Skip to content
OpenAdvisories

Archive

16 October 2022

Vulnerabilities first published on this day (UTC), newest first.

7 results · Feed

  • Low 2.6

    Linux Kernel kcm kcmsock.c kcm_tx_work race condition

    A vulnerability has been found in Linux Kernel and classified as problematic. This vulnerability affects the function kcm_tx_work of the file net/kcm/kcmsock.c of the component kcm. The manipulation leads to race condition. It is recommended to apply a patch …

  • Medium 4.3

    Linux Kernel IPv6 ipv6_renew_options memory leak

    A vulnerability was found in Linux Kernel. It has been declared as problematic. Affected by this vulnerability is the function ipv6_renew_options of the component IPv6 Handler. The manipulation leads to memory leak. The attack can be launched remotely. It is …

  • Medium 5.3

    Linux Kernel Driver memory.c use after free

    A vulnerability was found in Linux Kernel. It has been classified as problematic. Affected is an unknown function of the file mm/memory.c of the component Driver Handler. The manipulation leads to use after free. It is possible to launch the attack remotely. …

  • Medium 5.3

    Linux Kernel skb macvlan.c macvlan_handle_frame memory leak

    A vulnerability classified as problematic was found in Linux Kernel. This vulnerability affects the function macvlan_handle_frame of the file drivers/net/macvlan.c of the component skb. The manipulation leads to memory leak. The attack can be initiated remote…

  • High 7.5

    Django denial-of-service vulnerability in internationalized URLs

    In Django 3.2 before 3.2.16, 4.0 before 4.0.8, and 4.1 before 4.1.2, internationalized URLs were subject to a potential denial of service attack via the locale parameter, which is treated as a regular expression.

  • Critical 9.8

    Gitea vulnerable to Argument Injection

    Gitea before 1.17.3 does not sanitize and escape refs in the git backend. Arguments to git commands are mishandled.

  • Medium 5.3

    The py library through 1.11.0 for Python allows remote attackers to conduct a ReDoS (Regular expression Denial of Servi…