KATALOG INFORMACJI
Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
Podatność SSRF w FastGPT umożliwia atakującym wysyłanie dowolnych żądań HTTP do wewnętrznych adresów.
Przepełnienie bufora w klientach VPN na ADM umożliwia zdalne wykonanie kodu przez uwierzytelnionego atakującego.
Luka w Plunet BusinessManager umożliwia nieautoryzowane działania w imieniu uprzywilejowanych użytkowników.
In the Linux kernel, the following vulnerability has been resolved: sparc: fix accurate exception reporting in copy_{from_to}_user for UltraSPARC The referenced commit introduced exception handlers on user-space memory references in copy_from_user and copy_to_user. These handlers return from the…
In the Linux kernel, the following vulnerability has been resolved: scsi: mpt3sas: Fix crash in transport port remove by using ioc_info() During mpt3sas_transport_port_remove(), messages were logged with dev_printk() against &mpt3sas_port->port->dev. At this point the SAS transport device may…
Imager::File::GIF versions before 1.006 for Perl allow out-of-bounds reads when consolidating GIF images. With `gif_consolidate => 1`, palette indices from the image are used without checking the colour table's bounds. The i_readgif_low routine reads beyond the heap allocation and copies the…
DBI versions before 1.656 for Perl crash via type confusion in dbi_profile when a database handle is destroyed under a Profile Path with an {attr} element. An {attr} element names a database handle attribute, which dbi_profile reads from the handle's inner hash. It expects the inner handle as a…
In the Linux kernel, the following vulnerability has been resolved: mm/secretmem: properly account locked pages secretmem accounts folios by treating memory as if it were mlock()'d and thus limited by the RLIMIT_MEMLOCK limit. However the folios are unevictable and remain so until the inode…
In the Linux kernel, the following vulnerability has been resolved: memcg: bypass the reclaim and oom killer for dying tasks once oom_reaper is done At Meta, we are seeing instances where an OOM killed job is stuck in the exit path for several hours. In one particular case, the job was…
Błąd w jądrze Linuxa umożliwia nieograniczoną rekurencję, prowadząc do przepełnienia stosu.
Przepełnienie bufora w jądra Linux umożliwia potencjalne wykonanie nieautoryzowanego kodu.
In the Linux kernel, the following vulnerability has been resolved: futex: Don't leak robust_list pointer on exec race sys_get_robust_list() and compat_get_robust_list() use ptrace_may_access() to check if the calling task is allowed to access another task's robust_list pointer. This check is…
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix potential UAF in bpf_netns_link_update_prog In bpf_netns_link_update_prog, the checks for old_prog and prog type are currently performed locklessly before acquiring netns_bpf_mutex. This creates a race condition that…
In the Linux kernel, the following vulnerability has been resolved: RDMA/cxgb4: Free debugfs on registration failure c4iw_alloc() creates the per-device debugfs tree (dev->debugfs_root via setup_debugfs()), but it is removed only in c4iw_remove(), not in c4iw_dealloc(). When RDMA device…
In the Linux kernel, the following vulnerability has been resolved: dm: fix NULL pointer dereference in __dm_suspend() There is a race condition between dm device suspend and table load that can lead to null pointer dereference. The issue occurs when suspend is invoked before table load…
In the Linux kernel, the following vulnerability has been resolved: Squashfs: fix uninit-value in squashfs_get_parent Syzkaller reports a "KMSAN: uninit-value in squashfs_get_parent" bug. This is caused by open_by_handle_at() being called with a file handle containing an invalid parent inode…
In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix double free in user_cluster_connect() user_cluster_disconnect() frees "conn->cc_private" which is "lc" but then the error handling frees "lc" a second time. Set "lc" to NULL on this path to avoid a double free.
In the Linux kernel, the following vulnerability has been resolved: tracing: Fix race condition in kprobe initialization causing NULL pointer dereference There is a critical race condition in kprobe initialization that can lead to NULL pointer dereference and kernel crash. [1135630.084782]…
In the Linux kernel, the following vulnerability has been resolved: pinctrl: check the return value of pinmux_ops::get_function_name() While the API contract in docs doesn't specify it explicitly, the generic implementation of the get_function_name() callback from struct pinmux_ops -…
A buffer overflow in the gf_ac4_parser_bs function (/media_tools/av_parsers.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service (DoS) via supplying a crafted input.
In the Linux kernel, the following vulnerability has been resolved: dm-ioctl: fix a possible overflow in list_version_get_info sizeof(tt->version) is 12 bytes, but the code writes 16 bytes into the output buffer - info->vers->version[0], info->vers->version[1], info->vers->version[2] and…
Przepełnienie bufora w jądrze Linux w amdgpu może prowadzić do awarii systemu.
Przepełnienie bufora w sterowniku Belkin USB w jądrze Linuxa może prowadzić do odczytu nieprawidłowych danych.
Brak sprawdzenia poprawności transferów w mct_u232 może prowadzić do wycieku danych do przestrzeni użytkownika.
