GNOME GVfs race condition vulnerability

The GNOME GVfs has a race condition vulnerability. This vulnerability stems from the privileged gvfsd-admin daemon in the admin backend of GVfs. The daemon calls the chown function for path names within the user’s control directory. There is a TOCTOU race condition present. A local attacker can...

Container Bubblewrap Postback Link Vulnerability

The Bubblewrap container has a post-installation link vulnerability. This vulnerability stems from the ability to follow parent symbolic links through /oldroot during the creation of files or directories during Bubblewrap sandbox settings. This could allow an attacker to write the selected path...

OpenPrinting CUPS: CUPS input validation error vulnerability

OpenPrinting CUPS has a vulnerability in input validation. This vulnerability stems from the CUPS scheduler’s failure to properly validate usernames during the printer ACL verification and private attribute filtering, when the path exceeds the main authorization path. As a result, the comparison ...

Eleveo Call Recording Software has a cross-site scripting vulnerability

Eleveo Call Recording Software version 9.7.0 has a security vulnerability. This vulnerability stems from incorrect handling of the parameter name/username in the file/callrec/roleAddAction.do, which may lead to cross-site scripting attacks...

Eleveo Quality Management path traversal vulnerability

Eleveo Quality Management version 9.7.0 has a security vulnerability. This vulnerability stems from the operation of the QuestionnaireService.runDataExportNow function in the Questionnaire Service component, which involves handling the parameter filename. This may lead to path traversal attacks...

Eleveo Quality Management Cross-Site Scripting Vulnerability

Eleveo Quality Management version 9.7.0 has a security vulnerability. This vulnerability stems from a cross-site scripting vulnerability in the Conversation Review component. Attackers may exploit this vulnerability remotely...

Eleveo Quality Management processing logic error vulnerability

Eleveo Quality Management version 9.7.0 has a security vulnerability. This vulnerability stems from the operation of the parameter createdBy in the Conversation Handler component, which allows dynamic determination of object properties. This could potentially allow remote attackers to exploit thi...

Eleveo Quality Management Resource Management Error Vulnerability

Eleveo Quality Management version 9.7.0 has a resource management vulnerability. This vulnerability stems from improper handling of the labels parameter in the /enc-fwk-data/api/v3/conversations//events file by the Conversation Handler component, which may lead to a remote denial-of-service attac...

Submariner Operator Code Injection Vulnerability

The Submariner Operator has a code injection vulnerability. This vulnerability stems from the use of free-form strings from custom resource definitions CRDs in connection configurations under the cert-auth mode, without proper validation. Attackers can exploit this to inject arbitrary configurati...

SmallRye has a vulnerability related to input validation.

SmallRye has a vulnerability in input validation. This vulnerability stems from the improper validation of floating-point or string inputs during the forced conversion of BigInteger numeric scalars in SmallRye’s GraphQL queries. This allows unauthenticated remote attackers to send GraphQL queries...

Rsyslog buffer error vulnerability

Rsyslog has a buffer error vulnerability. This vulnerability stems from the RainerScript replace function in rsyslog, which incorrectly calculates the buffer size during string replacement. This leads to memory corruption. Unauthorized remote attackers can trigger a heap buffer overflow by sendin...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability arises from the fact that the fbinfo-mode is not cleared before deleting the video mode. This may lead to reuse after release, causing information leakage or kernel crashes...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability stems from the vfio-ccw logic’s recursive processing of channel programs, which does not limit the number of channel program segments. This can lead to exhaustion of the host kernel stack, potentially causing denial-of-service...

