CVE Vulnerability Catalog

A null-ptr-deref vulnerability was found in the Linux kernel's LOCKDEP mechanism. It occurs when a CIFS (or similar) module is unloaded while a TCP socket still exists in FIN-WAIT-1 state, causing an attempt to access a lock class from the already removed module.

W jądrze Linuxa rozwiązano podatność związana z KVM, która polegała na braku odpowiedniej synchronizacji przy uzyskiwaniu stanu MP, co mogło prowadzić do nieautoryzowanego dostępu do pamięci gościa. Problem występował w ekstremalnych przypadkach, gdy przetwarzanie zdarzeń APIC mogło wywołać dostęp do pamięci gościa.

A flaw was found in the libsoup library in cookie handling. libsoup clients mistakenly allow cookies to be set for public suffix domains if the domain contains at least two components and an uppercase character. This bypasses public suffix protections and could allow a malicious website to set cookies for domains it does not own.

A flaw in the libsoup library causes HTTP clients to mistakenly send the Authorization header to the new host during a redirect. This allows the new host to impersonate the user to the original server.

A flaw was found in the libsoup library causing memory leaks in the soup_header_parse_quality_list() function when parsing a quality list containing elements with all zeroes.

In the xfig diagramming tool, a segmentation fault occurs in fig2dev within the read_arcobject function, allowing an attacker to cause a denial of service via local input manipulation.

A vulnerability was found in fig2dev that allows an attacker to manipulate local input in the genge_itp_spline function, potentially leading to availability issues.

In the xfig diagramming tool, a stack overflow while running fig2dev allows memory corruption via local input manipulation in the read_objects function.

pnpm is a package manager that prior to version 10.0.0 used the md5 function for path shortening. In case of a collision, different libraries could share the same storage path, leading to version identification issues.

A vulnerability was found in mod_proxy_cluster where the <Directory> directive is incorrectly used instead of <Location>. The <Directory> directive does not restrict access based on IP address, allowing anyone with host access to send MCMP requests that can add, remove, or update load-balancing nodes.

A stored cross-site scripting (XSS) vulnerability in Alkacon OpenCMS v17.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the image parameter under the Create/Modify article function.

Cross-Site Scripting (XSS) vulnerability in NodeBB v4.0.4 and before allows remote attackers to store arbitrary code in the admin API Access token generator.

A Cross-Site Scripting (XSS) vulnerability in NodeBB v4.0.4 and earlier allows remote attackers to store arbitrary JavaScript code, potentially rendering the IP blacklist functionality unusable until the malicious content is removed from the database.

In the Linux kernel, the int340x thermal driver lacked a NULL check for the ACPI device pointer (adev), which could lead to a NULL pointer dereference in int3402_thermal_probe(). A check has been added, returning -ENODEV if adev is NULL.

In the Linux kernel's DLM (Distributed Lock Manager), a vulnerability leads to a NULL pointer dereference (NPD). When a positive value is written to the event_done file, the new_lockspace function undoes all work, leaving lockspace uninitialized. The __dlm_new_lockspace function incorrectly treats this positive value as success, passing a NULL pointer to dlm_find_lockspace_local, causing a crash.

In the Linux kernel, unnecessary RTNL lock operations were removed for SIOCBRADDIF and SIOCBRDELIF ioctls, which caused deadlocks and warnings about waiting for network device release. The issue occurred when one thread detached an interface from a bridge while another tried to remove the bridge, leading to a lockup and 'unregister_netdevice: waiting' splat.

W jądrze Linuxa zidentyfikowano podatność związaną z trybem bondingu, która może prowadzić do ostrzeżeń podczas zmiany trybu bondingu po podłączeniu programu XDP. Problem występuje, gdy tryb bondingu jest zmieniany po przypisaniu programu XDP, co może skutkować nieprawidłowym działaniem.

In the Linux kernel, the PCI brcmstb driver has a vulnerability where the number of regulators is not set to zero after a regulator_bulk_get() error. If the PCIe link fails, a subsequent regulator_bulk_free() call causes a kernel panic.

In the Linux kernel PAT (Page Attribute Table) mechanism for x86, a bug was found in handling the VM_PAT flag during a failed fork() call. When track_pfn_copy() fails, the VM_PAT flag remains set for the destination VMA, causing an attempt to read PAT information from uncopied page tables, triggering a WARNING and potential system crash.

In the Linux kernel, the mvpp2 driver has a vulnerability that can corrupt the parser TCAM memory. Concurrent access to TCAM and SRAM index registers without proper locking can cause writes to wrong rows and TOCTOU errors during row allocation. This was observed when mvpp2_set_rx_mode() ran on two CPUs simultaneously, corrupting the MVPP2_PE_MAC_UC_PROMISCUOUS entry and dropping all incoming unicast traffic.