| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2019-15005 | Med | 0.28 | 4.3 | 0.01 | Nov 8, 2019 | The Atlassian Troubleshooting and Support Tools plugin prior to version 1.17.2 allows an unprivileged user to initiate periodic log scans and send the results to a user-specified email address due to a missing authorization check. The email message may contain configuration… | ||
| CVE-2019-18835 | Cri | 0.57 | 9.8 | 0.01 | Nov 8, 2019 | Matrix Synapse before 1.5.0 mishandles signature checking on some federation APIs. Events sent over /send_join, /send_leave, and /invite may not be correctly signed, or may not come from the expected servers. | ||
| CVE-2008-7291 | Cri | 0.64 | 9.8 | 0.01 | Nov 8, 2019 | gri before 2.12.18 generates temporary files in an insecure way. | ||
| CVE-2008-7272 | Hig | 0.49 | 7.5 | 0.01 | Nov 8, 2019 | FireGPG before 0.6 handle user’s passphrase and decrypted cleartext insecurely by writing pre-encrypted cleartext and the user's passphrase to disk which may result in the compromise of secure communication or a users’s private key. | ||
| CVE-2008-5083 | Med | 0.42 | 6.5 | 0.01 | Nov 8, 2019 | In JON 2.1.x before 2.1.2 SP1, users can obtain unauthorized security information about private resources managed by JBoss ON. | ||
| CVE-2013-1811 | Med | 0.28 | 4.3 | 0.01 | Nov 7, 2019 | An access control issue in MantisBT before 1.2.13 allows users with "Reporter" permissions to change any issue to "New". | ||
| CVE-2013-1809 | Hig | 0.49 | 7.5 | 0.02 | Nov 7, 2019 | Gambas before 3.4.0 allows remote attackers to move or manipulate directory contents or perform symlink attacks due to the creation of insecure temporary directories. | ||
| CVE-2013-1771 | Hig | 0.42 | 7.5 | 0.03 | Nov 7, 2019 | The web server Monkeyd produces a world-readable log (/var/log/monkeyd/master.log) on gentoo. | ||
| CVE-2008-3278 | Hig | 0.51 | 7.8 | 0.00 | Nov 7, 2019 | frysk packages through 2008-08-05 as shipped in Red Hat Enterprise Linux 5 are built with an insecure RPATH set in the ELF header of multiple binaries in /usr/bin/f* (e.g. fcore, fcatch, fstack, fstep, ...) shipped in the package. A local attacker can exploit this vulnerability… | ||
| CVE-2007-6745 | Cri | 0.64 | 9.8 | 0.02 | Nov 7, 2019 | clamav 0.91.2 suffers from a floating point exception when using ScanOLE2. | ||
| CVE-2019-18818 | Cri | 0.75 | 9.8 | 0.98 | Nov 7, 2019 | strapi before 3.0.0-beta.17.5 mishandles password resets within packages/strapi-admin/controllers/Auth.js and packages/strapi-plugin-users-permissions/controllers/Auth.js. | ||
| CVE-2013-1751 | Cri | 0.64 | 9.8 | 0.05 | Nov 7, 2019 | TWiki before 5.1.4 allows remote attackers to execute arbitrary shell commands by sending a crafted '%MAKETEXT{}%' parameter value containing Perl backtick characters. | ||
| CVE-2013-1429 | Med | 0.41 | 6.3 | 0.01 | Nov 7, 2019 | Lintian before 2.5.12 allows remote attackers to gather information about the "host" system using crafted symlinks. | ||
| CVE-2007-5743 | Hig | 0.49 | 7.5 | 0.01 | Nov 7, 2019 | viewvc 1.0.3 allows improper access control to files in a repository when using the "forbidden" configuration option. | ||
| CVE-2007-3915 | Cri | 0.59 | 9.1 | 0.01 | Nov 7, 2019 | Mondo 2.24 has insecure handling of temporary files. | ||
| CVE-2007-3732 | Med | 0.36 | 5.5 | 0.00 | Nov 7, 2019 | In Linux 2.6 before 2.6.23, the TRACE_IRQS_ON function in iret_exc calls a C function without ensuring that the segments are set properly. The kernel's %fs needs to be restored before the call in TRACE_IRQS_ON and before enabling interrupts, so that "current" references work.… | ||
