Linux Kernel Security Vulnerabilities

The Linux kernel version 6.10 contains security vulnerabilities. These vulnerabilities stem from xfs failing to release the orphanage directory inode’s igrab reference when chown fails, resulting in a reference leak...

Ravi Teja Online-Examination-System Input Verification Error Vulnerability

Ravi Teja Online-Examination-System has a security vulnerability. This vulnerability stems from the improper handling of parameters in the exammanger.php file within the AJAX Endpoint component’s MySQLDB::topicslist function. It may lead to SQL injection attacks...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.10 contains security vulnerabilities. These vulnerabilities stem from the vmgenid driver, which does not set the driverdata before registering the notification handler. When an interrupt occurs, the handler dereferes a null pointer, which may lead to kernel crashes...

Xorbits Inference Path Traversal Vulnerability

Xorbits Inference versions 4.0.1 and earlier have a path traversal vulnerability. This vulnerability arises due to the backslash sequence in the modelname parameter on Windows, which allows for path traversal. Unauthenticated attackers can register persistent custom models via POST...

Linux Kernel Security Vulnerabilities

The Linux kernel version 3.13 contains a security vulnerability. This vulnerability arises from the port100 driver not verifying whether the frame length provided by the device exceeds the actual data length received, which may lead to out-of-bounds reading...

Linux Kernel Security Vulnerabilities

The Linux kernel version 4.14 contains a security vulnerability. This vulnerability stems from the use of bcmsysportgetstats function, which writes data to datai instead of dataj, thereby crossing the allocated array boundary and causing memory corruption...

David Courtey: Database Authorization Vulnerability

David Courtey: Versions of the DatabaseEngine 1.8.1 and earlier have an authorization issue. This vulnerability stems from the improper handling of the parameter schemaname by the Scheduled Restore component in the file app/Http/Requests/Api/V1/SaveScheduledRestoreRequest.php. As a result,...

clidey WhoDB path traversal vulnerability

clidey WhoDB versions prior to 0.104.0 to 0.135.0 have a path traversal vulnerability. This vulnerability arises from path traversal when the DuckDB file system functions are executed through the editor. An attacker can log into DuckDB without credentials and use functions like readtext, readblob...

Linux Kernel Security Vulnerabilities

The Linux kernel version 7.1 contains a security vulnerability. This vulnerability stems from the use of the TCP header length incorrectly in UDP GSO packets by the gvecansendtso function. This leads to an incorrect estimation of the number of segmentation buffers, potentially causing unnecessary...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability arises when SCTP processes bundled packets that contain outdated Cookie errors. As a result of this error, the non-primary transmission is deleted, but the subsequent DATA blocks still reference the deleted transmission. This allow...

Linux Kernel Security Vulnerabilities

The Linux kernel version 2.6.39 has a security vulnerability. This vulnerability arises from the fact that the squashfs component does not perform range checks on dictionary sizes. When processing an abnormal SquashFS image with the COMP OPTS flag set to 1 but a dictionary size of 0, the componen...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.13 contains security vulnerabilities. These vulnerabilities stem from an error in the update order of NACL firewall entries. The Config field is written first, resulting in pending entries that are observed by the SBI implementation or the NACL hardware. This leads to...

Linux Kernel Security Vulnerabilities

The Linux kernel version 7.3-rc1 contains security vulnerabilities. These vulnerabilities stem from the fact that read/write operations on the IRQ register in the drm/amd/display module are not atomic operations. This can lead to race conditions, resulting in a timeout in the vblank handling...

Linux Kernel Security Vulnerabilities

The Linux kernel versions from 6.12.19 to 6.12.112 and 6.13 contain security vulnerabilities. These vulnerabilities stem from the fact that drmfbdevclientrestore does not check fbhelper-info when restoring some initialized fbdev clients. This may lead to a null pointer derefrence when closing DRM...

Linux Kernel Security Vulnerabilities

The Linux kernel version 4.13 contains security vulnerabilities. These vulnerabilities arise from a race condition that occurs when canceling requests for the lightning control channel. This race condition causes the tbcfgrequestwork and tbcfgrequest Cancel functions to compete, resulting in the...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability stems from the EDAC/altera driver, which marks the setup callback and auxiliary functions of a10 EDAC as init. These functions may execute after memory release during the probe path, resulting in the dereferencing of already releas...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.9 contains a security vulnerability. This vulnerability stems from KVM arm64 failing to properly apply fine-grained UNDEF exceptions. As a result, the configuration of FGT traps is limited to FEATFGT only. This could lead to false warnings being triggered when running...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.0 contains security vulnerabilities. These vulnerabilities arise when binder directly calls kfree to release outdated transactions during the TFUPDATETXN transaction, replacing frozen processes. This bypasses the binderfreetxnfixups function, resulting in a leak of...

