92434 matches found
The vulnerability of the goldfish_tty_remove() function in the drivers/tty/goldfish.c module of the console TTY support driver for the Linux operating system allows a hacker to gain access to protected information.
The vulnerability of the goldfishttyremove function in the drivers/tty/goldfish.c module of the console TTY support driver for the Linux kernel exposes confidential information. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility o...
The vulnerability in the module include/uapi/linux/capability.h of the Linux operating system allows a perpetrator to gain access to protected information or cause a service failure.
The vulnerability in the include/uapi/linux/capability.h module of the Linux operating system is related to reading beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to access protected information or cause service failures...
The vulnerability of the lookup_rec() function in the kernel/trace/ftrace.c module, which supports Linux operating system tracing, allows an attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the lookuprec function in the kernel/trace/ftrace.c module, which supports kernel tracing in Linux operating systems, is related to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...
The vulnerability of the paging64_cmpxchg_gpte() function in the arch/x86/kvm/mmu/paging_tmpl.h subsystem of the virtualization subsystem on the Linux kernel-based x86 platform allows a attacker to cause a service failure.
The vulnerability of the paging64cmpxchggpte function in the arch/x86/kvm/mmu/pagingtmpl.h subsystem of the virtualization subsystem on the Linux x86 kernel platform is related to the use of insufficiently random values. Exploiting this vulnerability could allow an attacker to cause a service...
The vulnerability of the rendering mechanism in Google Chrome and Microsoft Edge browsers allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the rendering mechanism in Google Chrome and Microsoft Edge browsers relates to reading data beyond the permitted range of memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...
The vulnerability of the ext4_mb_normalize_request() function in the fs/ext4/mballoc.c module of the Ext4 file system support module for Linux’s operating system allows a hacker to cause a service failure.
The vulnerability of the ext4mbnormalizerequest function in the fs/ext4/mballoc.c module of the Ext4 file system support module in the Linux operating system is related to the distribution of resources without any restrictions or regulations. Exploiting this vulnerability could allow a attacker t...
The vulnerability of the ena_init() function in the drivers/net/ethernet/amazon/ena/ena_netdev.c file of the Ethernet network adapter driver for the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the enainit function in the drivers/net/ethernet/amazon/ena/enanetdev.c file of the Ethernet network adapter driver for the Linux operating system exposes confidential information. Exploiting this vulnerability could allow an attacker to cause service failures...
The vulnerabilities of the functions l2cap_rx_state_recv() and l2cap_rx() in the net/bluetooth/l2cap_core.c module of the Linux kernel’s Bluetooth subsystem allow attackers to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the l2caprxstaterecv and l2caprx functions in the net/bluetooth/l2capcore.c module of the Linux kernel’s Bluetooth subsystem is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...
The vulnerability of the __reg_bound_offset() function in the kernel/bpf/verifier.c module, which is part of the BPF interpreter support for the Linux operating system’s kernel, allows a hacker to trigger a service failure.
The vulnerability of the regboundoffset function in the kernel/bpf/verifier.c module, which is part of the BPF interpreter support for Linux’s operating system, relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to...
The vulnerability of the ANGLE library in Google Chrome and Microsoft Edge browsers allows a hacker to induce a service failure.
The vulnerability of the ANGLE library in Google Chrome and Microsoft Edge is related to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially crafted HTML page...
The vulnerability of the i40e_diag_test() function in the drivers/net/ethernet/intel/i40e/i40e_ethtool.c source code of the Intel Ethernet network adapter driver for the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the i40ediagtest function in the drivers/net/ethernet/intel/i40e/i40eethtool.c file of the Intel Ethernet network adapter driver for the Linux operating system is related to improper cleaning or release of resources. Exploiting this vulnerability could allow an attacker to...
The vulnerability of the mISDN_dsp_element_register() function in the drivers/isdn/mISDN/dsp_pipeline.c module of the Linux operating system’s ISDN driver framework allows a hacker to cause a service failure.
The vulnerability of the mISDNdspelementregister function in the drivers/isdn/mISDN/dsppipeline.c module of the Linux operating system’s ISDN driver framework is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the Dawn component in the Google Chrome browser allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Dawn component in the Google Chrome browser is related to a potential overflow condition. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information through a specially created HTML page...
