95883 matches found
The vulnerability of the nft_ct_expect_obj_eval() function in the net/netfilter/nft_ct.c module of the netfilter component of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the nftctexpectobjeval function in the net/netfilter/nftct.c module of the netfilter component of the Linux operating system is related to the failure to release resources after their useful life has ended. Exploiting this vulnerability could allow an attacker to compromise t...
The vulnerability of the tipc_bufAppend() function in the net/tipc/msg.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the tipcbufAppend function in the net/tipc/msg.c module of the Linux operating system is related to the repeated release of previously released memory. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and accessibility of...
The vulnerabilities in the net/netfilter/nf_nat_amanda.c and net/netfilter/nf_nat_sip.c modules of the Linux operating system allow attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the net/netfilter/nfnatamanda.c and net/netfilter/nfnatsip.c modules in the Linux operating system lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity,...
The vulnerability of the macvlan_get_size() function in the drivers/net/macvlan.c module of the Linux kernel’s network device drivers allows a attacker to cause a service failure.
The vulnerability of the macvlangetsize function in the drivers/net/macvlan.c file of the Linux kernel’s network device driver module is related to incorrect calculation of the buffer size. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the vmBindJobLockObjects() function in the drivers/gpu/drm/msm/msm_gem_vma.c file of the Direct Rendering Infrastructure (DRI) driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the vmBindJobLockObjects function in the drivers/gpu/drm/msm/msmgemvma.c file of the Direct Rendering Infrastructure DRI driver in the Linux operating system is related to improper locking of resources. Exploiting this vulnerability could allow an attacker to compromise the...
The vulnerability of the dpu_runtime_suspend() function in the drivers/gpu/drm/msm/disp/dpu1/dpu_kms.c file of the Direct Rendering Infrastructure (DRI) kernel driver of the Linux operating system allows a malicious actor to cause a service failure.
The vulnerability of the dpuruntimesuspend function in the drivers/gpu/drm/msm/disp/dpu1/dpukms.c file of the Direct Rendering Infrastructure DRI driver in the Linux operating system is related to improper resource release. Exploiting this vulnerability could allow a remote attacker to cause...
The vulnerability of the xdp_master_redirect() function in the net/core/filter.c module exposes network functions of the Linux kernel, allowing a hacker to cause a service failure.
The vulnerability of the xdpmasterredirect function in the net/core/filter.c module, which supports networking functions in Linux kernels, is related to pointer manipulation. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...
The vulnerability of the bpf_fd_array_map_clear() function in the kernel/bpf/arraymap.c module, which supports the BPF interpreter in Linux kernels, allows a hacker to trigger a service failure.
The vulnerability of the bpffdarraymapclear function in the kernel/bpf/arraymap.c module, which supports BPF interpreter in Linux kernels, is related to synchronization errors. Exploiting this vulnerability could allow an attacker to trigger a service failure...
The vulnerability of the sixpack_receive_buf() function in the drivers/net/hamradio/6pack.c module of the Linux kernel’s network device driver allows a hacker to cause a service failure.
The vulnerability of the sixpackreceivebuf function in the drivers/net/hamradio/6pack.c module of the Linux kernel’s network device driver is related to the execution of a loop with an unreachable exit condition „Infinite loop“. Exploiting this vulnerability could allow a remote attacker to cause...
The vulnerability of the btf_check_dtor_kfuncs() function in the kernel/bpf/btf.c module, which supports the BPF interpreter for Linux kernels, allows a attacker to cause a service failure.
The vulnerability of the btfcheckdtorkfuncs function in the kernel/bpf/btf.c module, which supports the BPF interpreter for Linux kernels, is related to improper security checks for standard elements. Exploiting this vulnerability could allow an attacker to cause service failures...
The vulnerability of the tbproperty_entry_valid() function in the drivers/thunderbolt/property.c module of the general support driver for USB4 and Thunderbolt in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the tbpropertyentryvalid function in the drivers/thunderbolt/property.c module of the general support driver for USB4 and Thunderbolt in the Linux operating system is related to the possibility of integer overflow. Exploiting this vulnerability could allow an attacker to...
The vulnerability of the phonet_deviceDestroy() function in the net/phonet/pn_dev.c module, a implementation of kernel networking functions in the Linux operating system, allows an attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the phonetdevicedestroy function in the net/phonet/pndev.c module, which is part of the Linux kernel’s networking functions, involves the dereferencing of a pointer with an expired lifetime. Exploiting this vulnerability could allow an attacker to compromise the...
