information through a...
The vulnerability of the dccp_error() function in the net/netfilter/nf_conntrack_proto_dccp.c module of the netfilter component in the Linux operating system allows a attacker to cause a service failure.
The vulnerability of the dccperror function in the net/netfilter/nfconntrackprotodccp.c module of the netfilter component in the Linux operating system is related to buffer overflow based on a stack. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the FTP server vsftpd, related to integer overflows, allows attackers to cause service interruptions.
The vulnerability of the FTP server vsftpd is related to integer overflow. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the nv3_arb() function in the Linux kernel’s driver/video/fbdev/riva/riva_hw.c file allows a hacker to cause a service failure.
The vulnerability of the nv3arb function in the Linux kernel’s drivers/video/fbdev/riva/rivahw.c file is related to incorrect zero division operations. Exploiting this vulnerability can allow an attacker to cause system failures...
The vulnerability of the openstack-barbican component in the Red Hat OpenStack Platform cloud service platform allows a hacker to gain unauthorized access to protected information.
The vulnerability of the openstack-barbican component in the Red Hat OpenStack Platform cloud service platform is related to errors in information processing. Exploiting this vulnerability may allow an attacker to gain unauthorized access to protected information...
The vulnerability of the Elastick Stack Filebeat software for logging files lies in its ability to exploit unlimited resource distribution, allowing a hacker to trigger a service failure.
The vulnerability of the Elastick Stack Filebeat software for logging files is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...
The vulnerability of the Kubernetes cluster management software lies in insufficient validation of incoming requests, allowing a hacker to execute a SSRF attack.
The vulnerability of the Kubernetes cluster management software is related to insufficient validation of incoming requests. Exploiting this vulnerability allows a remote attacker to execute a SSRF attack...
The vulnerability of the authentication and authorization protocol used by software for generating real-time failure reports in Sentry allows a perpetrator to circumvent existing security restrictions.
The vulnerability of the authentication and authorization protocol used by Sentry software for generating real-time failure reports is related to bypassing the authentication process by using an alternative path or channel. Exploiting this vulnerability allows a malicious actor to circumvent...
The vulnerability of the Grafana monitoring and surveillance platform, related to uncontrolled resource consumption, allows a hacker to trigger a service failure.
The vulnerability of the Grafana monitoring and observation platform is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
The vulnerability of the stk1160_disconnect() function in the drivers/media/usb/stk1160/stk1160-core.c file of the Linux operating system’s multimedia device driver support module allows a malicious actor to cause a service failure.
The vulnerability of the stk1160disconnect function in the drivers/media/usb/stk1160/stk1160-core.c file of the Linux operating system’s multimedia device driver framework is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting...
The vulnerability of the snic_tgt_create() function in the drivers/scsi/snic/snic_disc.c module of the Linux SCSI device driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the snictgtcreate function in the drivers/scsi/snic/snicdisc.c driver for Linux SCSI devices is related to the use of memory after deallocation. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the...
The vulnerability of the irdma_cm_teardown_connections() function in the drivers/infiniband/hw/irdma/cm.c file of the Linux kernel’s InfiniBand support driver allows a attacker to cause a service failure.
The vulnerability of the irdmacmteardownconnections function in the drivers/infiniband/hw/irdma/cm.c file of the Linux kernel’s InfiniBand support module is related to a stack-based buffer overflow. Exploiting this vulnerability could allow an attacker to trigger a service failure...
The vulnerability of the error_state_read() function in the drivers/gpu/drm/i915/i915_sysfs.c file of the driver module allows a attacker to cause a service failure.
The vulnerability of the errorstateread function in the drivers/gpu/drm/i915/i915sysfs.c driver, a part of the Linux kernel’s Direct Rendering Infrastructure DRI support module, relates to the occurrence of operations outside the memory buffer boundaries. Exploiting this vulnerability could allow...
The vulnerability of the zfcp_fsf_req_send() function in the drivers/s390/scsi/zfcp_fsf.c module of the SCSI device driver on the S390 Linux operating system platform allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the zfcpfsfreqsend function in the drivers/s390/scsi/zfcpfsf.c module of the SCSI device driver on the S390 Linux operating system is related to the re-release of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the...