Linux Kernel Security Vulnerabilities

The Linux kernel version 2.6.27 has a security vulnerability. This vulnerability arises from the use of sierragetswocinfo, which requests 60-byte SWoC information through usbcontrolmsg. It does not reject short transmissions, resulting in the newly allocated swocinfo buffer being uninitialized at...

Gitea security vulnerabilities

Gitea versions 28.1.0 and earlier have security vulnerabilities. These vulnerabilities stem from the fact that when parsing SSH certificates, the system searches for all stored public keys rather than just the main key. If a user trusts the certificate authority and accepts any main key, it may...

Linux Kernel Security Vulnerabilities

The Linux kernel version 3.3 contains security vulnerabilities. These vulnerabilities arise from mac80211 failing to validate rate metadata such as reported MCS, number of spatial streams, and bandwidth when processing TX states. Abnormal metadata may be used as an out-of-bounds index, leading to...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability arises from the GUE REMSUM option not verifying the order of the checksum’s start value and the field offset. When the offset is less than the start value, underflow occurs, potentially leading to forwarded packets being written...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.11 contains security vulnerabilities. These vulnerabilities arise from the independent channel allocation path not including the maximum Tx queue size. As a result, 128 vectors are recorded, but only 64 are allocated. When resource settings are made, NULL entries are...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.12 contains security vulnerabilities. These vulnerabilities arise when auditing a newly loaded policy. After a policy is published and the inode lock for the newly loaded directory is released, the policy may be concurrently deleted and reloaded. However, the auditing...

Linux Kernel Security Vulnerabilities

The Linux kernel version 3.7 contains security vulnerabilities. These vulnerabilities stem from synchronization conflicts between nfcllcpsocketrelease and nfcllcpacceptdequeue. This can lead to concurrent deconnection and the release of the same sub-socket. As a result, the socket may be reused...

Linux Kernel Security Vulnerabilities

The Linux kernel version 5.7 contains a security vulnerability. This vulnerability arises from the use of flowoffloadworkdel, which releases NFFLOWHWDEAD before the work thread has cleared NFFLOWHWPENDING. This concurrent garbage collection may cause the flow to be released prematurely, leading t...

Linux Kernel Security Vulnerabilities

The Linux kernel version 3.13 contains a security vulnerability. This vulnerability arises from the use of an invalid pstate pointer after the nvkmclkustateupdate function does not hit a break in the listforeachentry loop. In user space, it is possible to request an non-existent pstate ID through...

Linux Kernel Security Vulnerabilities

The Linux kernel version 5.11 contains security vulnerabilities. These vulnerabilities stem from the use of virtiogpuresourcecreateblobioctl in the error paths of virtiogpuresourceassignuuid and drmgemhandlecreate. This leads to the call of drmgemobjectrelease, which does not release the referenc...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.2 contains a security vulnerability. This vulnerability arises from the use of nfpnetipsecrx, which releases the XArray lock before acquiring the xfrmstate reference. Deleting this path may erase entries and discard the last state reference. As a result, RX increases it...

Linux Kernel Security Vulnerabilities

The Linux kernel version 5.18 contains security vulnerabilities. These vulnerabilities arise from the failure to return values when PTP is not in use. During the unbinding of drivers, the uninitialized txskbs queue is cleaned up, leading to null pointer dereferencing...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.2 contains security vulnerabilities. These vulnerabilities stem from the kionix-kx022a driver’s improper array boundary checking when converting register values to array indices. As a result, sizeofarray is incorrectly interpreted as the last valid index, potentially...

Linux Kernel Security Vulnerabilities

The Linux kernel version 5.7 contains a security vulnerability. This vulnerability arises from the getmtddevice function, which calls the getdevice callback of the main MTD. During this process, the mtd parameter passed in may be a partition. However, the putmtddevice function passes in the main...

Linux Kernel Security Vulnerabilities

There are security vulnerabilities in Linux kernels versions 6.12.112 to 6.13, 6.18.55 to 6.19, and 7.0. These vulnerabilities stem from the function bpfmasetdtor, which copies map-record but does not maintain the BTF reference within the destructor context. As a result, the working queue still...

Linux Kernel Security Vulnerabilities

The Linux kernel version 5.18 contains a security vulnerability. This vulnerability arises from the incorrect invocation of the bonding-specific API when processing team device events by using net/mlx5. This leads to out-of-bound memory access to the slab structure...