The vulnerability of the Skia graphic library used by Google Chrome and Microsoft Edge allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the Skia graphic library in Google Chrome and Microsoft Edge relates to reading beyond the permitted range of memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information through a special...
The vulnerabilities in the functions prelim_release() and find_parent_nodes() of the fs/btrfs/backref.c module in the btrfs file system of the Linux operating system allow a attacker to cause a service failure.
The vulnerability of the functions prelimrelease and findparentnodes in the fs/btrfs/backref.c file from the Btrfs file system in the Linux operating system is related to the execution of a loop with an unreachable exit condition «Infinite loop». Exploiting this vulnerability could allow an...
The vulnerability of the WebAudio component in the Google Chrome browser, which allows a hacker to trigger a service failure.
The vulnerability of the WebAudio component in the Google Chrome browser relates to reading data beyond the permitted range in memory. Exploiting this vulnerability could allow a malicious actor to cause a service failure through a specially crafted HTML page...
The vulnerability of the qca_close() function in the drivers/bluetooth/hci_qca.c module of the Bluetooth device support driver for Linux operating systems allows a malicious actor to cause a service failure.
The vulnerability of the qcaclose function in the drivers/bluetooth/hciqca.c module of the Linux Bluetooth device driver framework is related to improper cleanup or release of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the dependency manager for PHP Composer arises from insufficient elimination of special elements in the request, allowing a malicious actor to execute arbitrary code.
The vulnerability of the dependency manager for PHP Composer is related to insufficient elimination of special elements in the request. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the ath9k_wmi_cmd() function in the drivers/net/wireless/ath/ath9k/wmi.c driver for the Atheros/Qualcomm wireless adapter driver in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the ath9kwmicmd function in the drivers/net/wireless/ath/ath9k/wmi.c driver for the Atheros/Qualcomm wireless adapter in the Linux operating system is related to buffer overflow exploits. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...
The vulnerability of the mongo-c-driver library, related to the pointer dereferencing when its validity period has expired, allows attackers to trigger a service failure.
The vulnerability of the mongo-c-driver library lies in the dereferencing of a pointer with an expired lifetime. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the libexpat library for analyzing XML files is related to algorithmic complexity, which allows attackers to cause a service failure.
The vulnerability of the libexpat library for analyzing XML files is related to its algorithmic complexity. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the HTTP-proxy server Tinyproxy, related to integer overflows, allows attackers to induce a service failure.
The vulnerability of the HTTP proxy server Tinyproxy is related to a numerical overflow condition. Exploiting this vulnerability could allow an attacker, operating remotely, to cause a service failure...
The vulnerability of the adjust_inuse_and_calc_cost() function in the block/blk-iocost.c module of the Linux kernel’s block-level support mechanism allows a attacker to trigger a service failure.
The vulnerability of the adjustinuseandcalccost function in the block/blk-iocost.c module, which supports the block-level kernel in the Linux operating system, is related to the occurrence of mutual locking. Exploiting this vulnerability could allow an attacker to trigger a service failure...
The vulnerability of the xskbind() function in the net/xdp/xsk.c module, which implements networking functions for the Linux operating system’s kernel, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the xskbind function in the net/xdp/xsk.c module, which implements networking functions for the Linux operating system’s kernel, is related to errors during the update of the link counters. Exploiting this vulnerability could allow an attacker to compromise the confidentialit...
The vulnerability of the Python Markdown library’s extensions, specifically pymdown-extensions, arises from the use of a regular expression “c” with inefficient computational complexity. This allows attackers to trigger a denial-of-service attack.
The vulnerability of the pymdown-extensions extension for the Python Markdown library is related to the use of a regular expression with inefficient computational complexity. Exploiting this vulnerability could allow an attacker to cause service interruptions remotely...
The vulnerability of the ip_vs_app_net_cleanup() function in the net/netfilter/ipvs/ip_vs_app.c module of the netfilter component of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the ipvsappnetcleanup function in the net/netfilter/ipvs/ipvsapp.c module of the netfilter component of the Linux operating system is related to improper initialization. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...
