Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
kernel.org/stable/c/1563e998a938f095548054ef09e277b562b79536 - https://git.kernel.org/stable/c/e336a9e08618203a456fb5367f1387b14554f55e - https://git.kernel.org/stable/c/2fa28f5c6fcbfc794340684f36d2581b4f2d20b5
CVE ID: CVE-2023-52703 State: PUBLISHED Published: 2024-05-21T15:22:52.687Z Last Updated: 2025-05-04T07:41:57.543Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path syzbot reported that act_len in kalmia_send_init_packet() is uninitialized when passing it to the first usb_bulk_msg error path. Jiri Pirko noted that it's pointless to pass it in the error path, and that the value that would be printed in the second error path would be the value of act_len from the first call to usb_bulk_msg.[1] With this in mind, let's just not pass act_len to the usb_bulk_msg error paths
n from the first call to usb_bulk_msg.[1] With this in mind, let's just not pass act_len to the usb_bulk_msg error paths. 1: https://lore.kernel.org/lkml/Y9pY61y1nwTuzMOa@nanopsycho/ Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/1b5de7d44890b78519acbcc80d8d1f23ff2872e5 - https://git.kernel.org/stable/c/723ef7b66f37c0841f5a451ccbce47ee1641e081 - https://git.kernel.org/stable/c/a753352622b4f3c0219e0e9c73114b2848ae6042 - https://git.kernel.org/stable/c/525bdcb0838d19d918c7786151ee14661967a030 - https://git.kernel.org/stable/c/338f826d3afead6e4df521f7972a4bef04a72efb - https://git.kernel.org/stable/c/02df3170c04a8356cd57
/git.kernel.org/stable/c/338f826d3afead6e4df521f7972a4bef04a72efb - https://git.kernel.org/stable/c/02df3170c04a8356cd571ab9155a42f030190abc - https://git.kernel.org/stable/c/c68f345b7c425b38656e1791a0486769a8797016
CVE ID: CVE-2023-52704 State: PUBLISHED Published: 2024-05-21T15:22:53.343Z Last Updated: 2025-05-04T07:41:58.873Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: freezer,umh: Fix call_usermode_helper_exec() vs SIGKILL Tetsuo-San noted that commit f5d39b020809 ("freezer,sched: Rewrite core freezer logic") broke call_usermodehelper_exec() for the KILLABLE case. Specifically it was missed that the second, unconditional, wait_for_completion() was not optional and ensures the on-stack completion is unused before going out-of-scope. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.
ing out-of-scope. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/7f9f6c54da876b3f0bece2b569456ceb96965ed7 - https://git.kernel.org/stable/c/eedeb787ebb53de5c5dcf7b7b39d01bf1b0f037d
CVE ID: CVE-2023-52705 State: PUBLISHED Published: 2024-05-21T15:22:54.015Z Last Updated: 2025-05-04T07:42:00.242Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix underflow in second superblock position calculations Macro NILFS_SB2_OFFSET_BYTES, which computes the position of the second superblock, underflows when the argument device size is less than 4096 bytes. Therefore, when using this macro, it is necessary to check in advance that the device size is not less than a lower limit, or at least that underflow does not occur. The current nilfs2 implementation lacks this check, causing out-of-bound block access when m
t underflow does not occur. The current nilfs2 implementation lacks this check, causing out-of-bound block access when mounting devices smaller than 4096 bytes: I/O error, dev loop0, sector 36028797018963960 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 NILFS (loop0): unable to read secondary superblock (blocksize = 1024) In addition, when trying to resize the filesystem to a size below 4096 bytes, this underflow occurs in nilfs_resize_fs(), passing a huge number of segments to nilfs_sufile_resize(), corrupting parameters such as the number of segments in superblocks. This causes excessive loop iterations in nilfs_sufile_resize() during a subsequent resize ioctl, causing semaphore ns_segct
s causes excessive loop iterations in nilfs_sufile_resize() during a subsequent resize ioctl, causing semaphore ns_segctor_sem to block for a long time and hang the writer thread: INFO: task segctord:5067 blocked for more than 143 seconds. Not tainted 6.2.0-rc8-syzkaller-00015-gf6feea56f66d #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:segctord state:D stack:23456 pid:5067 ppid:2 flags:0x00004000 Call Trace: <TASK> context_switch kernel/sched/core.c:5293 [inline] __schedule+0x1409/0x43f0 kernel/sched/core.c:6606 schedule+0xc3/0x190 kernel/sched/core.c:6682 rwsem_down_write_slowpath+0xfcf/0x14a0 kernel/locking/rwsem.c:1190 nilfs_transaction_lock+0x25c/0x4f0
