95883 matches found
The vulnerability of the ws.c file of the WebSocket server in the Libevent library allows a attacker to induce a service failure.
The vulnerability of the ws.c file of the WebSocket server in the Libevent library-related event notification asynchronous library is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...
The vulnerability of the Lz4Decode function in the NanaZip.Core/SevenZip/CPP/7zip/Archive/SquashfsHandler.cpp component of the SquashFS compiler, a 7-Zip-based archive compressor, allows a hacker to disclose protected information and cause a service failure.
The vulnerability of the Lz4Decode function in the NanaZip.Core/SevenZip/CPP/7zip/Archive/SquashfsHandler.cpp component of the SquashFS compressor, a 7-Zip-based archive compressor, involves reading data beyond the allowed range of memory. Exploiting this vulnerability can allow an attacker to...
The vulnerability in the `makeDecodeTable` function of the `ext/CHMLib/lzx.c` file, a program for viewing documents in formats such as PDF, EPUB, MOBI, FB2, CHM, XPS, and DjVu using SumatraPDF, allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the makeDecodeTable function in the ext/CHMLib/lzx.c file of the SumatraPDF program, which is used to display documents in formats such as PDF, EPUB, MOBI, FB2, CHM, XPS, and DjVu, relates to the execution of operations outside of the buffer. Exploiting this vulnerability cou...
The vulnerability of the set_data() function in the src/libgit2/transports/smart_pkt.c file, which implements Git methods in the C language, allows a hacker to cause a service failure.
The vulnerability of the setdata function in the src/libgit2/transports/smartpkt.c file, which implements Git methods in C language, is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to cause service failures...
The vulnerability of the bufferevent_socket_set_conn_address_() function in the Libevent asynchronous event library allows a hacker to cause a service failure.
The vulnerability of the buffereventsocketsetconnaddress function in the Libevent asynchronous event library is related to writing beyond the buffer’s boundaries. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerabilities of the functions mg_tls_verify_cert_san() and mg_tls_verify_cert_cn() in the src/tls_builtin.c file of the Mongoose library allow attackers to carry out “man-in-the-middle” type attacks.
The vulnerabilities of the functions mgtlsverifycertsan and mgtlsverifycertcn in the src/tlsbuiltin.c file of the Mongoose library are related to errors in the certificate validation process. Exploiting these vulnerabilities could allow a remote attacker to perform “man-in-the-middle” attacks...
The vulnerability of the decode_tag_internal() function in the Libevent asynchronous event notification library allows a attacker to cause a service failure.
The vulnerability of the decodetaginternal function in the Libevent asynchronous event notification library is related to reading data beyond the allowed range of memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...
The vulnerability of the check_builtin_idleenged() function in the kernel/sched/ext_idle.c module, which is part of the Linux operating system’s resource management support mechanism, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the checkbuiltinidleenabled function in the kernel/sched/extidle.c module, which is part of the Linux kernel’s resource management support for operating systems, is related to an incorrect definition of internal states. Exploiting this vulnerability could allow a remote...
The vulnerability of the mpu3050triggerprobe() function in the drivers/iio/gyro/mpu3050-core.c file of various types of embedded sensors in the Linux operating system allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the mpu3050triggerprobe function in the drivers/iio/gyro/mpu3050-core.c file of various types of embedded sensors in the Linux operating system is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to compromise the...
The vulnerability of the tps53679_identify_chip() function in the drivers/hwmon/pmbus/tps53679.c driver for monitoring hardware in the Linux operating system allows a malicious actor to gain unauthorized access to protected information.
The vulnerability of the tps53679identifychip function in the drivers/hwmon/pmbus/tps53679.c driver for monitoring hardware in the Linux operating system is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain...
The vulnerability of the dt2815_attach() function in the drivers/comedi/drivers/dt2815.c module, which supports Linux kernel-based data collection devices, allows a hacker to trigger a service failure.
The vulnerability of the dt2815attach function in the drivers/comedi/drivers/dt2815.c module, which supports Linux kernel-based data collection devices, is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow a remote attacker to cause service...
The vulnerability of the edac_mc_alloc() function in the drivers/edac/edac_mc.c module of the EDAC (Error Detection and Correction) kernel driver for the Linux operating system allows a malicious actor to cause a service failure.
The vulnerability of the edacmcalloc function in the drivers/edac/edacmc.c module of the EDAC driver for the Linux operating system involves the allocation of resources without any restrictions or regulation. Exploiting this vulnerability can allow a perpetrator to cause service failures...