The vulnerability of the isert_login_recvdone() function in the drivers/infiniband/ulp/isert/ib_isert.c module of the Linux operating system’s InfiniBand driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the isertloginrecvdone function in the drivers/infiniband/ulp/isert/ibisert.c driver of the Linux operating system’s InfiniBand module is related to incorrect assumptions regarding the organization of data or memory. Exploiting this vulnerability could allow a remote attacker...
The vulnerability of the `udp_read_skb()` function in the `net/ipv4/udp.c` module of the Linux operating system’s kernel-based IPv4 protocol implementation allows a attacker to cause a service failure.
The vulnerability of the udpreadskb function in the net/ipv4/udp.c module of the Linux kernel’s IPv4 protocol implementation is related to the lack of resource initialization. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
The vulnerability of the iptfsDestroyState() function in the net/xfrm/xfrm_iptfs.c module, which is part of the Linux kernel’s networking functions, allows a hacker to cause a service failure.
The vulnerability of the iptfsDestroyState function in the net/xfrm/xfrmiptfs.c module, which is part of the Linux kernel’s networking functions, is related to deficiencies in the deserialization mechanism due to insufficient protection of service data. Exploiting this vulnerability could allow a...
The vulnerability of the `register_shm_helper()` function in the `drivers/tee/tee_shm.c` driver for the trusted execution environment of the Linux kernel allows a attacker to cause a service failure.
The vulnerability of the registershmhelper function in the drivers/tee/teeshm.c file of the Linux kernel’s trusted execution environment driver relates to the failure to release resources after their useful life has ended. Exploiting this vulnerability could allow an attacker to cause a service...
The vulnerability of the validate_timestamp_and_nonce() function in the online training platform Open edX Platform allows attackers to circumvent security restrictions and gain unauthorized access to protected information.
The vulnerability of the validatetimestampandnonce function in the online training platform Open edX Platform relates to bypassing the authentication process. Exploiting this vulnerability could allow a malicious actor to circumvent security restrictions and gain unauthorized access to protected...
The vulnerability of the nft_meta_bridge_get_eval() function in the net/bridge/netfilter/nft_meta_bridge.c module, which is part of the networking functions in the Linux kernel, allows a hacker to cause a service failure.
The vulnerability of the nftmetabridgegeteval function in the net/bridge/netfilter/nftmetabridge.c module, which is part of the networking functions in the Linux kernel, is related to incorrect calculation of buffer size. Exploiting this vulnerability could allow an attacker to cause a service...
The vulnerability of the __sctp_rcv_asconf_lookup() function in the net/sctp/input.c module of the Linux operating system’s SCTP protocol implementation allows a attacker to gain access to protected information or cause service interruptions.
The vulnerability of the sctprcvasconflookup function in the net/sctp/input.c module of the Linux operating system’s SCTP protocol implementation is related to improper handling of length parameter discrepancies. Exploiting this vulnerability can allow an attacker to gain access to protected...
The vulnerability of the netdev_nl_bind_rx_doit() function in the net/core/netdev-genl.c module, which is part of Linux’s kernel-based networking functions, allows a hacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the netdevnlbindrxdoit function in the net/core/netdev-genl.c module, which is part of Linux’s kernel-based networking functions, involves releasing an incorrect pointer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...
The vulnerability of the oaktrail_lvds_init() function in the drivers/gpu/drm/gma500/oaktrail_lvds.c driver code of the Direct Rendering Infrastructure (DRI) kernel module in the Linux operating system allows a attacker to cause a service failure.
The vulnerability of the oaktraillvdsinit function in the drivers/gpu/drm/gma500/oaktraillvds.c driver for the Direct Rendering Infrastructure DRI kernel of the Linux operating system leads to unlimited resource allocation. Exploiting this vulnerability can allow an attacker to cause a service...
The vulnerability of the mbox_controller_register() function in the drivers/mailbox/mailbox.c file of the Linux kernel-based mailbox driver module allows a hacker to cause a service failure.
The vulnerability of the mboxcontrollerregister function in the drivers/mailbox/mailbox.c file of the Linux kernel-based mailbox driver module is related to the pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the Python library for working with PDF files, PyPDF, is related to excessive iteration. This vulnerability allows attackers to trigger a service failure.
