hci_bootstrap_os Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/hci_bootstrap_os/ Sun, 26 Feb 2023 06:43:21 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png hci_bootstrap_os Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/hci_bootstrap_os/ 32 32 CVE-2020-8284 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-8284/ Sun, 26 Feb 2023 06:43:21 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-8284/ A malicious server can use the FTP PASV response to trick curl 7.73.0 and earlier into connecting back to a given IP address and port, and this way potentially make curl extract information about services that are otherwise private and not disclosed, for example doing port scanning and service banner extractions.

The post CVE-2020-8284 appeared first on CVE Vulnerability.

]]> A malicious server can use the FTP PASV response to trick curl 7.73.0 and earlier into connecting back to a given IP address and port, and this way potentially make curl extract information about services that are otherwise private and not disclosed, for example doing port scanning and service banner extractions.

The post CVE-2020-8284 appeared first on CVE Vulnerability.

]]> CVE-2020-8285 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-8285/ Sun, 26 Feb 2023 06:43:21 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-8285/ curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack overflow issue in FTP wildcard match parsing.

The post CVE-2020-8285 appeared first on CVE Vulnerability.

]]> curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack overflow issue in FTP wildcard match parsing.

The post CVE-2020-8285 appeared first on CVE Vulnerability.

]]> CVE-2020-29368 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-29368/ Sun, 26 Feb 2023 06:40:55 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-29368/ An issue was discovered in __split_huge_pmd in mm/huge_memory.c in the Linux kernel before 5.7.5. The copy-on-write implementation can grant unintended write access because of a race condition in a THP mapcount check, aka CID-c444eb564fb1.

The post CVE-2020-29368 appeared first on CVE Vulnerability.

]]> An issue was discovered in __split_huge_pmd in mm/huge_memory.c in the Linux kernel before 5.7.5. The copy-on-write implementation can grant unintended write access because of a race condition in a THP mapcount check, aka CID-c444eb564fb1.

The post CVE-2020-29368 appeared first on CVE Vulnerability.

]]> CVE-2020-16166 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-16166/ Sun, 26 Feb 2023 06:38:09 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-16166/ The Linux kernel through 5.7.11 allows remote attackers to make observations that help to obtain sensitive information about the internal state of the network RNG, aka CID-f227e3ec3b5c. This is related to drivers/char/random.c and kernel/time/timer.c.

The post CVE-2020-16166 appeared first on CVE Vulnerability.

]]> The Linux kernel through 5.7.11 allows remote attackers to make observations that help to obtain sensitive information about the internal state of the network RNG, aka CID-f227e3ec3b5c. This is related to drivers/char/random.c and kernel/time/timer.c.

The post CVE-2020-16166 appeared first on CVE Vulnerability.

]]> CVE-2020-12771 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-12771/ Sun, 26 Feb 2023 06:36:42 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-12771/ An issue was discovered in the Linux kernel through 5.6.11. btree_gc_coalesce in drivers/md/bcache/btree.c has a deadlock if a coalescing operation fails.

The post CVE-2020-12771 appeared first on CVE Vulnerability.

]]> An issue was discovered in the Linux kernel through 5.6.11. btree_gc_coalesce in drivers/md/bcache/btree.c has a deadlock if a coalescing operation fails.

The post CVE-2020-12771 appeared first on CVE Vulnerability.

]]> CVE-2021-4209 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-4209/ Thu, 23 Feb 2023 14:12:10 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-4209/ A NULL pointer dereference flaw was found in GnuTLS. As Nettle’s hash update functions internally call memcpy, providing zero-length input may cause undefined behavior. This flaw leads to a denial of service after authentication in rare circumstances.

The post CVE-2021-4209 appeared first on CVE Vulnerability.

]]> A NULL pointer dereference flaw was found in GnuTLS. As Nettle’s hash update functions internally call memcpy, providing zero-length input may cause undefined behavior. This flaw leads to a denial of service after authentication in rare circumstances.

The post CVE-2021-4209 appeared first on CVE Vulnerability.

]]> CVE-2021-38199 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-38199/ Thu, 23 Feb 2023 14:11:08 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-38199/ fs/nfs/nfs4client.c in the Linux kernel before 5.13.4 has incorrect connection-setup ordering, which allows operators of remote NFSv4 servers to cause a denial of service (hanging of mounts) by arranging for those servers to be unreachable during trunking detection.

The post CVE-2021-38199 appeared first on CVE Vulnerability.

]]> fs/nfs/nfs4client.c in the Linux kernel before 5.13.4 has incorrect connection-setup ordering, which allows operators of remote NFSv4 servers to cause a denial of service (hanging of mounts) by arranging for those servers to be unreachable during trunking detection.

The post CVE-2021-38199 appeared first on CVE Vulnerability.

]]> CVE-2021-38201 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-38201/ Thu, 23 Feb 2023 14:11:08 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-38201/ net/sunrpc/xdr.c in the Linux kernel before 5.13.4 allows remote attackers to cause a denial of service (xdr_set_page_base slab-out-of-bounds access) by performing many NFS 4.2 READ_PLUS operations.

The post CVE-2021-38201 appeared first on CVE Vulnerability.

]]> net/sunrpc/xdr.c in the Linux kernel before 5.13.4 allows remote attackers to cause a denial of service (xdr_set_page_base slab-out-of-bounds access) by performing many NFS 4.2 READ_PLUS operations.

The post CVE-2021-38201 appeared first on CVE Vulnerability.

]]> CVE-2021-38203 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-38203/ Thu, 23 Feb 2023 14:11:08 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-38203/ btrfs in the Linux kernel before 5.13.4 allows attackers to cause a denial of service (deadlock) via processes that trigger allocation of new system chunks during times when there is a shortage of free space in the system space_info.

The post CVE-2021-38203 appeared first on CVE Vulnerability.

]]> btrfs in the Linux kernel before 5.13.4 allows attackers to cause a denial of service (deadlock) via processes that trigger allocation of new system chunks during times when there is a shortage of free space in the system space_info.

The post CVE-2021-38203 appeared first on CVE Vulnerability.

]]> CVE-2021-38160 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-38160/ Thu, 23 Feb 2023 14:11:07 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-38160/ ** DISPUTED ** In drivers/char/virtio_console.c in the Linux kernel before 5.13.4, data corruption or loss can be triggered by an untrusted device that supplies a buf->len value exceeding the buffer size. NOTE: the vendor indicates that the cited data corruption is not a vulnerability in any existing use case; the length validation was added solely […]

The post CVE-2021-38160 appeared first on CVE Vulnerability.

]]> ** DISPUTED ** In drivers/char/virtio_console.c in the Linux kernel before 5.13.4, data corruption or loss can be triggered by an untrusted device that supplies a buf->len value exceeding the buffer size. NOTE: the vendor indicates that the cited data corruption is not a vulnerability in any existing use case; the length validation was added solely for robustness in the face of anomalous host OS behavior.

The post CVE-2021-38160 appeared first on CVE Vulnerability.

]]>