The vulnerability of CIX Technology’s CIX8180 and CIX8160 processor microprogramming software lies in buffer overflow attacks in dynamic memory, allowing attackers to execute arbitrary code and bypass existing security mechanisms.
The vulnerability of the microprogramming software of CIX Technology’s CD8180 and CD8160 processors lies in the overflow of buffers in the dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code and bypass existing security mechanisms...
The vulnerability of the mlx5e_skb_from_cqe_mpwrq_nonlinear() function in the drivers/net/ethernet/mellanox/mlx5/core/en_rx.c driver of the Mellanox Ethernet network adapter for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the mlx5eskbfromcqempwrqnonlinear function in the drivers/net/ethernet/mellanox/mlx5/core/enrx.c file of the Ethernet Mellanox network adapter driver in the Linux operating system is related to errors in resource counters. Exploiting this vulnerability could allow an attacker...
The vulnerability of the pn532_receive_buf() function in the drivers/nfc/pn533/uart.c module of the Linux NFC kernel driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the pn532receivebuf function in the drivers/nfc/pn533/uart.c file of the Linux NFC driver module is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability could allow an attacker to...
The vulnerability of the Catapult DCT2000 file parser, a network traffic analyzer from Wireshark, allows a hacker to trigger a service failure.
The vulnerability of the Catapult DCT2000 file parser and the Wireshark network traffic analyzer is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow attackers to cause service failures...
The vulnerability of the UMTS FP protocol analyzer, a traffic analysis tool for computer networks by Wireshark, allows a hacker to cause a service failure.
The vulnerability of the UMTS FP protocol analyzer, a traffic analysis tool for computer networks developed by Wireshark, is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow attackers to cause service interruptions...
The vulnerability of the Kerberos protocol analyzer, a traffic analysis tool for computer networks developed by Wireshark, allows a hacker to cause a service failure.
The vulnerability of the Kerberos protocol analyzer, a tool for analyzing network traffic in computers, is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the CMS protocol analyzer, a traffic analysis tool for computer networks developed by Wireshark, allows a hacker to cause a service failure.
The vulnerability of the CMS protocol analyzer, which is also used for analyzing computer network traffic with Wireshark, relates to pointer manipulation. Exploiting this vulnerability can allow attackers to cause service interruptions...
The vulnerability of the http_cb() function in the Mongoose library allows a hacker to gain unauthorized access to protected information or execute arbitrary code.
The vulnerability of the httpcb function in the Mongoose library is related to deficiencies in handling HTTP requests when processing the Transfer-Encoding parameter: chunked. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information or execute...
The vulnerability of the lookup() function in the child_process module of the json-data transformation software JSONata allows a attacker to execute arbitrary code.
The vulnerability of the lookup function in the childprocess module of the json-data transformation software JSONata is related to improper code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the qla2xxxpci_error_detected() function in the drivers/scsi/qla2xxx/qla_os.c driver module allows a hacker to trigger a service failure.
The vulnerability of the qla2xxxpcierrordetected function in the drivers/scsi/qla2xxx/qlaos.c driver module for Linux SCSI devices is related to error handling flaws. Exploiting this vulnerability could allow an attacker to cause service failures...
The vulnerability of the mcba_usb_probe() function in the drivers/net/can/usb/mcba_usb.c file of the Linux kernel’s network device support driver allows a hacker to cause a service failure.
The vulnerability of the mcbausbprobe function in the drivers/net/can/usb/mcbausb.c file of the Linux network device driver module is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the __clk_rcg2_configure() function in the drivers/clk/qcom/clk-rcg2.c driver module of the Linux kernel’s software synchronization driver allows a attacker to cause a system failure.
The vulnerability of the clkrcg2configure function in the drivers/clk/qcom/clk-rcg2.c driver for Linux kernel-based system software synchronization allows for integer overflow attacks. Exploiting this vulnerability could enable an attacker to cause a system failure...
The vulnerability of the `tcp_bpf_send_verdict()` function in the `net/ipv4/tcp_bpf.c` module, which is part of the IPv4 protocol implementation in Linux kernel, allows a attacker to cause a service failure.
The vulnerability of the tcpbpfsendverdict function in the net/ipv4/tcpbpf.c module of the Linux operating system’s IPv4 protocol implementation leads to uncontrolled resource consumption. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the `bcma_mdio_mii_register()` function in the `drivers/net/ethernet/broadcom/bgmac-bcma-mdio.c` driver code of the Linux kernel’s Ethernet adapter support module allows a hacker to cause a service failure.