Linux Kernel Security Vulnerabilities

Versions of the Linux kernel from 6.18.34 to 6.18.56, as well as 7.0.11 to 7.1 and 7.1 itself, have security vulnerabilities. These vulnerabilities stem from the fprobe processing program executing when RCU does not monitor it. The standard RCU grace period does not wait for these executions, and...

Linux Kernel Security Vulnerabilities

The Linux kernel version 2.6.12 has security vulnerabilities. These vulnerabilities stem from the fact that the LBLCR and LBLC caches in ipvs are not limited in their growth. Functions like ipvslblcrnew and ipvslblcnew create cache entries for each unseen target address. However, maxsize only...

Gitea authorization issue vulnerability

Gitea 1.27.2 and earlier versions have an authorization issue. This issue arises from the lack of the individualPermsChecker middleware during the registration of seven API routes under /api/v1/users/username. This failure does not enforce visibility for target users, potentially allowing...

Grigory Chudov’s buffer error vulnerability

Grigory Chudov’s libtta versions 2.3 and earlier have a buffer error vulnerability. This vulnerability arises from the lack of header checks that reject zero audio channels. An attacker can create a specially crafted .tta file that declares zero audio channels, causing the application to access...

JEECG official open-source JeecgBoot AI low-code platform has a SQL injection vulnerability.

The JEECG official open-source JeecgBoot AI low-code platform versions prior to 3.9.5 have a SQL injection vulnerability. This vulnerability stems from improper handling of newline characters when processing dictionary and online report SQL fragments. Certified attackers can bypass the...

Linux Kernel Security Vulnerabilities

The Linux kernel version 4.3 contains a security vulnerability. This vulnerability arises from the mac80211 fragment reassembly process, where the extralen field is set to u16. Accruing the length of oversized fragments results in integer overflows, leading to insufficient buffer allocation and...

Gitea authorization issue vulnerability

Gitea versions 28.1.0 and earlier have security vulnerabilities. These vulnerabilities stem from the lack of verification during OpenID association callbacks to ensure that only logged-in users initiate associations. Gitea allows for the acceptance of unrequested OpenID 2.0 assertions, which coul...

Dyad Cross-Site Request Forgery Vulnerability

Dyad 1.16.0 and earlier versions have a security vulnerability. This vulnerability stems from improper handling of the OAuth Callback Handler component, which may allow remote attackers to launch cross-site request fraud attacks...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.8 contains security vulnerabilities. These vulnerabilities stem from the netfs component, which fails to clear the outdated pagecache after writing files through write operations. This may result in residual data from previous writes via mmap being exposed or retained i...

Kin-Yiu, Wong YOLOv9: Input validation error vulnerability

Kin-Yiu, Wong YOLOv9 version 0.1 has a security vulnerability. This vulnerability stems from the improper handling of the parameter names/stride in the DetectMultiBackend.init function within the ONNX Metadata Handler component. It may lead to code injection and can be exploited remotely...

Linux Kernel Security Vulnerabilities

The Linux kernel version 5.7 contains a security vulnerability. This vulnerability arises from improper handling of the flowtable pending status bit, resulting in a race condition between garbage collection and the hardware uninstallation process...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.17 contains security vulnerabilities. These vulnerabilities stem from improper order of assigning values to the batch status and hash pointer during the adjustment ofutex private hashing, which may lead to reuse after release...

AbiWord wv buffer error vulnerability

AbiWord versions 1.2.9 and earlier have a buffer error vulnerability. This vulnerability stems from the lack of verification of the FKP run count in functions wvGetPAPXFKP and wvGetCHPXFKP. Attackers can read content that exceeds the 512-byte stack buffer by providing a specially crafted.doc file...

Linux Kernel Security Vulnerabilities

The Linux kernel version 4.16 contains a security vulnerability. This vulnerability arises from the fact that the nftflowoffloadinit function does not revoke the flowtable reference count added by nftuseinc when the nfctnetnsget call fails. As a result, references are leaked, preventing the...

Linux Kernel Security Vulnerabilities

The Linux kernel version 4.3 contains a security vulnerability. This vulnerability arises from the audit’s killRules function, which discards the entry-rule.exe before removing rules from the RCU-visible filter list during the pruning of the audit tree. This process competes with tasks that are...

Linux Kernel Security Vulnerabilities

The Linux kernel version 4.4 contains a security vulnerability. This vulnerability arises from Bluetooth btintel not correctly verifying the length of DDC records. As a result, the length value may be looped back, leading to out-of-bounds access...