The vulnerability of the Wireshark traffic analyzer relates to writing beyond the buffer boundaries in memory, allowing a hacker to execute arbitrary code.
The vulnerability of the Wireshark traffic analyzer relates to writing beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the dax_fs_init() function in the drivers/dax/super.c module of the Linux operating system’s device support driver for DAX (direct access mapping devices) allows a attacker to cause a service failure.
The vulnerability of the daxfsinit function in the drivers/dax/super.c module of the Linux kernel’s DAX device support driver is related to a buffer overflow based on a stack. Exploiting this vulnerability could allow an attacker to cause a system failure...
The vulnerabilities in the drivers/net/ethernet/google/gve/gve_ethtool.c and drivers/net/ethernet/google/gve/gve_main.c modules of the Linux operating system allow a hacker to cause a service failure.
The vulnerability in the drivers/net/ethernet/google/gve/gveethtool.c and drivers/net/ethernet/google/gve/gvemain.c modules of the Linux operating system is related to incorrect calculation of buffer sizes. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the rx_macro_load_compander_coeff() function in the sound/soc/codecs/lpass-rx-macro.c module allows a hacker to access protected information or cause a service failure in the Linux operating system’s SoC kernel.
The vulnerability of the rxmacroloadcompandercoeff function in the sound/soc/codecs/lpass-rx-macro.c module of the Linux operating system’s sound support module is related to the execution of operations outside of the buffer. Exploiting this vulnerability could allow an attacker to access protect...
The vulnerability of the OpenSearch software package, related to unregulated recursion, allows a hacker to trigger a service failure.
The vulnerability of the OpenSearch software package is related to an uncontrolled recursion. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause service failures...
The vulnerability of the __remove_instance() function in the kernel/trace/trace.c module, which supports Linux kernel tracing, allows a malicious actor to cause a service failure.
The vulnerability of the removeinstance function in the kernel/trace/trace.c module, which supports Linux kernel tracing, is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the free_policy_dbs_info() function in the drivers/cpufreq/cpufreq_governor.c module of the Linux kernel frequency scaling driver module allows a hacker to trigger a service failure.
The vulnerability of the freepolicydbsinfo function in the drivers/cpufreq/cpufreqgovernor.c module, a driver for managing Linux kernel frequency scaling, is related to state management errors. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the max_corrected_read_errors_store() function in the drivers/md/md.c module of the multi-device (RAID and LVM) Linux kernel driver allows a malicious actor to cause service failure.
The vulnerability of the maxcorrectedreaderrorsstore function in the drivers/md/md.c module of the Linux device driver for multiple devices RAID and LVM involves copying buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability can allow a...
The vulnerability of the crb_acpi_add() function in the drivers/char/tpm/tpm_crb.c file of the Linux operating system’s alphabetic device driver module allows a attacker to cause a service failure.
The vulnerability of the crbacpiadd function in the drivers/char/tpm/tpmcrb.c file of the Linux operating system’s alphabetic device driver suite is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the Wireshark traffic analyzer relates to writing beyond the buffer boundaries in memory, allowing a hacker to execute arbitrary code.
The vulnerability of the Wireshark traffic analyzer relates to writing beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the rk3399_dmcfreq_remove() function in the drivers/devfreq/rk3399_dmc.c driver module allows a hacker to cause a service failure. This vulnerability relates to the dynamic scaling of voltage and frequency of the Linux kernel, which is part of the dynamic frequency scaling support.
The vulnerability of the rk3399dmcfreqremove function in the drivers/devfreq/rk3399dmc.c driver module related to the Linux kernel’s dynamic voltage and frequency scaling support is associated with state management errors. Exploiting this vulnerability could allow an attacker to cause a system...
The vulnerability of the `ftrace_func_mapper_add_ip()` function in the kernel/trace/ftrace.c module, which supports kernel tracing in Linux operating systems, allows a hacker to cause a service failure.
The vulnerability of the ftracefuncmapperaddip function in the kernel/trace/ftrace.c module, which supports kernel tracing in Linux operating systems, is related to improper control of resource identifiers “resource injection”. Exploiting this vulnerability could allow an attacker to trigger a...