Linux Kernel Security Vulnerabilities

The Linux kernel versions from 6.10 to 7.2 contain security vulnerabilities. These vulnerabilities stem from improper calculations of rctx-cryptlen in the tegragcmdoonereq function. When the tegragcmsetauthsize function is not called, ctx-authsize remains zero. This can lead to out-of-bounds writ...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability arises from MPTCP fastopen, which, when processing TFO SYN without data, marks the MPTFO stream as completed before confirming that the SKB has been enqueued. This results in residual states and state confusion, potentially causing...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability stems from the use of cap-mdswanted in cephgetcaps within ceph. This value is updated before the CEPHMSGCLIENTCAPS message is actually queued for transmission. As a result, the local capability status becomes invalid, causing readi...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability stems from an unvalidated combination of the GEMCREATE domain. In user space, combinations like CPU|GTT|VRAM with DOORBELL, GDS, GWS, or OA can cause amdgpuboplacementfromdomain to exceed AMDGPUBOMAXPLACEMENTS and trigger BUGON,...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability stems from the focaltechprocess-rel Packet function not setting the finger index as an unsigned type. When the index is 0, subtracting 1 causes an array out-of-bounds write, potentially leading to kernel memory corruption, privileg...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability stems from the netfilter flowtable releasing the original direction tuple before inserting it into the reply node. This allows garbage collection to observe and release streams that are not yet fully installed. As a result, slab...

Linux Kernel Security Vulnerabilities

The Linux kernel versions from 6.16 to 6.18.57, 7.1.10 before the release, and 7.2 before the release contain security vulnerabilities. These vulnerabilities stem from the release of the AEAD conversion in RCU callbacks. The cryptofreeaead function may become dormant, which could lead to calls to...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability stems from SCTP’s handling of COOKIEECHO, where it does not verify the RANDOM, HMAC, and CHUNKS parameters of the cookie. Forgeries of these parameters can lead to out-of-bounds reads and writes, potentially allowing for local...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability stems from the execution of the copytouser function in the fbioread function. During this execution, the hardware src pointer is advanced prematurely, resulting in asynchronous pointers. After the loop continues, reading resumes fr...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability arises from the failure to reset the abnormally large DSS field during the processing of the mptcp option. A remote attacker can send specially craftedDSS messages, resulting in inconsistent data or access to uninitialized data...

Linux Kernel Security Vulnerabilities

The Linux kernel versions from 3.3 to 7.2 contain security vulnerabilities. These vulnerabilities stem from a race condition that occurs during the iterative handling of SCSI EH errors, where shost-ehnoresume is checked repeatedly, potentially leading to undercounting of PM usage counts during...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability stems from the fact that the qethsnmpcommand and qethl3arpquery functions do not validate the lower limit of the buffer length provided by the user. Integer underflow can bypass boundary checks, leading to out-of-bounds memcpy...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability that stems from the lack of verification for allocated pointers in opteeffalendprotmem, which may lead to null pointer dereferencing...

Linux Kernel Security Vulnerabilities

The Linux kernel versions from 7.1 to 7.1.10 contain security vulnerabilities. These vulnerabilities stem from the use of the zcryptmsgtype6sendep11cprb function, which accesses and modifies the domain field in the EP11 CPRB payload by using a vulnerable struct overlays. Additionally, proper...

Linux Kernel Security Vulnerabilities

There are security vulnerabilities in Linux kernels versions from 2.6.12 to 6.18.57, as well as versions from 2.6.12 to 7.1.10 and from 2.6.12 to 7.2. The vulnerability stems from the ipvsnaticmp function in ipvs, which does not re-validate the ihl field in the embedded IP header read from the sk...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability stems from the absence of input validation in the xcrbmsgtotype6ep11cprbmsgx function. The function does not verify the ep11cprb structure and the minimum buffer length of subsequent payload fields. Additionally, the CEIL4 alignmen...

Linux Kernel Security Vulnerabilities

The Linux kernel versions from 7.1 to 7.2 contain security vulnerabilities. These vulnerabilities stem from the absence of input validation in the xcrbmsgtotype6cprbmsgx function. Arithmetic overflows during CEIL4 alignment and summation calculations can bypass size checks. Additionally, the...

Linux Kernel Security Vulnerabilities

The Linux kernel versions 7.1 and earlier contain security vulnerabilities. These vulnerabilities stem from the functions xcrbmsgtotype6cprbmsgx and xcrbmsgtotype6ep11cprbmsgx, which copy user-space messages to the kernel buffer without aligning them to a 4-byte length. As a result, up to 3 bytes...