| CVE-2019-18821 | Med | 0.36 | 5.5 | 0.00 | Nov 7, 2019 | Eximious Logo Designer 3.82 has a User Mode Write AV starting at ExiCustomPathLib!ExiCustomPathLib::CGradientColorsProfile::BuildGradientColorsTable+0x0000000000000053. | ||
| CVE-2019-18820 | Med | 0.36 | 5.5 | 0.00 | Nov 7, 2019 | Eximious Logo Designer 3.82 has Heap Corruption starting at ntdll!RtlpNtMakeTemporaryKey+0x0000000000001a78. | ||
| CVE-2019-18819 | Med | 0.36 | 5.5 | 0.00 | Nov 7, 2019 | Eximious Logo Designer 3.82 has a User Mode Write AV starting at ExiVectorRender!StrokeText_Blend+0x00000000000003a7. | ||
| CVE-2018-18674 | Med | 0.40 | 6.1 | 0.01 | Nov 7, 2019 | GNUBOARD5 5.3.1.9 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "board tail contents" parameter, aka the adm/board_form_update.php bo_content_tail parameter. | ||
| CVE-2013-1426 | Med | 0.33 | 6.1 | 0.01 | Nov 7, 2019 | Cross-site Scripting (XSS) in Mahara before 1.5.9 and 1.6.x before 1.6.4 allows remote attackers to inject arbitrary web script or HTML via the TinyMCE editor. | ||
| CVE-2013-1425 | Med | 0.29 | 5.5 | 0.00 | Nov 7, 2019 | ldap-git-backup before 1.0.4 exposes password hashes due to incorrect directory permissions. | ||
| CVE-2010-2476 | Cri | 0.64 | 9.8 | 0.02 | Nov 7, 2019 | syscp 1.4.2.1 allows attackers to add arbitrary paths via the documentroot of a domain by appending a colon to it and setting the open basedir path to use that domain documentroot. | ||
| CVE-2010-2450 | Hig | 0.49 | 7.5 | 0.01 | Nov 7, 2019 | The keygen.sh script in Shibboleth SP 2.0 (located in /usr/local/etc/shibboleth by default) uses OpenSSL to create a DES private key which is placed in sp-key.pm. It relies on the root umask (default 22) instead of chmoding the resulting file itself, so the generated private key… | ||
| CVE-2019-3465 | Hig | 0.50 | 8.8 | 0.03 | Nov 7, 2019 | Rob Richards XmlSecLibs, all versions prior to v3.0.3, as used for example by SimpleSAMLphp, performed incorrect validation of cryptographic signatures in XML messages, allowing an authenticated attacker to impersonate others or elevate privileges by creating a crafted XML… | ||
| CVE-2019-3422 | Med | 0.40 | 6.2 | 0.01 | Nov 7, 2019 | The Sec Consult Security Lab reported an information disclosure vulnerability in MF910S product to ZTE PSIRT in October 2019. Through the analysis of related product team, the information disclosure vulnerability is confirmed. The MF910S product's one-click upgrade tool can… | ||
| CVE-2010-2449 | Med | 0.42 | 6.5 | 0.02 | Nov 7, 2019 | Gource through 0.26 logs to a predictable file name (/tmp/gource-$UID.tmp), enabling attackers to overwrite an arbitrary file via a symlink attack. | ||
| CVE-2010-2447 | Cri | 0.57 | 9.8 | 0.02 | Nov 7, 2019 | gitolite before 1.4.1 does not filter src/ or hooks/ from path names. | ||
| CVE-2019-11996 | Cri | 0.64 | 9.8 | 0.01 | Nov 7, 2019 | Potential security vulnerabilities have been identified with HPE Nimble Storage systems in multi array group configurations. The vulnerabilities could be exploited by an attacker to gain elevated privileges on the array. The following NimbleOS versions, and all subsequent… | ||
| CVE-2010-2473 | Med | 0.42 | 6.5 | 0.01 | Nov 7, 2019 | Drupal 6.x before 6.16 and 5.x before version 5.22 does not properly block users under certain circumstances. A user with an open session that was blocked could maintain their session on the Drupal site despite being blocked. | ||
| CVE-2010-2472 | Med | 0.31 | 4.8 | 0.01 | Nov 7, 2019 | Locale module and dependent contributed modules in Drupal 6.x before 6.16 and 5.x before version 5.22 do not sanitize the display of language codes, native and English language names properly which could allow an attacker to perform a cross-site scripting (XSS) attack. This… | ||