The vulnerability of the bcmamdiomiiregister function in the drivers/net/ethernet/broadcom/bgmac-bcma-mdio.c driver for supporting Ethernet network adapters in the Linux operating system is related to security configuration errors. Exploiting this vulnerability could allow an attacker to cause a...
The vulnerability of the mtk_vcodec_dec_remove() function in the drivers/media/platform/mediatek/vcodec/mtk_vcodec_dec_drv.c driver, which supports multimedia devices in the Linux operating system. This vulnerability allows a hacker to cause a service failure.
The vulnerability of the mtkvcodecdecremove function in the drivers/media/platform/mediatek/vcodec/mtkvcodecdecdrv.c driver code relates to the improper locking of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerabilities of the functions x25_queue_rx_frame() and x25_clear_queues() in the net/x25/x25_in.c module, which are part of the networking functions in the Linux kernel, allow attackers to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the functions x25queuerxframe and x25clearqueues in the net/x25/x25in.c module, which are part of the networking functions in the Linux kernel, involves copying buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability...
The vulnerability of the rds_ib_get_mr() function in the net/rds/ib_rdma.c module, which is part of the Linux kernel’s networking functions, allows a hacker to cause a service failure.
The vulnerability of the rdsibgetmr function in the net/rds/ibrdma.c module, which implements kernel networking functions in the Linux operating system, is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the ext4_ext_correct_indexes() function in the fs/ext4/extents.c module of the Ext4 file system in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the ext4extcorrectindexes function in the fs/ext4/extents.c module of the Ext4 file system in the Linux operating system is related to the execution of operations outside of the buffer boundaries. Exploitation of this vulnerability could allow an attacker to compromise the...
The vulnerability of the vfiopci_core_feature_dma_buf() function in the driver/vfio/pci/vfiopci_dmabuf.c file of the VFIO device drivers for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the vfiopcicorefeaturedmabuf function in the driver/vfio/pci/vfiopcidmabuf.c file of the VFIO device drivers in the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the...
The vulnerability of the smb2_sess_setup() function in the fs/smb/server/smb2pdu.c file of the Smb file system in the Linux operating system allows a attacker to compromise the integrity of protected information or cause service failures.
The vulnerability of the smb2sesssetup function in the fs/smb/server/smb2pdu.c file of the Smb kernel of the Linux operating system is related to deficiencies in access control. Exploiting this vulnerability could allow a remote attacker to compromise the integrity of protected information or cau...
The vulnerabilities of the functions emac_rx_packet_zc() and emac_rx_packet() in the drivers/net/ethernet/ti/icssg/icssg_common.c file of the ethernet driver for Linux kernel allow attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the functions emacrxpacketzc and emacrxPacket in the driver module drivers/net/ethernet/ti/icssg/icssgcommon.c of the Ethernet network adapter driver for Linux operating systems is related to the reutilization of previously freed memory. Exploiting this vulnerability could...
The vulnerability of the team_setup_by_port() function in the drivers/net/team/team_core.c file of the Linux kernel’s network device driver module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the teamsetupbyport function in the drivers/net/team/teamcore.c file of the Linux kernel’s network device driver module is related to type conversion errors. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility ...
The vulnerabilities in the functions bcmaspremove() and bcmaspprobe() of the drivers/net/ethernet/broadcom/asp2/bcmasp.c driver, which is part of the Ethernet Broadcom network adapter driver for the Linux operating system, allow attackers to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the functions bcmaspremove and bcmaspprobe in the drivers/net/ethernet/broadcom/asp2/bcmasp.c driver for Broadcom Ethernet network adapters in the Linux operating system is related to the repeated release of previously released memory. Exploiting this vulnerability could allo...
The vulnerability of the SYSCALL_DEFINE4() function in the kernel/futex/syscalls.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the SYSCALLDEFINE4 function in the kernel/futex/syscalls.c module of the Linux operating system is related to errors during the update of the reference counter. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility...
The vulnerability of the eiointc_update_sw_coremap() function in the arch/loongarch/kvm/intc/eiointc.c module of the LoongArch architecture support for the Linux operating system allows a attacker to access protected information or cause a service failure.
The vulnerability of the eiointcupdateswcoremap function in the arch/loongarch/kvm/intc/eiointc.c module of the LoongArch Linux kernel architecture is related to the execution of operations outside the buffer boundaries. Exploiting this vulnerability could allow an attacker to access protected...
