Home
Home
Trends
Trends
Vulnerabilities
Vulnerabilities
News
News
Researchers
Researchers
Why dbugs?
Why dbugs?
Settings

Jason Self

#20352of 60,450
15.3Total CVSS
Vulnerabilities · 2
High
2
PT-2022-7644
2022-02-10
7.8
CVE-2022-48787
Linux
Linux Kernel
The issue is related to a use-after-free error in the iwlwifi module of the Linux kernel. When no firmware is present or all firmware files fail to parse, the device release driver() function is called, leading to the removal of the 'drv' struct. However, the new code still attempts to access the freed struct, causing an error. Setting 'failure=false' can avoid this access. The vulnerability may impact the confidentiality, integrity, and availability of protected information.
PT-2005-4905
2005-12-14
7.5
CVE-2005-4217
Apple
Macos X Server
The issue is related to Perl in Apple Mac OS X Server, where it does not properly drop privileges when using the `$<` variable to set uid. This allows attackers to gain privileges.