/sched/core.c:6682 rwsem_down_write_slowpath+0xfcf/0x14a0 kernel/locking/rwsem.c:1190 nilfs_transaction_lock+0x25c/0x4f0 fs/nilfs2/segment.c:357 nilfs_segctor_thread_construct fs/nilfs2/segment.c:2486 [inline] nilfs_segctor_thread+0x52f/0x1140 fs/nilfs2/segment.c:2570 kthread+0x270/0x300 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:308 </TASK> ... Call Trace: <TASK> folio_mark_accessed+0x51c/0xf00 mm/swap.c:515 __nilfs_get_page_block fs/nilfs2/page.c:42 [inline] nilfs_grab_buffer+0x3d3/0x540 fs/nilfs2/page.c:61 nilfs_mdt_submit_block+0xd7/0x8f0 fs/nilfs2/mdt.c:121 nilfs_mdt_read_block+0xeb/0x430 fs/nilfs2/mdt.c:176 nilfs_mdt_get_block+0x12d/0xbb0 fs/nilfs2/mdt.c:251
nilfs2/mdt.c:121 nilfs_mdt_read_block+0xeb/0x430 fs/nilfs2/mdt.c:176 nilfs_mdt_get_block+0x12d/0xbb0 fs/nilfs2/mdt.c:251 nilfs_sufile_get_segment_usage_block fs/nilfs2/sufile.c:92 [inline] nilfs_sufile_truncate_range fs/nilfs2/sufile.c:679 [inline] nilfs_sufile_resize+0x7a3/0x12b0 fs/nilfs2/sufile.c:777 nilfs_resize_fs+0x20c/0xed0 fs/nilfs2/super.c:422 nilfs_ioctl_resize fs/nilfs2/ioctl.c:1033 [inline] nilfs_ioctl+0x137c/0x2440 fs/nilfs2/ioctl.c:1301 ... This fixes these issues by inserting appropriate minimum device size checks or anti-underflow checks, depending on where the macro is used. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git
the macro is used. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/2f7a1135b202977b82457adde7db6c390056863b - https://git.kernel.org/stable/c/b96591e2c35c8b47db0ec816b5fc6cb8868000ff - https://git.kernel.org/stable/c/52844d8382cd9166d708032def8905ffc3ae550f - https://git.kernel.org/stable/c/0ee5ed0126a2211f7174492da2ca2c29f43755c5 - https://git.kernel.org/stable/c/a158782b56b070485d54d25fc9aaf2c8f3752205 - https://git.kernel.org/stable/c/a8ef5109f93cea9933bbac0455d8c18757b3fcb4 - https://git.kernel.org/stable/c/99b9402a36f0799f25feee4465bfa4b8dfa74b4d
CVE ID: CVE-2023-52706 State: PUBLISHED Published: 2024-05-21T15:22:54.679Z Last Updated: 2025-05-04T07:42:01.781Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: gpio: sim: fix a memory leak Fix an inverted logic bug in gpio_sim_remove_hogs() that leads to GPIO hog structures never being freed. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/854e1ecff266033d3149666d3c5b8b0e174b4210 - https://git.kernel.org/stable/c/79eeab1d85e0fee4c0bc36f3b6ddf3920f39f74b
CVE ID: CVE-2023-52707 State: PUBLISHED Published: 2024-05-21T15:22:55.315Z Last Updated: 2025-05-04T07:42:03.735Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: sched/psi: Fix use-after-free in ep_remove_wait_queue() If a non-root cgroup gets removed when there is a thread that registered trigger and is polling on a pressure file within the cgroup, the polling waitqueue gets freed in the following path: do_rmdir cgroup_rmdir kernfs_drain_open_files cgroup_file_release cgroup_pressure_release psi_trigger_destroy However, the polling thread still has a reference to the pressure file and will access the freed waitqueue when the f
oy However, the polling thread still has a reference to the pressure file and will access the freed waitqueue when the file is closed or upon exit: fput ep_eventpoll_release ep_free ep_remove_wait_queue remove_wait_queue This results in use-after-free as pasted below. The fundamental problem here is that cgroup_file_release() (and consequently waitqueue's lifetime) is not tied to the file's real lifetime. Using wake_up_pollfree() here might be less than ideal, but it is in line with the comment at commit 42288cb44c4b ("wait: add wake_up_pollfree()") since the waitqueue's lifetime is not tied to file's one and can be considered as another special case. While this would be fixable by somehow m
fetime is not tied to file's one and can be considered as another special case. While this would be fixable by somehow making cgroup_file_release() be tied to the fput(), it would require sizable refactoring at cgroups or higher layer which might be more justifiable if we identify more cases like this. BUG: KASAN: use-after-free in _raw_spin_lock_irqsave+0x60/0xc0 Write of size 4 at addr ffff88810e625328 by task a.out/4404 CPU: 19 PID: 4404 Comm: a.out Not tainted 6.2.0-rc6 #38 Hardware name: Amazon EC2 c5a.8xlarge/, BIOS 1.0 10/16/2017 Call Trace: <TASK> dump_stack_lvl+0x73/0xa0 print_report+0x16c/0x4e0 kasan_report+0xc3/0xf0 kasan_check_range+0x2d2/0x310 _raw_spin_lock_irqsave+0x60/0xc0 re
