98239 matches found
Linux alphabetic device driver Heap Buffer Overflow DoS
The vulnerability of the handleFlags function in the drivers/char/ipmi/ipmisiintf.c file of the Linux operating system’s character device driver lies in the lack of restrictions and regulation regarding resource allocation. Exploiting this vulnerability allows a remote attacker to cause service...
mac80211 Stack Use-After-Free
The vulnerability of the function ieee80211prepconnection in the net/mac80211/mlme.c module of the mac80211 stack in the Linux operating system is related to the dereferencing of a pointer whose validity period has expired. Exploiting this vulnerability could allow an attacker to compromise the...
Linux Kernel rtnetlink Buffer Overflow DoS
The vulnerability of the rtnlfillvfinfo function in the net/core/rtnetlink.c module, which is part of Linux’s kernel network functions, stems from the use of an uninitialized resource. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...
Linux MPTCP pm_add_timer Heap Buffer Overflow DoS
The vulnerability of the mptcppmaddtimer function in the net/mptcp/pm.c module of the MPTCP protocol implementation in Linux operating systems is related to errors during the update of the link counters. Exploiting this vulnerability can allow an attacker to compromise the confidentiality,...
Linux kernel net/batman-adv/bat_iv_ogm.c Buffer Overflow DoS
The vulnerability of the batadvivogmsendtoif function in the net/batman-adv/bativogm.c module, which is part of the Linux kernel’s networking functions, is related to integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability could allow an attacker to compromise the...
Linux EDAC Kernel Module Heap Buffer Overflow DoS
The vulnerability of the initonemc function in the drivers/edac/versalnetedac.c driver of the EDAC Error Detection and Correction kernel module of the Linux operating system is related to improper memory release „memory leak“. Exploiting this vulnerability can allow a remote attacker to cause a...
AMD GPU Direct Rendering VCN Buffer Overflow DoS
The vulnerability of the vcnv30decmsg function in the drivers/gpu/drm/amd/amdgpu/vcnv30.c driver for AMD GPU cores in Linux operating systems is related to reading beyond the buffer boundaries. Exploiting this vulnerability may allow an attacker to access protected information or cause service...
Linux kernel Heap Buffer Overflow DoS
The vulnerability of the irisreleaseinternalbuffers function in the drivers/media/platform/qcom/iris/irisbuffer.c driver for multimedia devices in the Linux operating system is related to the dereferencing of a pointer with an expired validity period. Exploiting this vulnerability could allow an...
Crosswork Data Gateway Data Compromise
The vulnerability of the Crosswork Data Gateway data collection platform is related to insufficient protection for registration data. Exploiting this vulnerability could allow an attacker operating remotely to compromise the confidentiality, integrity, and accessibility of the protected informati...
ClamAV Insufficient Validation
The vulnerability of the ClamAV antivirus software is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions remotely...
ClamAV Insufficient Validation
The vulnerability of the ClamAV antivirus software is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions remotely...
Cisco NX-OS Code Execution
The vulnerability of the Cisco NX-OS operating system of Cisco Nexus 9000 Series switches, based on Silicon One ASIC chips, stems from the binding of open IP addresses during connection to TCP ports 43210 and 43211. Exploiting this vulnerability allows a remote attacker to execute arbitrary code ...
Azure Arc Authentication Privilege Escalation
The vulnerability of the Azure Arc local infrastructure connection software relates to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to gain increased privileges remotely...
Microsoft Exchange Server Privilege Escalation
The vulnerability of Microsoft Exchange Server is related to insufficient validation of requests on the server side. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...
Panthor driver Heap Buffer Overflow DoS
The vulnerability of the panthorfwunplug function in the drivers/gpu/drm/panthor/panthorfw.c file of the Panthor driver which provides DRM support for ARM Mali CSF-based graphics processors in the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow...
netfilter ip_vs_add_service Buffer Overflow DoS
The vulnerability of the ipvsaddservice function in the net/netfilter/ipvs/ipvsctl.c module of the netfilter component of the Linux operating system is related to the pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...
mcp23s08_probe_one Heap Buffer Overflow DoS
The vulnerability of the mcp23s08probeone function in the drivers/pinctrl/pinctrl-mcp23s08.c driver for Linux kernel’s PINCTRL output ports is related to improper disabling or release of resources. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...