| CVE-2019-3764 | Med | 0.28 | 4.3 | 0.01 | Nov 7, 2019 | Dell EMC iDRAC7 versions prior to 2.65.65.65, iDRAC8 versions prior to 2.70.70.70 and iDRAC9 versions prior to 3.36.36.36 contain an improper authorization vulnerability. A remote authenticated malicious iDRAC user with low privileges may potentially exploit this vulnerability… | ||
| CVE-2012-0051 | Hig | 0.48 | 7.4 | 0.02 | Nov 7, 2019 | Tahoe-LAFS 1.9.0 fails to ensure integrity which allows remote attackers to corrupt mutable files or directories upon retrieval. | ||
| CVE-2012-0049 | Med | 0.28 | 4.3 | 0.01 | Nov 7, 2019 | OpenTTD before 1.1.5 contains a Denial of Service (slow read attack) that prevents users from joining the server. | ||
| CVE-2011-2337 | Cri | 0.64 | 9.8 | 0.01 | Nov 7, 2019 | A wrong type is used for a return value from strlen in WebKit in Google Chrome before Blink M12 on 64-bit platforms. | ||
| CVE-2011-2336 | Med | 0.42 | 6.5 | 0.01 | Nov 7, 2019 | An issue exists in WebKit in Google Chrome before Blink M12. when clearing lists in AnimationControllerPrivate that signal when a hardware animation starts. | ||
| CVE-2010-2250 | Med | 0.40 | 6.1 | 0.01 | Nov 7, 2019 | Drupal 5.x and 6.x before 6.16 uses a user-supplied value in output during site installation which could allow an attacker to craft a URL and perform a cross-site scripting attack. | ||
| CVE-2019-18816 | Med | 0.40 | 6.1 | 0.01 | Nov 7, 2019 | po-admin/route.php?mod=post&act=edit in PopojiCMS 2.0.1 allows post[1][content]= stored XSS. | ||
| CVE-2019-18815 | Med | 0.40 | 6.1 | 0.01 | Nov 7, 2019 | PopojiCMS 2.0.1 allows refer= Open Redirection. | ||
| CVE-2011-2807 | Med | 0.42 | 6.5 | 0.00 | Nov 7, 2019 | Incorrect handling of timer information in Timer.cpp in WebKit in Google Chrome before Blink M13. | ||
| CVE-2011-2353 | Med | 0.42 | 6.5 | 0.01 | Nov 7, 2019 | Use after free vulnerability in documentloader in WebKit in Google Chrome before Blink M13 in DocumentWriter::replaceDocument function. | ||
| CVE-2010-2243 | Hig | 0.42 | 7.5 | 0.03 | Nov 7, 2019 | A vulnerability exists in kernel/time/clocksource.c in the Linux kernel before 2.6.34 where on non-GENERIC_TIME systems (GENERIC_TIME=n), accessing /sys/devices/system/clocksource/clocksource0/current_clocksource results in an OOPS. | ||
| CVE-2019-18814 | Cri | 0.64 | 9.8 | 0.03 | Nov 7, 2019 | An issue was discovered in the Linux kernel through 5.3.9. There is a use-after-free when aa_label_parse() fails in aa_audit_rule_init() in security/apparmor/audit.c. | ||
| CVE-2019-18813 | Hig | 0.49 | 7.5 | 0.04 | Nov 7, 2019 | A memory leak in the dwc3_pci_probe() function in drivers/usb/dwc3/dwc3-pci.c in the Linux kernel through 5.3.9 allows attackers to cause a denial of service (memory consumption) by triggering platform_device_add_properties() failures, aka CID-9bbfceea12a8. | ||
| CVE-2019-18812 | Hig | 0.42 | 7.5 | 0.04 | Nov 7, 2019 | A memory leak in the sof_dfsentry_write() function in sound/soc/sof/debug.c in the Linux kernel through 5.3.9 allows attackers to cause a denial of service (memory consumption), aka CID-c0a333d842ef. | ||
| CVE-2019-18811 | Med | 0.29 | 5.5 | 0.00 | Nov 7, 2019 | A memory leak in the sof_set_get_large_ctrl_data() function in sound/soc/sof/ipc.c in the Linux kernel through 5.3.9 allows attackers to cause a denial of service (memory consumption) by triggering sof_get_ctrl_copy_params() failures, aka CID-45c1380358b1. | ||