3/0xa0 print_report+0x16c/0x4e0 kasan_report+0xc3/0xf0 kasan_check_range+0x2d2/0x310 _raw_spin_lock_irqsave+0x60/0xc0 remove_wait_queue+0x1a/0xa0 ep_free+0x12c/0x170 ep_eventpoll_release+0x26/0x30 __fput+0x202/0x400 task_work_run+0x11d/0x170 do_exit+0x495/0x1130 do_group_exit+0x100/0x100 get_signal+0xd67/0xde0 arch_do_signal_or_restart+0x2a/0x2b0 exit_to_user_mode_prepare+0x94/0x100 syscall_exit_to_user_mode+0x20/0x40 do_syscall_64+0x52/0x90 entry_SYSCALL_64_after_hwframe+0x63/0xcd </TASK> Allocated by task 4404: kasan_set_track+0x3d/0x60 __kasan_kmalloc+0x85/0x90 psi_trigger_create+0x113/0x3e0 pressure_write+0x146/0x2e0 cgroup_file_write+0x11c/0x250 kernfs_fop_write_iter+0x186/0x220 vfs_wri
er_create+0x113/0x3e0 pressure_write+0x146/0x2e0 cgroup_file_write+0x11c/0x250 kernfs_fop_write_iter+0x186/0x220 vfs_write+0x3d8/0x5c0 ksys_write+0x90/0x110 do_syscall_64+0x43/0x90 entry_SYSCALL_64_after_hwframe+0x63/0xcd Freed by task 4407: kasan_set_track+0x3d/0x60 kasan_save_free_info+0x27/0x40 ____kasan_slab_free+0x11d/0x170 slab_free_freelist_hook+0x87/0x150 __kmem_cache_free+0xcb/0x180 psi_trigger_destroy+0x2e8/0x310 cgroup_file_release+0x4f/0xb0 kernfs_drain_open_files+0x165/0x1f0 kernfs_drain+0x162/0x1a0 __kernfs_remove+0x1fb/0x310 kernfs_remove_by_name_ns+0x95/0xe0 cgroup_addrm_files+0x67f/0x700 cgroup_destroy_locked+0x283/0x3c0 cgroup_rmdir+0x29/0x100 kernfs_iop_rmdir+0xd1/0x140 vf
cgroup_addrm_files+0x67f/0x700 cgroup_destroy_locked+0x283/0x3c0 cgroup_rmdir+0x29/0x100 kernfs_iop_rmdir+0xd1/0x140 vfs_rmdir+0xfe/0x240 do_rmdir+0x13d/0x280 __x64_sys_rmdir+0x2c/0x30 do_syscall_64+0x43/0x90 entry_SYSCALL_64_after_hwframe+0x63/0xcd Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/7caeb5457bd01ccba0df1d6f4872f20d28e50b38 - https://git.kernel.org/stable/c/ec9c7aa08819f976b2492fa63c41b5712d2924b5 - https://git.kernel.org/stable/c/cca2b3feb70170ef6f0fbc4b4d91eea235a2b73a - https://git.kernel.org/stable/c/c6879a4dcefe92d870ab68cabaa9caeda4f2af5a - https://git.kernel.org/stable/c/c2dbe32d5db5c4ead121cf86dab
rnel.org/stable/c/c6879a4dcefe92d870ab68cabaa9caeda4f2af5a - https://git.kernel.org/stable/c/c2dbe32d5db5c4ead121cf86dabd5ab691fb47fe
CVE ID: CVE-2023-52708 State: PUBLISHED Published: 2024-05-21T15:22:55.975Z Last Updated: 2025-05-04T07:42:05.019Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: mmc: mmc_spi: fix error handling in mmc_spi_probe() If mmc_add_host() fails, it doesn't need to call mmc_remove_host(), or it will cause null-ptr-deref, because of deleting a not added device in mmc_remove_host(). To fix this, goto label 'fail_glue_init', if mmc_add_host() fails, and change the label 'fail_add_host' to 'fail_gpiod_request'. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/e9b488d6
Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/e9b488d60f51ae312006e224e03a30a151c28bdd - https://git.kernel.org/stable/c/0b3edcb24bd81b3b2e3dac89f4733bfd47d283be - https://git.kernel.org/stable/c/ecad2fafd424ffdc203b2748ded0b37e4bbecef3 - https://git.kernel.org/stable/c/82645bf4ed02abe930a659c5fe16d593a6dbd93f - https://git.kernel.org/stable/c/cf4c9d2ac1e42c7d18b921bec39486896645b714
CVE ID: CVE-2023-52710 State: PUBLISHED Published: 2024-05-28T06:18:22.524Z Last Updated: 2024-08-02T23:11:35.475Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Huawei Products: CurieM-WFG9B Problem Types: CWE-754 Description: Huawei Matebook D16(Model: CREM-WXX9, BIOS: v2.26), As the communication buffer size hasn’t been properly validated to be of the expected size, it can partially overlap with the beginning SMRAM.This can be leveraged by a malicious OS attacker to corrupt data structures stored at the beginning of SMRAM and can potentially lead to code execution in SMM. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: Reference
lly lead to code execution in SMM. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/2024/huawei-sa-hppvticfuoec-8ffde288-en
