Security
Headlines
HeadlinesLatestCVEs

Tag

#dos

CVE-2021-4149: lock held when returning to user space in __btrfs_tree_lock

A vulnerability was found in btrfs_alloc_tree_b in fs/btrfs/extent-tree.c in the Linux kernel due to an improper lock operation in btrfs. In this flaw, a user with a local privilege may cause a denial of service (DOS) due to a deadlock problem.

CVE
#vulnerability#ios#google#linux#dos#git#bios
CVE-2021-4150: LKML: Hao Sun: WARNING in __init_work

A use-after-free flaw was found in the add_partition in block/partitions/core.c in the Linux kernel. A local attacker with user privileges could cause a denial of service on the system. The issue results from the lack of code cleanup when device_add call fails when adding a partition to the disk.

CVE-2022-24293: Certain HP Print Products – Potential information disclosure, denial of service, remote code execution

Certain HP Print devices may be vulnerable to potential information disclosure, denial of service, or remote code execution.

CVE-2021-3748: virtio-net: fix use after unmap/free for sg · qemu/qemu@bedd7e9

A use-after-free vulnerability was found in the virtio-net device of QEMU. It could occur when the descriptor's address belongs to the non direct access region, due to num_buffers being set after the virtqueue elem has been unmapped. A malicious guest could use this flaw to crash QEMU, resulting in a denial of service condition, or potentially execute code on the host with the privileges of the QEMU process.

CVE-2021-4148: general protection fault in wb_timer_fn

A vulnerability was found in the Linux kernel's block_invalidatepage in fs/buffer.c in the filesystem. A missing sanity check may allow a local attacker with user privilege to cause a denial of service (DOS) problem.

CVE-2021-4149: lock held when returning to user space in __btrfs_tree_lock

A vulnerability was found in btrfs_alloc_tree_b in fs/btrfs/extent-tree.c in the Linux kernel due to an improper lock operation in btrfs. In this flaw, a user with a local privilege may cause a denial of service (DOS) due to a deadlock problem.

CVE-2021-4219: remote DoS in MagicCore/draw.c via crafted SVG file

A flaw was found in ImageMagick. The vulnerability occurs due to improper use of open functions and leads to a denial of service. This flaw allows an attacker to crash the system.

CVE-2021-4150: LKML: Hao Sun: WARNING in __init_work

A use-after-free flaw was found in the add_partition in block/partitions/core.c in the Linux kernel. A local attacker with user privileges could cause a denial of service on the system. The issue results from the lack of code cleanup when device_add call fails when adding a partition to the disk.

CVE-2022-22316: IBM MQ Appliance denial of service CVE-2022-22316 Vulnerability Report

IBM MQ Appliance 9.2 CD and 9.2 LTS could allow an authenticated and authorized user to cause a denial of service due to incorrectly configured authorization checks. IBM X-Force ID: 218276.

CVE-2021-45757: GitHub - IBUILI/Asus

ASUS AC68U <=3.0.0.4.385.20852 is affected by a buffer overflow in blocking.cgi, which may cause a denial of service (DoS).