Linux NVME Kernel Driver Heap Buffer Overflow DoS
The vulnerability of the nvmeirqcheck function in the drivers/nvme/host/pci.c module of the Linux NVME driver is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...
amdxdna_ubuf_map Heap Buffer Overflow DoS
The vulnerability of the amdxdnaubufmap function in the drivers/accel/amdxdna/amdxdnaubuf.c driver for Linux kernel-based computing devices involves improper memory release memory leak. Exploiting this vulnerability allows a remote attacker to cause system failures...
Linux BPF Map Get Info By FD Use-After-Free
The vulnerability of the bpfmapgetinfobyfd function in the kernel/bpf/syscall.c module, which is part of the Linux operating system’s BPF interpreter support, is related to synchronization errors when using shared resources. Exploiting this vulnerability could allow an attacker to compromise the...
Linux kernel cryptographic accelerator driver Heap Buffer Overflow DoS
The vulnerability of the ccprunaesgcmcmd function in the drivers/crypto/ccp/ccp-ops.c module of the Linux kernel cryptographic accelerator driver is related to the use of a name with an incorrect reference. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...
Nouveau graphics driver Heap Buffer Overflow
The vulnerability of the nouveaugempushbufrelocapply function in the drivers/gpu/drm/nouveau/nouveaugem.c module of the NVIDIA Linux kernel-based graphics driver infrastructure is related to integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability could allow an attacker to...
edt-ft5x06 driver Heap Buffer Overflow DoS
The vulnerability of the edtft5x06tspreparedebugfs function in the drivers/input/touchscreen/edt-ft5x06.c driver for the touchscreen sensor in the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise...
Linux USB Device Driver Heap Buffer Overflow DoS
The vulnerability of the ulpiregister function in the drivers/usb/common/ulpi.c module of the Linux device driver framework is related to the re-release of previously released memory. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...
Linux IPMI Buffer Overflow DoS
The vulnerability of the handleTransactionDone function in the drivers/char/ipmi/ipmisiintf.c file of the Linux operating system’s alphabetic device driver lies in the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability...
AMD GPU VCN V4 Function Access Information Disclosure
The vulnerability of the vcnv40decmsg function in the drivers/gpu/drm/amd/amdgpu/vcnv40.c driver for AMD GPU cores in Linux’s Direct Rendering Infrastructure DRI kernel relates to buffer overflow attacks. Exploiting this vulnerability can allow attackers to access protected information or cause...
Linux HID Peripheral Device Buffer Overflow DoS
The vulnerability of the dualshock4parsereport function in the drivers/hid/hid-playstation.c module of the user interface device subsystem of the Linux operating system is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious...
OpenVPN Module Arbitrary Command Execution
The vulnerability of the OpenVPN module of TP-Link Archer AX53 router software relates to the lack of measures taken to neutralize special elements used in the operating system’s command set. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands using a specially...
Crosswork Data Gateway Auth Bypass
The vulnerability of the Crosswork Data Gateway data collection platform is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to compromise the confidentiality, integrity, and accessibility of the protected informatio...
QUIC Protocol Code Execution
The vulnerability of the QUIC protocol implementation in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
ClamAV Insufficient Validation
The vulnerability of the ClamAV antivirus software is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions remotely...
ClamAV Insufficient Validation
The vulnerability of the ClamAV antivirus software is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions remotely...
ClamAV Insufficient Validation
The vulnerability of the ClamAV antivirus software is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions remotely...
Linux USB solenoids yurex_probe Heap Buffer Overflow
The vulnerability of the yurexprobe function in the drivers/usb/misc/yurex.c module of the Linux device driver for USB devices relates to access to an uninitialized pointer. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility...
amdgpu_amdkfd_gpuvm_alloc_memory_of_gpu Heap Buffer Overflow DoS
The vulnerability of the amdgpuamdkfdgpuvmallocmemoryofgpu function in the drivers/gpu/drm/amd/amdgpu/amdgpuamdkfdgpuvm.c file of the Direct Rendering Infrastructure DRI driver for AMD GPU cores in the Linux operating system is related to the copying of buffers without checking the size of the...