| CVE-2019-18810 | Hig | 0.49 | 7.5 | 0.03 | Nov 7, 2019 | A memory leak in the komeda_wb_connector_add() function in drivers/gpu/drm/arm/display/komeda/komeda_wb_connector.c in the Linux kernel before 5.3.8 allows attackers to cause a denial of service (memory consumption) by triggering drm_writeback_connector_init() failures, aka… | ||
| CVE-2019-18809 | Med | 0.23 | 4.6 | 0.00 | Nov 7, 2019 | A memory leak in the af9005_identify_state() function in drivers/media/usb/dvb-usb/af9005.c in the Linux kernel through 5.3.9 allows attackers to cause a denial of service (memory consumption), aka CID-2289adbfa559. | ||
| CVE-2019-18808 | Med | 0.29 | 5.5 | 0.00 | Nov 7, 2019 | A memory leak in the ccp_run_sha_cmd() function in drivers/crypto/ccp/ccp-ops.c in the Linux kernel through 5.3.9 allows attackers to cause a denial of service (memory consumption), aka CID-128c66429247. | ||
| CVE-2019-18807 | Hig | 0.49 | 7.5 | 0.03 | Nov 7, 2019 | Two memory leaks in the sja1105_static_config_upload() function in drivers/net/dsa/sja1105/sja1105_spi.c in the Linux kernel before 5.3.5 allow attackers to cause a denial of service (memory consumption) by triggering static_config_buf_prepare_for_upload() or… |
- risk 0.28cvss 4.3epss 0.01
The Atlassian Troubleshooting and Support Tools plugin prior to version 1.17.2 allows an unprivileged user to initiate periodic log scans and send the results to a user-specified email address due to a missing authorization check. The email message may contain configuration…
- risk 0.57cvss 9.8epss 0.01
Matrix Synapse before 1.5.0 mishandles signature checking on some federation APIs. Events sent over /send_join, /send_leave, and /invite may not be correctly signed, or may not come from the expected servers.
- risk 0.64cvss 9.8epss 0.01
gri before 2.12.18 generates temporary files in an insecure way.
- risk 0.49cvss 7.5epss 0.01
FireGPG before 0.6 handle user’s passphrase and decrypted cleartext insecurely by writing pre-encrypted cleartext and the user's passphrase to disk which may result in the compromise of secure communication or a users’s private key.
- risk 0.42cvss 6.5epss 0.01
In JON 2.1.x before 2.1.2 SP1, users can obtain unauthorized security information about private resources managed by JBoss ON.
- risk 0.28cvss 4.3epss 0.01
An access control issue in MantisBT before 1.2.13 allows users with "Reporter" permissions to change any issue to "New".
- risk 0.49cvss 7.5epss 0.02
Gambas before 3.4.0 allows remote attackers to move or manipulate directory contents or perform symlink attacks due to the creation of insecure temporary directories.
- risk 0.42cvss 7.5epss 0.03
The web server Monkeyd produces a world-readable log (/var/log/monkeyd/master.log) on gentoo.
- risk 0.51cvss 7.8epss 0.00
frysk packages through 2008-08-05 as shipped in Red Hat Enterprise Linux 5 are built with an insecure RPATH set in the ELF header of multiple binaries in /usr/bin/f* (e.g. fcore, fcatch, fstack, fstep, ...) shipped in the package. A local attacker can exploit this vulnerability…
- risk 0.64cvss 9.8epss 0.02
clamav 0.91.2 suffers from a floating point exception when using ScanOLE2.
- risk 0.75cvss 9.8epss 0.98
strapi before 3.0.0-beta.17.5 mishandles password resets within packages/strapi-admin/controllers/Auth.js and packages/strapi-plugin-users-permissions/controllers/Auth.js.
- risk 0.64cvss 9.8epss 0.05
TWiki before 5.1.4 allows remote attackers to execute arbitrary shell commands by sending a crafted '%MAKETEXT{}%' parameter value containing Perl backtick characters.
- risk 0.41cvss 6.3epss 0.01
Lintian before 2.5.12 allows remote attackers to gather information about the "host" system using crafted symlinks.