CVE ID: CVE-2023-52711 State: PUBLISHED Published: 2024-05-28T06:19:26.186Z Last Updated: 2024-08-02T23:11:34.963Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Huawei Products: CurieM-WFG9B Problem Types: CWE-284 Description: Various Issues Due To Exposed SMI Handler in AmdPspP2CmboxV2. The first issue can be leveraged to bypass the protections that have been put in place by previous UEFI phases to prevent direct access to the SPI flash. The second issue can be used to both leak and corrupt SMM memory thus potentially leading code execution in SMM Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.huawei.co
n in SMM Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/2024/huawei-sa-voiiaciahpp-6376e0c7-en
CVE ID: CVE-2023-52712 State: PUBLISHED Published: 2024-05-28T06:22:59.052Z Last Updated: 2024-08-02T23:11:35.228Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Huawei Products: CurieM-WFG9B Problem Types: CWE-284 Description: Various Issues Due To Exposed SMI Handler in AmdPspP2CmboxV2. The first issue can be leveraged to bypass the protections that have been put in place by previous UEFI phases to prevent direct access to the SPI flash. The second issue can be used to both leak and corrupt SMM memory, thus potentially leading code execution in SMM Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.huawei.c
on in SMM Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/2024/huawei-sa-iiacviahpp-71ce77ee-en
CVE ID: CVE-2023-52713 State: PUBLISHED Published: 2024-04-07T08:41:49.250Z Last Updated: 2024-11-14T19:53:45.209Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Permissions, Privileges, and Access Controls Description: Vulnerability of improper permission control in the window management module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://consumer.huawei.com/en/support/bulletin/2024/4/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202404-0000001880501689
CVE ID: CVE-2023-52714 State: PUBLISHED Published: 2024-04-07T08:43:50.830Z Last Updated: 2024-08-14T18:38:40.816Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Weaknesses Introduced During Design Description: Vulnerability of defects introduced in the design process in the hwnff module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2024/4/ - https://https://device.harmonyos.com/en/docs/security/update/security-bulletins-202404-0000001880501689
CVE ID: CVE-2023-52715 State: PUBLISHED Published: 2024-04-07T09:00:08.128Z Last Updated: 2025-03-28T18:41:40.523Z Vendors: Huawei Products: HarmonyOS Problem Types: Permissions, Privileges, and Access Controls Description: The SystemUI module has a vulnerability in permission management. Impact: Successful exploitation of this vulnerability may affect availability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://consumer.huawei.com/en/support/bulletin/2024/4/ - https://https://device.harmonyos.com/en/docs/security/update/security-bulletins-202404-0000001880501689
CVE ID: CVE-2023-52716 State: PUBLISHED Published: 2024-04-07T09:01:32.933Z Last Updated: 2024-09-13T15:09:48.227Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: CWE-269 Description: Vulnerability of starting activities in the background in the ActivityManagerService (AMS) module. Impact: Successful exploitation of this vulnerability will affect availability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2024/4/ - https://https://device.harmonyos.com/en/docs/security/update/security-bulletins-202404-0000001880501689
CVE ID: CVE-2023-52717 State: PUBLISHED Published: 2024-04-07T09:03:06.815Z Last Updated: 2024-11-18T19:56:31.550Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Permissions, Privileges, and Access Controls Description: Permission verification vulnerability in the lock screen module. Impact: Successful exploitation of this vulnerability will affect availability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://consumer.huawei.com/en/support/bulletin/2024/4/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202404-0000001880501689