JavaScript extend() Function Heap Buffer Overflow DoS
The vulnerability of the extend function in the shared/utils.mjs JavaScript library used for creating Swiper sliders is related to uncontrolled changes to object prototypes. Exploiting this vulnerability could allow an attacker to trigger a service failure and execute arbitrary code...
Linux hardware monitoring driver Heap Buffer Overflow DoS
The vulnerability of the nct7363presentpwmfanin function in the drivers/hwmon/nct7363.c module of the Linux device monitoring driver causes a memory leak. Exploiting this vulnerability could allow an attacker to cause a system failure...
protocols such as BPv6
The vulnerability of Dissectors for protocols such as BPv6, OpenFlow, and Kafka, as well as the Wireshark traffic analyzer for computer networks, is related to the execution of a loop with an unavailable exit condition. Exploiting this vulnerability can allow a malicious actor to cause service...
Azure SQL Database SQL Injection
The vulnerability of the Azure SQL Database cloud relational database model is related to the lack of security measures for SQL query structures. Exploiting this vulnerability can allow attackers to enhance their privileges remotely...
TP-Link Archer AX53 tmpserver Module Code Execution
The vulnerability of the tmpserver module in TP-Link Archer AX53 microprogramming software is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted file...
Linux kernel cryptographic accelerator Heap Buffer Overflow DoS
The vulnerability of the ccmacdigest function in the drivers/crypto/ccree/cchash.c module of the Linux kernel cryptographic accelerator driver is related to improper memory release memory leak. Exploiting this vulnerability could allow a remote attacker to cause a system failure...
Linux device tree driver Heap Buffer Overflow DoS
The vulnerability of the testdrvprobe function in the drivers/of/unittest.c module of the device tree driver and kernel open-source software for Linux operating systems is related to the repeated use of previously freed memory. Exploiting this vulnerability could allow a remote attacker to...
L2TP Control Channel Parser Heap Buffer Overflow DoS
The vulnerability of the tunnelsetparams function in the tunnel.c file of the L2TP Control Channel Parser component of the D-Link DIR-895L router microprogramming system is related to the escape operation from the buffer into memory. Exploiting this vulnerability could allow a remote attacker to...
Azure Logic Apps Path Traversal Privilege Escalation
The vulnerability of the cloud platform for creating and launching automated work processes in Azure Logic Apps is related to an incorrect restriction on the path name to the restricted access catalog. Exploiting this vulnerability could allow a malicious actor to increase their privileges remote...
mtk_jpeg_release Heap Buffer Overflow DoS
The vulnerability of the mtkjpegrelease function in the drivers/media/platform/mediatek/jpeg/mtkjpegcore.c driver for multimedia devices in the Linux operating system is related to the dereferencing of a pointer with an expired validity period. Exploiting this vulnerability could allow an attacke...
Linux kernel DRI Heap Buffer Overflow DoS
The vulnerability of the vc4savehangstate function in the drivers/gpu/drm/vc4/vc4gem.c file of the Direct Rendering Infrastructure DRI driver for the Linux kernel is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to cause a system failure...
Azure SQL Database Privilege Escalation
The vulnerability of the Azure SQL Database cloud relational database model is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to enhance their privileges remotely...
Linux USB Device Driver RNDIS Buffer Overflow
The vulnerability of the rndisbind function in the drivers/usb/gadget/function/frndis.c file of the Linux kernel’s USB device driver is related to synchronization errors when using shared resources. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrit...
Crosswork Data Gateway Path Traversal
The vulnerability of the Crosswork Data Gateway data collection platform is related to improper external management of file names or paths. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
MFD controller driver Heap Buffer Overflow DoS
The vulnerability of the applesmcprobe function in the drivers/mfd/macsmc.c file of the MFD controller driver for the Linux operating system is related to access to an uninitialized pointer. Exploiting this vulnerability could allow a attacker to cause a system failure...