The vulnerability of the setup_bootmem() function in the arch/riscv/mm/init.c file of the module for the subsystem of module management on the RISCV architecture of the Linux operating system allows a attacker to access protected information or cause a service failure.
The vulnerability of the setupbootmem function in the arch/riscv/mm/init.c file of the module for the RISCV architecture subsystem of the Linux operating system’s kernel architecture is related to the copying of a buffer without checking the size of the input data a classic buffer overflow attack...
The vulnerability of the kvm_ipidestroy() function in the arch/loongarch/kvm/intc/ipi.c module, which is part of the LoongArch architecture support for the Linux operating system, allows a hacker to cause a service failure.
The vulnerability of the kvmipidestroy function in the arch/loongarch/kvm/intc/ipi.c module, which is part of the LoongArch Linux kernel support, is related to improper memory release. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...
The vulnerability of the WebRTC component in Google Chrome and Microsoft Edge browsers allows a hacker to induce a service failure.
The vulnerability of the WebRTC component in Google Chrome and Microsoft Edge relates to the possibility of using memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure through a specially created HTML page...
The vulnerability of the ath12k_mac_op_hw_scan() function in the drivers/net/wireless/ath/ath12k/mac.c file of the Atheros/Qualcomm wireless communication adapter driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the ath12kmacophwscan function in the drivers/net/wireless/ath/ath12k/mac.c file of the Atheros/Qualcomm wireless adapter driver for the Linux operating system is related to the pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the...
The vulnerability in the `float_to_int()` function of the drivers/hid/amd-sfh-hid/sfh1_1/amd_sfh_desc.c file of the Linux kernel subsystem for user interface devices’ driver, which allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the floattoint function in the drivers/hid/amd-sfh-hid/sfh11/amdsfhdesc.c file of the Linux kernel subsystem for user interface devices’ driver lies in the handling of buffer overflows. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...
The vulnerability of the `__fsl_mc_deviceremove_if_not_in_mc()` function in the drivers/bus/fsl-mc/dprc-driver.c file of the fslmc kernel driver for Linux operating systems allows a hacker to cause a service failure.
The vulnerability of the fslmcdeviceremoveifnotinmc function in the drivers/bus/fsl-mc/dprc-driver.c file, a driver for the fslmc bus in the Linux operating system, involves exposing confidential information. Exploiting this vulnerability could allow an attacker to cause service failures...
The vulnerability of the Base component in browsers Google Chrome and Microsoft Edge allows a perpetrator to trigger a service failure.
The vulnerability of the Base component in Google Chrome and Microsoft Edge relates to the ability to utilize memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure through a specially created HTML page...
The vulnerability of the MP4Box packaging module of the GPAC multimedia platform, related to the execution of operations beyond the buffer boundaries in memory, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the MP4Box packaging module of the GPAC multimedia platform is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...
The vulnerability of the JSON_SCHEMA_VALID() function in the MariaDB database management system allows a attacker to trigger a service failure and execute arbitrary code.
The vulnerability of the JSONSCHEMAVALID function in the MariaDB database management system is related to buffer overflows in dynamic memory. Exploiting this vulnerability could allow a malicious actor to cause service failures and execute arbitrary code by sending a specially crafted JSON file...
The vulnerability of the ingress controller in the Kubernetes cluster ingress-nginx, related to insufficient checking of unusual or exceptional states, allows a attacker to trigger a service failure.
The vulnerability of the ingress controller in the Kubernetes cluster ingress-nginx is related to insufficient checking of unusual or exceptional states. Exploiting this vulnerability could allow a malicious actor to cause service failures...
The vulnerability of the Avahi service detection system in local networks, related to the lack of use of the assert() function, allows a perpetrator to trigger a service failure.
The vulnerability of the Avahi service detection system in local networks is related to the lack of use of the assert function. Exploiting this vulnerability can allow a remote attacker to cause a service failure...
The vulnerability of the asix_read_cmd() function in the drivers/net/usb/asix_common.c module of the Linux kernel’s USB device driver support library allows a malicious actor to cause a service failure.
The vulnerability of the asixreadcmd function in the drivers/net/usb/asixcommon.c module of the Linux USB network adapter driver support framework is related to the lack of checking for the return value. Exploiting this vulnerability could allow an attacker to cause a service failure...