Brak sprawdzenia poprawności transferu danych w sterowniku USB Keyspan może prowadzić do odczytu nieprawidłowych danych.
| Producent / podatność | Opis | Rekomendacja i powód | CVSS | EPSS | Daty źródłowe | Zapis |
|---|---|---|---|---|---|---|
| Podatność SSRF w FastGPT umożliwia atakującym wysyłanie dowolnych żądań HTTP do wewnętrznych adresów. | Podatność SSRF w FastGPT umożliwia atakującym wysyłanie dowolnych żądań HTTP do wewnętrznych adresów. |
Do weryfikacji | Nieustalone | 0,23 % | ||
| Przepełnienie bufora w klientach VPN na ADM umożliwia zdalne wykonanie kodu przez uwierzytelnionego atakującego. | Przepełnienie bufora w klientach VPN na ADM umożliwia zdalne wykonanie kodu przez uwierzytelnionego atakującego. |
Do weryfikacji | Nieustalone | 0,23 % | ||
| Luka w Plunet BusinessManager umożliwia nieautoryzowane działania w imieniu uprzywilejowanych użytkowników. | Luka w Plunet BusinessManager umożliwia nieautoryzowane działania w imieniu uprzywilejowanych użytkowników. |
Do weryfikacji | Nieustalone | 0,23 % | ||
| In the Linux kernel, the following vulnerability has been resolved: sparc: fix accurate exception reporting in copy_{from_to}_user for… | In the Linux kernel, the following vulnerability has been resolved: sparc: fix accurate exception reporting in copy_{from_to}_user for UltraSPARC The referenced commit introduced exception handlers on user-space memory references in copy_from_user and copy_to_user. These handlers return from the… |
Do weryfikacji | Nieustalone | 0,23 % | ||
| In the Linux kernel, the following vulnerability has been resolved: scsi: mpt3sas: Fix crash in transport port remove by using… | In the Linux kernel, the following vulnerability has been resolved: scsi: mpt3sas: Fix crash in transport port remove by using ioc_info() During mpt3sas_transport_port_remove(), messages were logged with dev_printk() against &mpt3sas_port->port->dev. At this point the SAS transport device may… |
Do weryfikacji | Nieustalone | 0,23 % | ||
| Imager::File::GIF versions before 1.006 for Perl allow out-of-bounds reads when consolidating GIF images. | Imager::File::GIF versions before 1.006 for Perl allow out-of-bounds reads when consolidating GIF images. With `gif_consolidate => 1`, palette indices from the image are used without checking the colour table's bounds. The i_readgif_low routine reads beyond the heap allocation and copies the… |
Do weryfikacji | Nieustalone | 0,23 % | ||
| DBI versions before 1.656 for Perl crash via type confusion in dbi_profile when a database handle is destroyed under a Profile Path with… | DBI versions before 1.656 for Perl crash via type confusion in dbi_profile when a database handle is destroyed under a Profile Path with an {attr} element. An {attr} element names a database handle attribute, which dbi_profile reads from the handle's inner hash. It expects the inner handle as a… |
Do weryfikacji | Nieustalone | 0,23 % | ||
| In the Linux kernel, the following vulnerability has been resolved: mm/secretmem: properly account locked pages secretmem accounts… | In the Linux kernel, the following vulnerability has been resolved: mm/secretmem: properly account locked pages secretmem accounts folios by treating memory as if it were mlock()'d and thus limited by the RLIMIT_MEMLOCK limit. However the folios are unevictable and remain so until the inode… |
Do weryfikacji | Nieustalone | 0,23 % | ||
| In the Linux kernel, the following vulnerability has been resolved: memcg: bypass the reclaim and oom killer for dying tasks once… | In the Linux kernel, the following vulnerability has been resolved: memcg: bypass the reclaim and oom killer for dying tasks once oom_reaper is done At Meta, we are seeing instances where an OOM killed job is stuck in the exit path for several hours. In one particular case, the job was… |
Do weryfikacji | Nieustalone | 0,23 % | ||
| Błąd w jądrze Linuxa umożliwia nieograniczoną rekurencję, prowadząc do przepełnienia stosu. | Błąd w jądrze Linuxa umożliwia nieograniczoną rekurencję, prowadząc do przepełnienia stosu. |
Do weryfikacji | Nieustalone | 0,23 % | ||
| Przepełnienie bufora w jądra Linux umożliwia potencjalne wykonanie nieautoryzowanego kodu. | Przepełnienie bufora w jądra Linux umożliwia potencjalne wykonanie nieautoryzowanego kodu. |
Do weryfikacji | Nieustalone | 0,23 % | ||
| In the Linux kernel, the following vulnerability has been resolved: futex: Don't leak robust_list pointer on exec… | In the Linux kernel, the following vulnerability has been resolved: futex: Don't leak robust_list pointer on exec race sys_get_robust_list() and compat_get_robust_list() use ptrace_may_access() to check if the calling task is allowed to access another task's robust_list pointer. This check is… |
Do weryfikacji | Nieustalone | 0,23 % | ||