The vulnerability of the __cld_pipe_inprogress_downcall() function in the fs/nfsd/nfs4recover.c module, which supports the Network File System in Linux kernels, allows a attacker to cause a service failure.
The vulnerability of the cldpipeinprogressdowncall function in the fs/nfsd/nfs4recover.c module, which is part of the NFS network file system support in Linux kernels, is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the python-socketio library, related to deserialization mechanism flaws, allows attackers to execute arbitrary code.
The vulnerability of the python-socketio library is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...
The vulnerability of the pnp_alloc_dev() function in the drivers/pnp/core.c module of the Linux kernel allows a remote attacker to cause a service failure.
The vulnerability of the pnpallocdev function in the drivers/pnp/core.c module of the Linux kernel is related to improper memory release. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...
The vulnerability of the snd_soc_new_compress() function in the sound/soc/soc-compress.c module allows a hacker to cause a system failure in Linux-based SoC systems.
The vulnerability of the sndsocnewcompress function in the sound/soc/soc-compress.c module, which is part of the Linux SoC audio support, relates to the pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a system failure...
The vulnerability of the bcm_tx_setup() function in the net/can/bcm.c module of the Linux kernel’s CAN subsystem allows a hacker to cause a service failure.
The vulnerability of the bcmtxsetup function in the net/can/bcm.c module of the Linux kernel’s CAN subsystem is related to access to an uninitialized pointer. Exploiting this vulnerability could allow a attacker to cause a system failure...
The vulnerability of the stmmac_adjust_time() function in the drivers/net/ethernet/stmicro/stmmac/stmmac_ptp.c file of the Ethernet adapter support driver from STMicroelectronics’ operating system Linux allows a hacker to cause a service failure.
The vulnerability of the stmmacadjusttime function in the drivers/net/ethernet/stmicro/stmmac/stmmacptp.c file of the Ethernet adapter support driver from STMicroelectronics’ operating system Linux is related to improper locking of resources. Exploiting this vulnerability could allow an attacker ...
The vulnerability of the Unbound DNS server, related to the loading of external, unreliable data alongside reliable data, allows a hacker to execute arbitrary code.
The vulnerability of the Unbound DNS server relates to the loading of external, unreliable data alongside reliable data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the es58x_alloc_rx_urbs() function in the drivers/net/can/usb/etas_es58x/es58x_core.c module of the Linux network device driver, which allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the es58xallocrxurbs function in the drivers/net/can/usb/etases58x/es58xcore.c module of the Linux network device driver framework is related to the distribution of resources without any restrictions or regulation. Exploiting this vulnerability allows a remote attacker to...
The vulnerability of the Golang programming language, related to writing beyond buffer boundaries in memory, allows attackers to execute arbitrary code.
The vulnerability of the Go programming language is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of the cpufreqpolicyalloc() function in the drivers/cpufreq/cpufreq.c module of the Linux kernel frequency scaling driver allows a attacker to cause a system failure.
The vulnerability of the cpufreqpolicyalloc function in the drivers/cpufreq/cpufreq.c module of the Linux kernel frequency scaling driver is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...
The vulnerability of the `pte_user_accessible_page()` function in the `arch/arm64/include/asm/pgtable.h` header, which is part of the ARM 64-bit kernel support for the Linux operating system. This vulnerability allows a malicious actor to cause a service failure.
The vulnerability of the pteuseraccessiblepage function in the arch/arm64/include/asm/pgtable.h header, which is part of the ARM 64-bit kernel support for the Linux operating system, involves copying buffers without checking their size—a classic buffer overflow attack. Exploiting this vulnerabili...
The vulnerability of the __sync_icache_dcache() function in the arch/arm/mm/flush.c module, which is part of the ARM kernel support in the Linux operating system, allows a hacker to cause a service failure.
The vulnerability of the syncicachedcache function in the arch/arm/mm/flush.c module, which is part of the ARM kernel support in the Linux operating system, is related to changes in behavior under new versions or different environments. Exploiting this vulnerability could allow an attacker to cau...