CVE ID: CVE-2023-52718 State: PUBLISHED Published: 2024-12-28T07:16:22.248Z Last Updated: 2024-12-28T16:09:42.678Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Huawei Products: PT9030-15, WS7206-10, WS7290-15, WS8000-10, WS8001-10, WS8002-10, WS8500-10, WS8502-10, WS8700-10 Problem Types: CWE-420 Description: A connection hijacking vulnerability exists in some Huawei home routers. Successful exploitation of this vulnerability may cause DoS or information leakage.(Vulnerability ID:HWPSIRT-2023-34408) This vulnerability has been assigned a (CVE)ID:CVE-2023-52718 Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.huawei.com/br/psirt
(CVE)ID:CVE-2023-52718 Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.huawei.com/br/psirt/security-advisories/2024/huawei-sa-chvishhr-d50dedde-en
CVE ID: CVE-2023-52719 State: PUBLISHED Published: 2024-05-11T09:58:21.254Z Last Updated: 2024-08-02T23:11:34.931Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N) Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: CWE-16 Description: Privilege escalation vulnerability in the PMS module Impact: Successful exploitation of this vulnerability may affect service confidentiality. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://consumer.huawei.com/en/support/bulletin/2024/5/ - https://device.harmonyos.com/cn/docs/security/update/security-bulletins-phones-202405-0000001902628049
CVE ID: CVE-2023-52720 State: PUBLISHED Published: 2024-05-11T10:06:34.278Z Last Updated: 2024-08-02T23:11:35.555Z Severity: MEDIUM (CVSS 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H) Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: CWE-362 Description: Race condition vulnerability in the soundtrigger module Impact: Successful exploitation of this vulnerability will affect availability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://consumer.huawei.com/en/support/bulletin/2024/5/ - https://device.harmonyos.com/cn/docs/security/update/security-bulletins-phones-202405-0000001902628049
CVE ID: CVE-2023-52721 State: PUBLISHED Published: 2024-05-11T10:16:08.629Z Last Updated: 2024-08-02T23:11:35.140Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: CWE-264 Description: The WindowManager module has a vulnerability in permission control. Impact: Successful exploitation of this vulnerability may affect confidentiality. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://consumer.huawei.com/en/support/bulletin/2024/5/ - https://device.harmonyos.com/cn/docs/security/update/security-bulletins-phones-202405-0000001902628049
CVE ID: CVE-2023-52722 State: PUBLISHED Published: 2024-04-27T00:00:00 Last Updated: 2024-12-04T21:03:25.395Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Artifex Ghostscript before 10.03.1. psi/zmisc1.c, when SAFER mode is used, allows eexec seeds other than the Type 1 standard. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=afd7188f74918cb51b5fb89f52b54eb16e8acfd1 - http://www.openwall.com/lists/oss-security/2024/06/28/2
CVE ID: CVE-2023-52723 State: PUBLISHED Published: 2024-04-29T00:00:00 Last Updated: 2024-08-02T23:11:35.036Z Vendors: n/a Products: n/a Problem Types: n/a Description: In KDE libksieve before 23.03.80, kmanagesieve/session.cpp places a cleartext password in server logs because a username variable is accidentally given a password value. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://invent.kde.org/pim/libksieve/-/commit/6b460ba93ac4ac503ba039d0b788ac7595120db1 - https://invent.kde.org/pim/libksieve/-/tags/v23.03.80 - https://www.openwall.com/lists/oss-security/2024/04/25/1 - http://www.openwall.com/lists/oss-security/2024/04/30/1 - https://l
//www.openwall.com/lists/oss-security/2024/04/25/1 - http://www.openwall.com/lists/oss-security/2024/04/30/1 - https://lists.debian.org/debian-lts-announce/2024/05/msg00004.html
CVE ID: CVE-2023-52724 State: PUBLISHED Published: 2024-04-29T00:00:00 Last Updated: 2024-12-04T21:05:56.203Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open Networking Foundation SD-RAN onos-kpimon 0.4.7 allows out-of-bounds array access in the processIndicationFormat1 function. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/onosproject/onos-kpimon/pull/120
CVE ID: CVE-2023-52725 State: PUBLISHED Published: 2024-04-29T00:00:00 Last Updated: 2024-08-02T23:11:34.946Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open Networking Foundation SD-RAN ONOS onos-kpimon 0.4.7 allows blocking of the errCh channel within the Start function of the monitoring package. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/onosproject/onos-kpimon/pull/120