The vulnerability of the Python library for working with PDF files, PyPDF, is related to excessive iteration. Exploiting this vulnerability can allow a malicious actor to cause service failures...
The vulnerability of the Python library for working with PDF files, PyPDF, relates to the execution of a loop with an unreachable exit condition, allowing a hacker to cause a service failure.
The vulnerability of the Python library for working with PDF files, PyPDF, is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the PNG encoder in the console-based graphic editor ImageMagick, which allows a hacker to trigger a service failure.
The vulnerability of the PNG encoder in the console-based graphic editor ImageMagick is related to the lack of memory release after the effective lifespan of the module. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the ASHLAR encoder in the console-based graphic editor ImageMagic allows a hacker to trigger a service failure.
The vulnerability of the ASHLAR encoder in the console-based ImageMagick graphics editor is related to the lack of memory release after the effective lifespan of the encoder. Exploiting this vulnerability can allow an attacker to cause a service failure...
Vulnerability of the functions dvcman_call_on_receive() and dvcman_channel_close() in the channels/drdynvc/client/drdynvc_main.c file of the RDP client FreeRDP, which allows a intruder to gain unauthorized access to protected information
The vulnerabilities of the functions dvcmancallonreceive and dvcmanchannelclose in the file channels/drdynvc/client/drdynvcmain.c of the RDP client FreeRDP are related to synchronization errors when using a shared resource. Exploiting these vulnerabilities can allow an attacker operating remotely...
The vulnerability of the lib/grammar.js file, a module for defining access methods to XML documents and managing them with XMLDOM, allows a attacker to cause a service failure.
The vulnerability of the lib/grammar.js file, which is part of the module for determining access methods to XML documents and managing them via XMLDOM, involves an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...
The vulnerability of the reg() function in the lib/grammar.js module, a module for defining methods to access and manage XML documents, allows attackers to bypass existing security mechanisms.
The vulnerability of the reg function in the lib/grammar.js module, which is used for accessing and managing XML documents, is related to errors in processing XML requests. Exploiting this vulnerability could allow a malicious actor to bypass existing security mechanisms remotely...
The vulnerability of the Document.createElement() function in the XML document access and manipulation module XMLDOM allows attackers to bypass existing security mechanisms and perform cross-site scripting (XSS) attacks.
The vulnerability of the Document.createElement function in the XML document access and management module, XMLDOM, is related to errors in processing XML requests. Exploiting this vulnerability allows an attacker to bypass existing security mechanisms and perform cross-site scripting attacks XSS...
The vulnerability of the cgroup_migrate_add_task() function in the kernel/cgroup/cgroup.c module of the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the cgroupmigrateaddtask function in the kernel/cgroup/cgroup.c module of the Linux operating system is related to incorrect processing of highly compressed input data. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of Fortinet FortiWeb web applications’ network firewalls, related to authentication procedures that allow attackers to bypass existing security restrictions.
The vulnerability of Fortinet FortiWeb network firewalls is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow attackers to bypass existing security restrictions remotely...
The vulnerability of the replace_nexthop_single() function in the net/ipv4/nexthop.c module of the Linux operating system’s IPv4 kernel implementation allows a attacker to cause a service failure.
The vulnerability of the replacenexthopsingle function in the net/ipv4/nexthop.c module of the Linux operating system’s IPv4 protocol implementation is related to the swapping of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the populate EnumData() function in the drivers/platform/x86/dell/dell-wmi-sysman/enum-attributes.c file of the Linux kernel device driver module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the populate EnumData function in the drivers/platform/x86/dell/dell-wmi-sysman/enum-attributes.c file of the Linux X86 kernel device driver is related to the occurrence of operations outside of memory buffers. Exploiting this vulnerability could allow an attacker to compromi...
The vulnerability of the sbc_execute_unmap() function in the drivers/target/target_core_sbc.c driver of the TCM kernel of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the sbcexecuteunmap function in the drivers/target/targetcoresbc.c driver of the TCM kernel of the Linux operating system is related to integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...
The vulnerability of the arena_alloc_pages() function in the kernel/bpf/arena.c module, which is part of the BPF interpreter support for Linux kernel, allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the arenaallocpages function in the kernel/bpf/arena.c module, which is part of the Linux kernel’s BPF interpreter support, relates to the comparison of numerical ranges without any minimum checks during request processing. Exploiting this vulnerability could allow an attacke...
