24590 matches found
Xbox Certification Bug Copilot Djando Information Disclosure Vulnerability
Exposure of sensitive information to an unauthorized actor in Xbox allows an unauthorized attacker to disclose information over a network...
Dynamics 365 FastTrack Implementation Assets Information Disclosure Vulnerability
...
PostgreSQL optimizer statistics can expose sampled data within a view, partition, or child table
...
rds: sysctl: rds_tcp_{rcv,snd}buf: avoid using current->nsproxy
...
btrfs: adjust subpage bit start based on sectorsize
...
jfs: Fix shift-out-of-bounds in dbDiscardAG
...
AIDE improper output neutralization vulnerability
...
Libarchive: heap buffer over read in copy_from_lzss_window() at archive_read_support_format_rar.c
...
GNU Binutils nm nm.c internal_strlen buffer overflow
...
Grub2: fs/hfs+: refcount can be decremented twice
...
iommu/amd: Avoid stack buffer overflow from kernel cmdline
...
Excessive resource consumption in net/http, net/textproto and mime/multipart
...
Libarchive: double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c
...
Comments in display names are incorrectly handled in net/mail
...
bonding: check xdp prog when set bond mode
...
vim xxd xxd.c main buffer overflow
...
HDF5 H5Gnode.c H5G__node_cmp3 stack-based overflow
...
Grub2: reader/jpeg: heap oob write during jpeg parsing
...
net: allow small head cache usage with large MAX_SKB_FRAGS values
...
atm: clip: Fix infinite recursive call of clip_push().
...
HDF5 H5Omtime.c H5O__mtime_new_encode heap-based overflow
...
Grub2: commands/extcmd: missing check for failed allocation
...
Bluetooth: hci_core: Fix use-after-free in vhci_flush()
...
jqlang jq JSON jq_test.c run_jq_tests assertion
...
libp2p nodes vulnerable to attack using large RSA keys
...
sfc: fix NULL dereferences in ef100_process_design_param()
...
atm: clip: Fix potential null-ptr-deref in to_atmarpd().
...
Apache Portable Runtime (APR): out-of-bound writes in the apr_encode family of functions
...
Denial of service via chunk extensions in net/http
...
HDF5 H5FL.c H5FL__reg_gc_list use after free
...
Libarchive: integer overflow while reading warc files at archive_read_support_format_warc.c
...
objtool, spi: amd: Fix out-of-bounds stack access in amd_set_spi_freq()
...
Libopensc: heap buffer overflow in openpgp driver when generating key
...
net: appletalk: Fix use-after-free in AARP proxy probe
...
LibTIFF tiffcrop tiffcrop.c readSeparateStripsetoBuffer stack-based overflow
...
ksmbd: fix null pointer dereference in alloc_preauth_hash()
...
drm/msm: Fix a fence leak in submit error path
...
bnxt: properly flush XDP redirect lists
...
Grub2: grub-core/gettext: integer overflow leads to heap oob write and read.
...
tls: handle data disappearing from under the TLS ULP
...
Libarchive: off by one error in build_ustar_entry_name() at archive_write_set_format_pax.c
...
HDF5 H5Ofsinfo.c H5O__fsinfo_encode heap-based overflow
...
tipc: Fix use-after-free in tipc_conn_close().
...
: null pointer dereference in libssh kex session id calculation
...
The attack vector is a potential Denial of Service (DoS). The vulnerability is caused by an insufficient check on the length of a decompressed domain name within a DNS packet. An attacker can craft a malicious DNS packet containing a highly compressed domain name. When the resolv library parses such a packet, the name decompression process consumes a large amount of CPU resources, as the library does not limit the resulting length of the name. This resource consumption can cause the application thread to become unresponsive, resulting in a Denial of Service condition.
...
net/mlx5: Check device memory pointer before usage
...
fs/proc: do_task_stat: use sig->stats_lock to gather the threads/children stats
...
arm64/entry: Mask DAIF in cpu_switch_to(), call_on_irq_stack()
...