| In the Linux kernel, the following vulnerability has been resolved: bpf: Fix potential UAF in bpf_netns_link_update_prog In… | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix potential UAF in bpf_netns_link_update_prog In bpf_netns_link_update_prog, the checks for old_prog and prog type are currently performed locklessly before acquiring netns_bpf_mutex. This creates a race condition that… |
Do weryfikacji | Nieustalone | 0,23 % | ||
| In the Linux kernel, the following vulnerability has been resolved: RDMA/cxgb4: Free debugfs on registration failure c4iw_alloc()… | In the Linux kernel, the following vulnerability has been resolved: RDMA/cxgb4: Free debugfs on registration failure c4iw_alloc() creates the per-device debugfs tree (dev->debugfs_root via setup_debugfs()), but it is removed only in c4iw_remove(), not in c4iw_dealloc(). When RDMA device… |
Do weryfikacji | Nieustalone | 0,23 % | ||
| In the Linux kernel, the following vulnerability has been resolved: dm: fix NULL pointer dereference in __dm_suspend() There is a race… | In the Linux kernel, the following vulnerability has been resolved: dm: fix NULL pointer dereference in __dm_suspend() There is a race condition between dm device suspend and table load that can lead to null pointer dereference. The issue occurs when suspend is invoked before table load… |
Do weryfikacji | Nieustalone | 0,23 % | ||
| In the Linux kernel, the following vulnerability has been resolved: Squashfs: fix uninit-value in squashfs_get_parent Syzkaller reports… | In the Linux kernel, the following vulnerability has been resolved: Squashfs: fix uninit-value in squashfs_get_parent Syzkaller reports a "KMSAN: uninit-value in squashfs_get_parent" bug. This is caused by open_by_handle_at() being called with a file handle containing an invalid parent inode… |
Do weryfikacji | Nieustalone | 0,23 % | ||
| In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix double free in user_cluster_connect() user_cluster_disconn… | In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix double free in user_cluster_connect() user_cluster_disconnect() frees "conn->cc_private" which is "lc" but then the error handling frees "lc" a second time. Set "lc" to NULL on this path to avoid a double free. |
Do weryfikacji | Nieustalone | 0,23 % | ||
| In the Linux kernel, the following vulnerability has been resolved: tracing: Fix race condition in kprobe initialization causing NULL… | In the Linux kernel, the following vulnerability has been resolved: tracing: Fix race condition in kprobe initialization causing NULL pointer dereference There is a critical race condition in kprobe initialization that can lead to NULL pointer dereference and kernel crash. [1135630.084782]… |
Do weryfikacji | Nieustalone | 0,23 % | ||
| In the Linux kernel, the following vulnerability has been resolved: pinctrl: check the return value of pinmux_ops::get_function_name() Wh… | In the Linux kernel, the following vulnerability has been resolved: pinctrl: check the return value of pinmux_ops::get_function_name() While the API contract in docs doesn't specify it explicitly, the generic implementation of the get_function_name() callback from struct pinmux_ops -… |
Do weryfikacji | Nieustalone | 0,23 % | ||
| A buffer overflow in the gf_ac4_parser_bs function (/media_tools/av_parsers.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause… | A buffer overflow in the gf_ac4_parser_bs function (/media_tools/av_parsers.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service (DoS) via supplying a crafted input. |
Do weryfikacji | Nieustalone | 0,23 % | ||
| In the Linux kernel, the following vulnerability has been resolved: dm-ioctl: fix a possible overflow in… | In the Linux kernel, the following vulnerability has been resolved: dm-ioctl: fix a possible overflow in list_version_get_info sizeof(tt->version) is 12 bytes, but the code writes 16 bytes into the output buffer - info->vers->version[0], info->vers->version[1], info->vers->version[2] and… |
Do weryfikacji | Nieustalone | 0,23 % | ||
| Przepełnienie bufora w jądrze Linux w amdgpu może prowadzić do awarii systemu. | Przepełnienie bufora w jądrze Linux w amdgpu może prowadzić do awarii systemu. |
Do weryfikacji | Nieustalone | 0,23 % | ||
| Przepełnienie bufora w sterowniku Belkin USB w jądrze Linuxa może prowadzić do odczytu nieprawidłowych danych. | Przepełnienie bufora w sterowniku Belkin USB w jądrze Linuxa może prowadzić do odczytu nieprawidłowych danych. |
Do weryfikacji | Nieustalone | 0,23 % | ||
| Brak sprawdzenia poprawności transferów w mct_u232 może prowadzić do wycieku danych do przestrzeni użytkownika. | Brak sprawdzenia poprawności transferów w mct_u232 może prowadzić do wycieku danych do przestrzeni użytkownika. |
Do weryfikacji | Nieustalone | 0,23 % | ||
| Brak sprawdzenia poprawności transferu danych w sterowniku USB Keyspan może prowadzić do odczytu nieprawidłowych danych. | Brak sprawdzenia poprawności transferu danych w sterowniku USB Keyspan może prowadzić do odczytu nieprawidłowych danych. |
Do weryfikacji | Nieustalone | 0,23 % |
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.