The vulnerability of the xe_vfiopciReleaseDev() function in the drivers/vfio/pci/xe/main.c module of the VFIO device driver in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the xevfiopciReleaseDev function in the drivers/vfio/pci/xe/main.c module of the VFIO device driver in the Linux operating system is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to cause a servic...
The vulnerability of the as102_usb_probe() function in the drivers/media/usb/as102/as102_usb_drv.c driver for Linux-based USB multimedia devices allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the as102usbprobe function in the drivers/media/usb/as102/as102usbdrv.c file of the Linux multimedia device driver module is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...
The vulnerabilities of the functions symlink_data() and smb2ParseSymlinkResponse() in the fs/smb/client/smb2file.c file from the Smb file system of the Linux operating system allow a attacker to gain access to protected information or cause service failures.
The vulnerability of the functions symlinkdata and smb2ParseSymlinkResponse in the fs/smb/client/smb2file.c module of the Smb file system in the Linux operating system is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a...
The vulnerability of the pn_rx_complete() function in the drivers/usb/gadget/function/f_phonet.c file of the Linux operating system’s USB device driver module allows a hacker to cause a service failure.
The vulnerability of the pnrxcomplete function in the drivers/usb/gadget/function/fphonet.c file of the Linux USB device driver module is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the rxrpc_process_event() function in the net/rxrpc/conn_event.c module allows for a session-based RxRPC kernel support on Linux systems, enabling a hacker to cause a service failure.
The vulnerability of the rxrpcprocessevent function in the net/rxrpc/connevent.c module, which is part of the RxRPC session support for Linux kernel, relates to incorrect initialization of resources. Exploiting this vulnerability can allow an attacker to cause service failures...
The vulnerability of the Loopback microprogramming system authentication mechanism in Dahua devices allows attackers to escalate their privileges.
The vulnerability of the Loopback microprogramming system authentication mechanism of Dahua devices is related to deficiencies in the authentication process. Exploiting this vulnerability can allow attackers, operating remotely, to enhance their privileges...
The vulnerability of the iommu_sva_unbind_device() function in the drivers/iommu/iommu-sva.c file of the Linux operating system’s IOMMU driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the iommusvaunbinddevice function in the drivers/iommu/iommu-sva.c module of the Linux IOMMU driver relates to the re-release of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility o...
The vulnerability of the aml_spisg_probe() function in the drivers/spi/spi-amlogic-spisg.c module of the Linux operating system’s SPI device driver allows a hacker to cause a service failure.
The vulnerability of the amlspisgprobe function in the drivers/spi/spi-amlogic-spisg.c module of the Linux device driver for SPI devices is related to improper memory release memory leak. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...
The vulnerability of the x86_pmu_enable() function in the arch/x86/events/core.c module, which supports Linux’s x86 kernel platform, allows a attacker to cause a service failure.
The vulnerability of the x86pmuenable function in the arch/x86/events/core.c module of the Linux operating system’s kernel support for x86 platforms is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the mvpp2_bm_switch_buffers() function in the drivers/net/ethernet/marvell/mvpp2/mvpp2_main.c file of the Ethernet network adapter driver for the Marvell Linux operating system allows a hacker to cause a service failure.
The vulnerability of the mvpp2bmswitchbuffers function in the drivers/net/ethernet/marvell/mvpp2/mvpp2main.c file of the Ethernet network adapter driver for the Marvell-based Linux operating system is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a...
The vulnerability of the mpfs_sys_controller_probe() function in the drivers/soc/microchip/mpfs-sys-controller.c file of the SOC kernel driver for the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the mpfssyscontrollerprobe function in the drivers/soc/microchip/mpfs-sys-controller.c file of the Linux operating system’s SOC System on Chip kernel module is related to improper memory release. Exploitation of this vulnerability can allow a remote attacker to cause a servic...
The vulnerability of the check_command_size_inblocks() function in the drivers/usb/gadget/function/f_mass_storage.c file of the Linux operating system’s USB device driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the checkcommandsizeinblocks function in the drivers/usb/gadget/function/fmassstorage.c file of the Linux device driver framework is related to integer overflow. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...
The vulnerability in the module drivers/net/ethernet/intel/igc/igc_defines.h of the Linux operating system allows a hacker to cause a service failure.
The vulnerability in the drivers/net/ethernet/intel/igc/igcdefines.h module of the Linux operating system is related to peculiarities in interactions with the hardware. Exploiting this vulnerability can allow an attacker to cause a service failure...