Linux kernel networking process_auth_done()

The vulnerability of the processauthdone function in the net/ceph/messengerv2.c module, which is part of the Linux kernel’s networking functions, relates to reading beyond the buffer boundaries. Exploiting this vulnerability could allow a malicious actor to gain access to protected information or...

Direct Rendering Infrastructure Heap Buffer Overflow DoS

The vulnerability of the xeoaaddconfigioctl function in the drivers/gpu/drm/xe/xeoa.c module of the Direct Rendering Infrastructure DRI driver for the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability can allow an attacker to cause a...

ImageMagick ReadYUVImage Code Execution

The vulnerability of the ReadYUVImage function in the ImageMagick console graphics editor’s coders/yuv.c file is related to writing beyond buffer boundaries. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code, disclose sensitive information, or cause service...

Linux kernel io_uring Heap Buffer Overflow DoS

The vulnerability of the ioopenatprep function in the iouring/openclose.c module, which is part of the Linux kernel’s asynchronous input/output interface, relates to the failure to release resources after their useful period has ended. Exploiting this vulnerability could allow an attacker to caus...

Linux netfilter IDLETIMER DoS

The vulnerability of the net/netfilter/xtIDLETIMER.c component in the Linux operating system is related to the use of an uninitialized resource. Exploiting this vulnerability could allow a attacker to cause a service failure...

Linux netfilter API DoS

The vulnerability of the net/netfilter/nftablesapi.c component in the Linux operating system is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure...

GnuTLS merge_handshake_packet() DoS

The vulnerability of the mergehandshakepacket function in the GnuTLS cryptographic library is related to errors in processing parameter values related to input data length. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

libheif Overlay DoS

The vulnerability of the HeifPixelImage::overlay function in the libheif library is related to the situation where the operation’s output goes beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

ImageMagick DIB Module Code Execution

The vulnerability of the module for working with the DIB format in the console-based graphic editor ImageMagick is related to reading data beyond the allowed range of memory. Exploiting this vulnerability allows an attacker to execute arbitrary code, disclose sensitive information, and cause...

ImageMagick WriteUHDRImage Buffer Overflow DoS

The vulnerability of the WriteUHDRImage function in the ImageMagick console graphics editor’s coders/uhdr.c file is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

ImageMagick Code Execution

The vulnerability of the Sun console-based graphic editor ImageMagick relates to a numerical overflow condition. Exploiting this vulnerability allows an attacker to execute arbitrary code...

ImageMagick SIXEL Memory Corruption DoS

The vulnerability of the SIXEL decoder in the console-based image editing software ImageMagick is related to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to cause a service failure...

ImageMagick MAP Decoder Unauthenticated Access DoS

The vulnerability of the MAP image decoder in the console-based image editing software ImageMagick relates to reading values that fall outside the permitted range in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information or cause service...

ImageMagick MagnifyImage Code Execution

The vulnerability of the MagnifyImage function in the console-based image editing tool ImageMagick is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause a service failure...

Linux kernel network device driver module Use-After-Free

The vulnerability of the teamqueueoverrideenabledcheck function in the drivers/net/team/teamcore.c file of the Linux kernel’s network device driver is related to the occurrence of operations outside of memory buffers. Exploiting this vulnerability could allow an attacker to compromise the...

Linux kernel imxfb_probe() Buffer Overflow DoS

The vulnerability of the imxfbprobe function in the drivers/video/fbdev/imxfb.c file of the Linux kernel-based device driver for frame buffer devices is related to the reallocation of previously released memory. Exploiting this vulnerability could allow an attacker to cause a system failure...

lib/handlebars/runtime.js Handlebars Template Access Confidential Data Compromise

The vulnerability of the resolvePartial function in the lib/handlebars/runtime.js component, a tool for creating Handlebars templates, is related to the lack of security measures for protecting the structure of web pages. Exploiting this vulnerability could allow an attacker to gain access to...

Apache Kafka OAuth Bypass Unauthorized Access

The vulnerability of the org.apache.kafka.common.security.oauthbearer.DefaultJwtValidator class in the Apache Kafka messaging broker is related to incorrect validation of specified indexes, positions, or offsets in input data. Exploiting this vulnerability could allow an attacker to bypass securi...

Linux kernel team_port_add() Buffer Overflow

The vulnerability of the teamportadd function in the drivers/net/team/teamcore.c file of the Linux kernel’s network device driver is related to state management errors. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of protect...

Linux sch_ets Heap Buffer Overflow DoS

The vulnerability of the etsqdiscchange function in the net/sched/schets.c file, within the net/sched subsystem of the Linux kernel’s network management mechanism, relates to operations involving resources after their expiration. Exploiting this vulnerability could allow an attacker to compromise...

dsa_switch_parse Heap Buffer Overflow DoS

The vulnerability of the dsaswitchparse function in the net/dsa/dsa.c module relates to the improper release of resources in support for Linux’s distributed kernel architecture. Exploiting this vulnerability could allow an attacker to cause service failures...

ImageMagick DoS

The vulnerability of the console-based graphic editor ImageMagick is related to a offset error of one unit. Exploiting this vulnerability can allow an attacker to cause a service failure...

