28854 matches found
Apache HTTP Server: multiple modules: HTTP response splitting forwarding malicious status line
...
Gnutls: gnutls: security bypass allows acceptance of revoked server certificates via crafted ocsp response
...
Gnutls: gnutls: denial of service via dtls zero-length fragment
...
net: ioam6: fix OOB and missing lock
...
net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query
...
ipv6: ioam: fix potential NULL dereferences in __ioam6_fill_trace_data()
...
wifi: rtw89: fix potential zero beacon interval in beacon tracking
...
Bluetooth: hci_sync: annotate data-races around hdev->req_status
...
net: Drop the lock in skb_may_tx_timestamp()
...
hfs: Replace BUG_ON with error handling for CNID count checks
...
drm/amdgpu: validate user queue size constraints
...
hwmon: (nct7363) Fix a resource leak in nct7363_present_pwm_fanin
...
APEI/GHES: ARM processor Error: don't go past allocated memory
...
drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4
...
usb: chipidea: udc: fix DMA and SG cleanup in _ep_nuke()
...
drm/amdgpu: fix NULL pointer issue buffer funcs
...
drm/amd/display: Add signal type check for dcn401 get_phyd32clk_src
...
xfrm: account XFRMA_IF_ID in aevent size calculation
...
fs/ntfs3: handle attr_set_size() errors when truncating files
...
alpha: fix user-space corruption during memory compaction
...
drm/amd/display: Adjust PHY FSM transition to TX_EN-to-PLL_ON for TMDS on DCN35
...
kcm: fix zero-frag skb in frag_list on partial sendmsg error
...
mailbox: mchp-ipc-sbi: fix out-of-bounds access in mchp_ipc_get_cluster_aggr_irq()
...
xfs: remove xfs_attr_leaf_hasname
...
btrfs: fix zero size inode with non-zero size after log replay
...
wifi: rtw88: Use devm_kmemdup() in rtw_set_supported_band()
...
netconsole: avoid OOB reads, msg is not nul-terminated
...
net: qrtr: Drop the MHI auto_queue feature for IPCR DL channels
...
wifi: iwlwifi: fix 22000 series SMEM parsing
...
drm/amdgpu/ras: Move ras data alloc before bad page check
...
team: avoid NETDEV_CHANGEMTU event when unregistering slave
...
misc: ti_fpc202: fix a potential memory leak in probe function
...
tcp: fix potential race in tcp_v6_syn_recv_sock()
...
iommu/vt-d: Skip dev-iotlb flush for inaccessible PCIe device without scalable mode
...
ntfs3: fix circular locking dependency in run_unpack_ex
...
drm/amd/pm: Fix null pointer dereference issue
...
wifi: rtw89: pci: validate release report content before using for RTL8922DE
...
vhost: move vdpa group bound check to vhost_vdpa
...
dlm: validate length in dlm_search_rsb_tree
...
Prometheus: remote read endpoint allows denial of service via crafted snappy payload
...
Prometheus Azure AD remote write OAuth client secret exposed via config API
...
Vulnerability in the MySQL Shell product of Oracle MySQL (component: Shell: Core Client). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where MySQL Shell executes to compromise MySQL Shell. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Shell. CVSS 3.1 Base Score 5.0 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H).
...
CoreDNS DNS-over-QUIC unbounded goroutine growth leads to denial of service
...
CoreDNS DoH GET path missing size validation causes CPU and memory amplification
...
CoreDNS transfer plugin subzone ACL bypass via lexicographic zone comparison
...
CoreDNS TSIG authentication bypass on encrypted DNS transports
...
ip6_tunnel: clear skb2->cb[] in ip4ip6_err()
...
Postfix before 3.8.16, 3.9 before 3.9.10, and 3.10 before 3.10.9 sometimes allows a buffer over-read and process crash via an enhanced status code that lacks text after the third number.
...
An off-by-one out-of-bounds write vulnerability in the bgp_flowspec_op_decode() function (bgpd/bgp_flowspec_util.c) of FRRouting (FRR) stable/10.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted FlowSpec component.
...