- risk 0.49cvss 7.5epss 0.01
viewvc 1.0.3 allows improper access control to files in a repository when using the "forbidden" configuration option.
- risk 0.59cvss 9.1epss 0.01
Mondo 2.24 has insecure handling of temporary files.
- risk 0.36cvss 5.5epss 0.00
In Linux 2.6 before 2.6.23, the TRACE_IRQS_ON function in iret_exc calls a C function without ensuring that the segments are set properly. The kernel's %fs needs to be restored before the call in TRACE_IRQS_ON and before enabling interrupts, so that "current" references work.…
- risk 0.36cvss 5.5epss 0.00
Eximious Logo Designer 3.82 has a User Mode Write AV starting at ExiCustomPathLib!ExiCustomPathLib::CGradientColorsProfile::BuildGradientColorsTable+0x0000000000000053.
- risk 0.36cvss 5.5epss 0.00
Eximious Logo Designer 3.82 has Heap Corruption starting at ntdll!RtlpNtMakeTemporaryKey+0x0000000000001a78.
- risk 0.36cvss 5.5epss 0.00
Eximious Logo Designer 3.82 has a User Mode Write AV starting at ExiVectorRender!StrokeText_Blend+0x00000000000003a7.
- risk 0.40cvss 6.1epss 0.01
GNUBOARD5 5.3.1.9 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "board tail contents" parameter, aka the adm/board_form_update.php bo_content_tail parameter.
- risk 0.33cvss 6.1epss 0.01
Cross-site Scripting (XSS) in Mahara before 1.5.9 and 1.6.x before 1.6.4 allows remote attackers to inject arbitrary web script or HTML via the TinyMCE editor.
- risk 0.29cvss 5.5epss 0.00
ldap-git-backup before 1.0.4 exposes password hashes due to incorrect directory permissions.
- risk 0.64cvss 9.8epss 0.02
syscp 1.4.2.1 allows attackers to add arbitrary paths via the documentroot of a domain by appending a colon to it and setting the open basedir path to use that domain documentroot.
- risk 0.49cvss 7.5epss 0.01
The keygen.sh script in Shibboleth SP 2.0 (located in /usr/local/etc/shibboleth by default) uses OpenSSL to create a DES private key which is placed in sp-key.pm. It relies on the root umask (default 22) instead of chmoding the resulting file itself, so the generated private key…
- risk 0.50cvss 8.8epss 0.03
Rob Richards XmlSecLibs, all versions prior to v3.0.3, as used for example by SimpleSAMLphp, performed incorrect validation of cryptographic signatures in XML messages, allowing an authenticated attacker to impersonate others or elevate privileges by creating a crafted XML…
- risk 0.40cvss 6.2epss 0.01
The Sec Consult Security Lab reported an information disclosure vulnerability in MF910S product to ZTE PSIRT in October 2019. Through the analysis of related product team, the information disclosure vulnerability is confirmed. The MF910S product's one-click upgrade tool can…
- risk 0.42cvss 6.5epss 0.02
Gource through 0.26 logs to a predictable file name (/tmp/gource-$UID.tmp), enabling attackers to overwrite an arbitrary file via a symlink attack.
- risk 0.57cvss 9.8epss 0.02
gitolite before 1.4.1 does not filter src/ or hooks/ from path names.
- risk 0.64cvss 9.8epss 0.01
Potential security vulnerabilities have been identified with HPE Nimble Storage systems in multi array group configurations. The vulnerabilities could be exploited by an attacker to gain elevated privileges on the array. The following NimbleOS versions, and all subsequent…
- risk 0.42cvss 6.5epss 0.01
Drupal 6.x before 6.16 and 5.x before version 5.22 does not properly block users under certain circumstances. A user with an open session that was blocked could maintain their session on the Drupal site despite being blocked.
- risk 0.31cvss 4.8epss 0.01
Locale module and dependent contributed modules in Drupal 6.x before 6.16 and 5.x before version 5.22 do not sanitize the display of language codes, native and English language names properly which could allow an attacker to perform a cross-site scripting (XSS) attack. This…
- risk 0.28cvss 4.3epss 0.01
Dell EMC iDRAC7 versions prior to 2.65.65.65, iDRAC8 versions prior to 2.70.70.70 and iDRAC9 versions prior to 3.36.36.36 contain an improper authorization vulnerability. A remote authenticated malicious iDRAC user with low privileges may potentially exploit this vulnerability…
- risk 0.48cvss 7.4epss 0.02
Tahoe-LAFS 1.9.0 fails to ensure integrity which allows remote attackers to corrupt mutable files or directories upon retrieval.
