23530 matches found
log_blackbox.c in libqb before 2.0.8 allows a buffer overflow via long log messages because the header size is not considered.
...
blk-cgroup: Fix class @block_class's subsystem refcount leakage
...
fs/proc: fix softlockup in __read_vmcore (part 2)
...
A security issue was discovered in Kubernetes where a large number of container checkpoint requests made to the unauthenticated kubelet read-only HTTP endpoint may cause a Node Denial of Service by filling the Node's disk.
...
net: sched: fix ets qdisc OOB Indexing
...
drm/v3d: Ensure job pointer is set to NULL after job completion
...
bpf: Fix bpf_sk_select_reuseport() memory leak
...
openvswitch: fix lockup on tx to unregistering netdev with carrier
...
net/mlx5e: Fix inversion dependency warning while enabling IPsec tunnel
...
vsock: prevent null-ptr-deref in vsock_*[has_data|has_space]
...
sctp: sysctl: auth_enable: avoid using current->nsproxy
...
Out-of-bounds read in QuickTimeVideo::NikonTagsDecoder in Exiv2
...
Out-of-bounds write in exiv2
...
Stack overflow vulnerability in ast_selectors.cpp: in function Sass::ComplexSelector::has_placeholder in libsass:3.6.5-8-g210218, which can be exploited by attackers to cause a denial of service (DoS).
...
Stack overflow vulnerability in ast_selectors.cpp in function Sass::CompoundSelector::has_real_parent_ref in libsass:3.6.5-8-g210218, which can be exploited by attackers to causea denial of service (DoS). Also affects the command line driver for libsass, sassc 3.6.2.
...
Open redirect vulnerability in Tornado versions 6.3.1 and earlier allows a remote unauthenticated attacker to redirect a user to an arbitrary web site and conduct a phishing attack by having user access a specially crafted URL.
...
gpio: xilinx: Convert gpio_lock to raw spinlock
...
net/mlx5: Clear port select structure when fail to create
...
sctp: sysctl: rto_min/max: avoid using current->nsproxy
...
block, bfq: fix waker_bfqq UAF after bfq_split_bfqq()
...
pktgen: Avoid out-of-bounds access in get_imix_entries
...
net: fec: handle page_pool_dev_alloc_pages error
...
sctp: sysctl: plpmtud_probe_interval: avoid using current->nsproxy
...
Exiv2 has an out-of-bounds read in AsfVideo::streamProperties
...
PyMySQL through 1.1.0 allows SQL injection if used with untrusted JSON input because keys are not escaped by escape_dict.
...
Memory corruption issues is Cloudflare zlib implementation
...
GNU indent 2.2.13 has a heap-based buffer overflow in search_brace in indent.c via a crafted file.
...
GSS-NTLMSSP vulnerable to incorrect free when decoding target information
...
GSS-NTLMSSP vulnerable to out-of-bounds read when decoding target information
...
gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag
...
scsi: storvsc: Ratelimit warning logs to prevent VM denial of service
...
Timing side-channel in ECDSA signature computation
...
vsock/bpf: return early if transport is not assigned
...
filemap: avoid truncating 64-bit offset to 32 bits
...
Waitress has a denial of service leading to high CPU usage/resource exhaustion
...
vfio/platform: check the bounds of read/write syscalls
...
tty: xilinx_uartps: split sysrq handling
...
usbnet: ipheth: fix DPE OoB read
...
net: rose: lock the socket in rose_bind()
...
ksmbd: fix integer overflows on 32 bit systems
...
usbnet: ipheth: fix possible overflow in DPE length check
...
net/rose: prevent integer overflows in rose_setsockopt()
...
mptcp: consolidate suboption status
...
usbnet: ipheth: use static NDP16 location in URB
...
net: rose: fix timer races against user threads
...
vxlan: Fix uninit-value in vxlan_vnifilter_dump()
...
USB: serial: quatech2: fix null-ptr-deref in qt2_process_read_urb()
...
ptp: Ensure info->enable callback is always set
...