The vulnerability of the bpf_iter_unix_seq_show() function in the net/unix/af_unix.c module, which is part of the Linux kernel’s networking functions, allows a hacker to cause a service failure.
The vulnerability of the bpfiterunixseqshow function in the net/unix/afunix.c module, which is part of the Linux kernel’s networking functions, is related to the occurrence of mutual locking. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the pex_ep_event_pex_rst_deassert() function in the drivers/pci/controller/dwc/pcie-tegra194.c driver for Linux operating system’s PCI core devices allows a hacker to cause a service failure.
The vulnerability of the pexepeventpexrstdeassert function in the drivers/pci/controller/dwc/pcie-tegra194.c driver for Linux operating system’s PCI device kernel is related to synchronization errors when using shared resources “Race Conditions”. Exploiting this vulnerability can allow an attacke...
The vulnerability of the inet_frag_queue_flush() function in the net/ipv4/inet_fragment.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the inetfragqueueflush function in the net/ipv4/inetfragment.c module of the Linux operating system is related to the reutilization of previously released memory. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and...
The vulnerability of the build_i2c_fw_hdr() function in the drivers/usb/serial/io_ti.c file of the Linux device driver module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the buildi2cfwhdr function in the drivers/usb/serial/ioti.c file of the Linux device driver module is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...
The vulnerability of the `ivpu_ms_get_info_ioctl()` function in the `drivers/accel/ivpu/ivpu_ms.c` kernel module of the Linux operating system allows a attacker to gain access to protected information or cause a service failure.
The vulnerability of the ivpumsgetinfoioctl function in the drivers/accel/ivpu/ivpums.c kernel module of the Linux operating system is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability may allow an attacker to access protected information...
The vulnerability of the rockchip_gpioremove() function in the drivers/gpio/gpio-rockchip.c file of the Linux kernel’s GPIO driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the rockchipgpioremove function in the drivers/gpio/gpio-rockchip.c file of the Linux kernel’s GPIO driver is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and...
The vulnerability of the rseq_exit_user_update() function in the include/linux/rseq_entry.h module of the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the rseqexituserupdate function in the include/linux/rseqentry.h module of the Linux kernel is related to access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to cause a system failure...
The vulnerability of the mrp_pdu_parse_vecattr() function in the net/802/mrp.c module, which is part of the networking functions of the Linux kernel, allows a hacker to cause a service failure.
The vulnerability of the mrppduparsevecattr function in the net/802/mrp.c module, which is part of the networking functions in the Linux kernel, stems from an improper check of the specified index, position, or offset within the input data. Exploiting this vulnerability could allow an attacker to...
The vulnerability of the pppol2tp_ioctl() function in the net/l2tp/l2tp_ppp.c module of the Layer Two Tunneling Protocol (L2TP) implementation in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the pppol2tpioctl function in the net/l2tp/l2tpppp.c module of the Layer 2 Tunneling Protocol implementation in the Linux operating system is related to errors during link counter updates. Exploiting this vulnerability can allow an attacker to compromise the confidentiality,...
The vulnerability of the max77705_charger_probe() function in the drivers/power/supply/max77705_charger.c file of the Linux kernel’s power management driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the max77705chargerprobe function in the drivers/power/supply/max77705charger.c file of the Linux kernel’s power management driver relates to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...
The vulnerability of the wbt_init_enable_default() function in the block/blk-wbt.c module, which supports the block-level kernel in the Linux operating system, allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the wbtinitenabledefault function in the block/blk-wbt.c module, which supports the block-level kernel in the Linux operating system, is related to the failure to take measures to neutralize special elements. Exploiting this vulnerability can allow a remote attacker to...
The vulnerability of the Python programming language’s cryptography interpreter lies in errors in the certificate validation process, which allows attackers to compromise the integrity of the protected information.
The vulnerability of the Python programming language’s cryptography interpreter is related to errors in the certificate authentication process. Exploiting this vulnerability could allow an attacker to compromise the integrity of the protected information...
The vulnerability of the Python library for working with PDF files, PyPDF, involves an uncontrolled resource consumption, allowing attackers to cause service failures.
The vulnerability of the Python library for working with PDF files, PyPDF, is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a hacker to cause service failures...
Vulnerability of the .NET software platform and Microsoft Visual Studio development tools, related to improper validation of specified input types, allowing attackers to trigger service failures.
The vulnerability of the .NET software platform and the Microsoft Visual Studio development environment is related to improper validation of the specified data type. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...