ImageMagick MVG Decoder DoS

The vulnerability of the MVG format decoder in the console-based image editing software ImageMagick is related to reading data outside of the allowed range in memory. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

ImageMagick WriteASHLARImage DoS

The vulnerability of the WriteASHLARImage function in the ImageMagick console graphics editor’s coders/ashlar.c file is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux kernel fs/xattr DoS

The vulnerability of the fs/xattr component in the Linux operating system’s kernel is related to uncontrolled memory consumption. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux Ethernet Network Adapter Driver Heap Buffer Overflow DoS

The vulnerability of the hclgevfknicsetup function in the drivers/net/ethernet/hisilicon/hns3/hns3vf/hclgevfmain.c file of the Linux kernel’s Ethernet network adapter driver is related to the lack of resource initialization. Exploiting this vulnerability could allow an attacker to cause a system...

Linux kernel perf Resource Lifetime Expiration DoS

The vulnerability of the perf component in the Linux operating system’s kernel is related to the expiration of a resource’s lifespan. Exploiting this vulnerability can allow an attacker to trigger a service failure...

MP4Box Heap Buffer Overflow DoS

The vulnerability of the gfxmlparsebitsequencebs function in the MP4Box packaging tool of the GPAC multimedia platform is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause service failur...

Libjxl Uninitialized Resource DoS

The vulnerability of the Libjxl library is related to the use of an uninitialized resource. Exploiting this vulnerability could allow a malicious actor to cause service failures...

golang-x-image DoS

The vulnerability of the golang-x-image package, a programming language, is related to an exception handling error. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

ImageMagick PNG Encoder DoS

The vulnerability of the PNG encoder in the console-based graphic editor ImageMagick relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...

Libde265 Heap Buffer Overflow DoS

The vulnerability of the picparameterset::setderivedvalues function in the h.265 Libde265 codec implementation is related to pointer manipulation. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

ImageMagick magick/profile.c Code Execution

The vulnerability of the magick/profile.c file, a console-based image editing tool from ImageMagick, is related to a memory reclamation error. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

ImageMagick ReadSFWImage DoS

The vulnerability of the ReadSFWImage function in the ImageMagick console graphics editor’s coders/sfw.c file is related to pointer manipulation errors. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

ImageMagick Parser Code Execution

The vulnerability of the console-based graphic editor ImageMagick relates to the possibility of using memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code, gain unauthorized access to confidential information, and cause service failures...

ImageMagick Decoder Unauthenticated Access DoS

The vulnerability of the decoder for Photo CD PCD format in the console-based graphic editor ImageMagick involves reading data outside of the permitted range in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information or cause service failur...

ImageMagick UHDR Encoder DoS

The vulnerability of the UHDR encoder in the console-based image editing software ImageMagick is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux sch_ets Heap Buffer Overflow DoS

The vulnerability of the etsqdiscchange function in the net/sched/schets.c file, within the network scheduling subsystem of the Linux kernel, is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

Linux kernel dm-clone-target Buffer Overflow DoS

The vulnerability of the clonedtr function in the drivers/md/dm-clone-target.c file of the Linux kernel driver for multiple device types RAID and LVM is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux kernel Tegra Clock Init Heap Buffer Overflow DoS

The vulnerability of the tegra114clockinit function in the drivers/clk/tegra/clk-tegra114.c file of the Samsung Exynos Linux kernel driver relates to errors during the update of the link counters. Exploiting this vulnerability could allow an attacker to cause a service failure...

Tenda login() Full Access

The vulnerability of the login function in Tenda router software-based microprogramming systems is related to the presence of undocumented configuration commands. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain full access to the device’s web interface...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the jbd2fcwaitbufs function in the fs/jbd2/journal.c file of the Linux kernel file system is related to errors during the update of the reference counter. Exploiting this vulnerability could allow an attacker to cause a service failure...

Handlebars Template Creation Tool Compile DoS

The vulnerability of the compile function in the Handlebars template creation tool is related to improper code generation. Exploiting this vulnerability could allow an attacker to cause service failures...

Handlebars.compile() DoS

The vulnerability of the Handlebars.compile function, a tool for creating Handlebars templates, is related to improper handling of code generation. Exploiting this vulnerability could allow an attacker to cause service failures...

Exim Buffer Overflow Info Disclosure

The vulnerability of the Exim mail server is related to reading data from buffer beyond the allowed limits. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data...

Linux Ethernet Driver Buffer Overflow

The vulnerability of the functions qlcnic83xxinit drivers/net/ethernet/qlogic/qlcnic/qlcnic83xxinit.c and qlcnicprobe drivers.net/ethernet/qlogic/qlcnic/qlcnicmain.c in the Linux operating system’s Ethernet network adapter drivers is related to the reuse of previously freed memory. Exploiting thi...

Linux Kernel ERSPAN DoS

The vulnerability of the iptunnelinfo structure in the ERSPAN technology of Linux operating systems is related to the use of an uninitialized resource. Exploiting this vulnerability could allow a attacker to cause a service failure...

Intel Ethernet driver Network Information Disclosure

The vulnerability of the iavfconfigrssreg function in the driver/net/ethernet/intel/iavf/iavfmain.c file of the Intel Ethernet network adapter driver for the Linux operating system is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to...

Linux kernel CAN Network Device Driver Use-After-Free

The vulnerability of the gsusbxmitcallback function in the drivers/net/can/usb/gsusb.c file of the Linux network device driver module is related to the failure to release resources after their useful life has ended. Exploiting this vulnerability could allow an attacker to compromise the...

Linux RISCV arch_uprobe_copy_ixol Heap Buffer Overflow DoS

The vulnerability of the archuprobecopyixol function in the arch/riscv/kernel/probes/uprobes.c module of the platform management subsystem for the RISCV architecture of the Linux operating system is related to the use of insufficiently random values. Exploiting this vulnerability could allow an...