Linux Kernel Security Vulnerabilities

The Linux kernel versions from 6.15 to 7.2 contain security vulnerabilities. These vulnerabilities arise from canceling the IRQ affinity notifier while holding the netdev lock, causing synchronous waiting for callbacks and canceling tasks, which may lead to deadlocks and cause denial of service...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability stems from the clsbpf module in net/sched, which does not verify whether the bound netdev of the SCHEDCLS process is matched with the target TC netdev. This allows a program on device A to be attached to device B through clsbpf and...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability arises from the fact that the timeout timer and queue work items are not stopped when releasing unadded disks. As a result, the requestqueue is released while still linked to the timer wheel. This could lead to reuse after release,...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability arises from the use of snprintf in modestring, which may return a number of bytes that exceed the remaining buffer space. The showmodes function does not check whether the returned value reaches PAGESIZE when accumulating it; as a...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability stems from the improper bounds checking of the CCW chaincalclength function in s390/vfioccw. It may lead to accessing the 257th CCW after checking 256 CCWs, resulting in out-of-bounds reading and information leakage...

Linux Kernel Security Vulnerabilities

The Linux kernel version 3.8 contains security vulnerabilities. These vulnerabilities stem from reference counting conflicts between garbage collection and swap operations in netfilter’s ipset module. The functions ipsetputbyindex and ipsetswap may execute in a conflicting manner, leading to...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability stems from the fact that the u32bindclass function does not check the type of the passed parameter fh. As a result, tcuhnode is forced to tcuknode, and the res member is accessed. This leads to an out-of-bounds read of res-classid...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability arises from an error in the MPTCP receive path, where pre-allocated memory is not reclaimed when an error occurs before the skb is added to the receive queue. This leads to unbounded growth in forward allocated memory in abnormal...

Linux Kernel Security Vulnerabilities

The Linux kernel version 4.2 contains security vulnerabilities. These vulnerabilities stem from a mistake in the calculation of the minimum image size for UVD decoding in the file drivers/gpu/drm/amd/amdgpu/amdgpuuvd.c. The program incorrectly uses width instead of pitch in this calculation, and ...

OpenMetadata input validation error vulnerability

Versions of OpenMetadata prior to 2.0.0 have a vulnerability related to input validation errors. This vulnerability arises from redirecting the target after authentication is provided by the caller. No validation is performed on the redirected target, resulting in the server appending the issued...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability arises when Ceph calls handlereply, which fills in the inode and dentry caches. During this process, the cephmdsrequest pointer is stored in current-journalinfo. Memory allocation is directly reclaimed, and other file system dentri...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability stems from multiple insecure decoding operations in the decodelocker function of libceph. No checks are performed on the boundaries of the decoded data, which may allow malicious or infected OSDs to trigger slab overflows, leading ...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability arises from the fact that ipvlan devices do not inherit neededheadroom and neededtailroom from phydev. As a result, insufficient space is reserved for the headers and tails of data packets during upper-layer calculations. This coul...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability stems from libceph failing to check the invalid osd index of primarytemp in the corrupted osdmap received from Ceph monitors or OSDs. As a result, out-of-bounds access occurs when reading the osdstate, osdweight, and osdaddr arrays...

Emacs TRAMP command injection vulnerability

The emacs TRAMP environment has a command injection vulnerability. This vulnerability arises from TRAMP incorrectly cleaning up login parameters before passing them to the local shell, which may lead to arbitrary code execution...

Google Lighthouse input validation error vulnerability

Google Lighthouse has a vulnerability in input validation. This vulnerability stems from the lighthouse component’s insufficient validation of IP addresses published in EndpointSlice objects. This could allow remote attackers to exploit the compromised spoke clusters to create malicious...

Vim code injection vulnerability

Vim has a code injection vulnerability. This vulnerability arises from specially crafted file names that contain quotation characters and expression fragments. The quotation context can be breached during mark/unmark operations, potentially allowing arbitrary Vimscript execution. As a result, she...

Stolostron acm-operator-bundle software supply chain issue vulnerabilities

The Stolostron acm-operator-bundle has a software supply chain vulnerability. This vulnerability stems from the process of downloading scripts from remote sources during the build process, without verifying their authenticity and integrity. This could allow remote attackers to inject malicious...

Submariner Operator: Permissions, permissions management, and access control issues

The Submariner Operator has vulnerabilities related to permission granting and access control. These vulnerabilities stem from the fact that the submariner-k8s-broker-cluster role possesses excessive permissions. This could allow attackers to alter network configurations and overwrite information...