- risk 0.28cvss 4.3epss 0.01
OpenTTD before 1.1.5 contains a Denial of Service (slow read attack) that prevents users from joining the server.
- risk 0.64cvss 9.8epss 0.01
A wrong type is used for a return value from strlen in WebKit in Google Chrome before Blink M12 on 64-bit platforms.
- risk 0.42cvss 6.5epss 0.01
An issue exists in WebKit in Google Chrome before Blink M12. when clearing lists in AnimationControllerPrivate that signal when a hardware animation starts.
- risk 0.40cvss 6.1epss 0.01
Drupal 5.x and 6.x before 6.16 uses a user-supplied value in output during site installation which could allow an attacker to craft a URL and perform a cross-site scripting attack.
- risk 0.40cvss 6.1epss 0.01
po-admin/route.php?mod=post&act=edit in PopojiCMS 2.0.1 allows post[1][content]= stored XSS.
- risk 0.40cvss 6.1epss 0.01
PopojiCMS 2.0.1 allows refer= Open Redirection.
- risk 0.42cvss 6.5epss 0.00
Incorrect handling of timer information in Timer.cpp in WebKit in Google Chrome before Blink M13.
- risk 0.42cvss 6.5epss 0.01
Use after free vulnerability in documentloader in WebKit in Google Chrome before Blink M13 in DocumentWriter::replaceDocument function.
- risk 0.42cvss 7.5epss 0.03
A vulnerability exists in kernel/time/clocksource.c in the Linux kernel before 2.6.34 where on non-GENERIC_TIME systems (GENERIC_TIME=n), accessing /sys/devices/system/clocksource/clocksource0/current_clocksource results in an OOPS.
- risk 0.64cvss 9.8epss 0.03
An issue was discovered in the Linux kernel through 5.3.9. There is a use-after-free when aa_label_parse() fails in aa_audit_rule_init() in security/apparmor/audit.c.
- risk 0.49cvss 7.5epss 0.04
A memory leak in the dwc3_pci_probe() function in drivers/usb/dwc3/dwc3-pci.c in the Linux kernel through 5.3.9 allows attackers to cause a denial of service (memory consumption) by triggering platform_device_add_properties() failures, aka CID-9bbfceea12a8.
- risk 0.42cvss 7.5epss 0.04
A memory leak in the sof_dfsentry_write() function in sound/soc/sof/debug.c in the Linux kernel through 5.3.9 allows attackers to cause a denial of service (memory consumption), aka CID-c0a333d842ef.
- risk 0.29cvss 5.5epss 0.00
A memory leak in the sof_set_get_large_ctrl_data() function in sound/soc/sof/ipc.c in the Linux kernel through 5.3.9 allows attackers to cause a denial of service (memory consumption) by triggering sof_get_ctrl_copy_params() failures, aka CID-45c1380358b1.
- risk 0.49cvss 7.5epss 0.03
A memory leak in the komeda_wb_connector_add() function in drivers/gpu/drm/arm/display/komeda/komeda_wb_connector.c in the Linux kernel before 5.3.8 allows attackers to cause a denial of service (memory consumption) by triggering drm_writeback_connector_init() failures, aka…
- risk 0.23cvss 4.6epss 0.00
A memory leak in the af9005_identify_state() function in drivers/media/usb/dvb-usb/af9005.c in the Linux kernel through 5.3.9 allows attackers to cause a denial of service (memory consumption), aka CID-2289adbfa559.
- risk 0.29cvss 5.5epss 0.00
A memory leak in the ccp_run_sha_cmd() function in drivers/crypto/ccp/ccp-ops.c in the Linux kernel through 5.3.9 allows attackers to cause a denial of service (memory consumption), aka CID-128c66429247.
- risk 0.49cvss 7.5epss 0.03
Two memory leaks in the sja1105_static_config_upload() function in drivers/net/dsa/sja1105/sja1105_spi.c in the Linux kernel before 5.3.5 allow attackers to cause a denial of service (memory consumption) by triggering static_config_buf_prepare_for_upload() or…