2nd Gen AMD Ryzen™ Threadripper™ Processors “Colfax” Security Vulnerabilities

CVE-2023-45289 vulnerabilities

Vulnerabilities for packages: mage, newrelic-infra-operator, prometheus-pushgateway, temporal, nri-f5, go-md2man, paranoia, gcsfuse, gosu, cluster-proportional-autoscaler, kube-bench, temporal-ui-server, kubernetes-csi-external-resizer, kyverno-policy-reporter-kyverno-plugin, ctop, gitlab-logger,.....

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: kyverno-policy-reporter-ui, newrelic-infra-operator, nri-kubernetes, prometheus-pushgateway, temporal, gcsfuse, cluster-proportional-autoscaler, gitsign, oauth2-proxy, kube-bench, sops, temporal-ui-server, kubernetes-csi-external-resizer,...

CVE-2023-45285 vulnerabilities

Vulnerabilities for packages: mage, docker-cli, go-md2man, aactl, gosu, cni-plugins, sops, nri-discovery-kubernetes, kind, cass-operator, oras, ctop, go-licenses, hey, ip-masq-agent, gitlab-logger, protoc-gen-go-grpc, goreleaser, gops, k3d, gobuster, sbom-scorecard, helm-push,...

GHSA-RR6R-CFGF-GC6H vulnerabilities

Vulnerabilities for packages: mage, newrelic-infra-operator, prometheus-pushgateway, temporal, nri-f5, go-md2man, paranoia, gcsfuse, gosu, cluster-proportional-autoscaler, kube-bench, temporal-ui-server, kubernetes-csi-external-resizer, kyverno-policy-reporter-kyverno-plugin, ctop, gitlab-logger,.....

CVE-2024-24784 vulnerabilities

Vulnerabilities for packages: mage, newrelic-infra-operator, prometheus-pushgateway, temporal, nri-f5, go-md2man, paranoia, gcsfuse, gosu, cluster-proportional-autoscaler, kube-bench, temporal-ui-server, kubernetes-csi-external-resizer, kyverno-policy-reporter-kyverno-plugin, ctop, gitlab-logger,.....

CVE-2023-45288 vulnerabilities

Vulnerabilities for packages: gcsfuse, gosu, sops, kyverno-policy-reporter-kyverno-plugin, grafana-agent-operator, grpc-health-probe, prometheus-redis-exporter, kubeadm-controlplane-controller, nsc, aws-flb-firehose, mods, kaf, spegel, supercronic, neuvector-sigstore-interface, nats,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: kyverno-policy-reporter-ui, newrelic-infra-operator, nri-kubernetes, prometheus-pushgateway, temporal, gcsfuse, cluster-proportional-autoscaler, gitsign, oauth2-proxy, kube-bench, sops, temporal-ui-server, kubernetes-csi-external-resizer,...

GHSA-4V7X-PQXF-CX7M vulnerabilities

Vulnerabilities for packages: gcsfuse, gosu, sops, kyverno-policy-reporter-kyverno-plugin, grafana-agent-operator, grpc-health-probe, prometheus-redis-exporter, kubeadm-controlplane-controller, nsc, aws-flb-firehose, mods, kaf, spegel, supercronic, neuvector-sigstore-interface, nats,...

GHSA-3Q2C-PVP5-3CQP vulnerabilities

Vulnerabilities for packages: mage, newrelic-infra-operator, prometheus-pushgateway, temporal, nri-f5, go-md2man, paranoia, gcsfuse, gosu, cluster-proportional-autoscaler, kube-bench, temporal-ui-server, kubernetes-csi-external-resizer, kyverno-policy-reporter-kyverno-plugin, ctop, gitlab-logger,.....

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: mage, newrelic-infra-operator, prometheus-pushgateway, temporal, nri-f5, go-md2man, paranoia, gcsfuse, gosu, cluster-proportional-autoscaler, kube-bench, temporal-ui-server, kubernetes-csi-external-resizer, kyverno-policy-reporter-kyverno-plugin, ctop, gitlab-logger,.....

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: mage, newrelic-infra-operator, prometheus-pushgateway, temporal, nri-f5, go-md2man, paranoia, gcsfuse, gosu, cluster-proportional-autoscaler, kube-bench, temporal-ui-server, kubernetes-csi-external-resizer, kyverno-policy-reporter-kyverno-plugin, ctop, gitlab-logger,.....

GHSA-5F94-VHJQ-RPG8 vulnerabilities

Vulnerabilities for packages: mage, docker-cli, go-md2man, aactl, gosu, cni-plugins, sops, nri-discovery-kubernetes, kind, cass-operator, oras, ctop, go-licenses, hey, ip-masq-agent, gitlab-logger, protoc-gen-go-grpc, goreleaser, gops, k3d, gobuster, sbom-scorecard, helm-push,...

GHSA-9F76-WG39-X86H vulnerabilities

Vulnerabilities for packages: mage, docker-cli, go-md2man, aactl, gosu, cni-plugins, sops, nri-discovery-kubernetes, kind, cass-operator, oras, ctop, go-licenses, hey, ip-masq-agent, gitlab-logger, protoc-gen-go-grpc, goreleaser, gops, k3d, gobuster, sbom-scorecard, helm-push,...

GHSA-32CH-6X54-Q4H9 vulnerabilities

Vulnerabilities for packages: mage, newrelic-infra-operator, prometheus-pushgateway, temporal, nri-f5, go-md2man, paranoia, gcsfuse, gosu, cluster-proportional-autoscaler, kube-bench, temporal-ui-server, kubernetes-csi-external-resizer, kyverno-policy-reporter-kyverno-plugin, ctop, gitlab-logger,.....

CVE-2024-24783 vulnerabilities

Vulnerabilities for packages: mage, newrelic-infra-operator, prometheus-pushgateway, temporal, nri-f5, go-md2man, paranoia, gcsfuse, gosu, cluster-proportional-autoscaler, kube-bench, temporal-ui-server, kubernetes-csi-external-resizer, kyverno-policy-reporter-kyverno-plugin, ctop, gitlab-logger,.....

CVE-2024-24785 vulnerabilities

Vulnerabilities for packages: mage, newrelic-infra-operator, prometheus-pushgateway, temporal, nri-f5, go-md2man, paranoia, gcsfuse, gosu, cluster-proportional-autoscaler, kube-bench, temporal-ui-server, kubernetes-csi-external-resizer, kyverno-policy-reporter-kyverno-plugin, ctop, gitlab-logger,.....

CVE-2023-39326 vulnerabilities

Vulnerabilities for packages: mage, docker-cli, go-md2man, aactl, gosu, cni-plugins, sops, nri-discovery-kubernetes, kind, cass-operator, oras, ctop, go-licenses, hey, ip-masq-agent, gitlab-logger, protoc-gen-go-grpc, goreleaser, gops, k3d, gobuster, sbom-scorecard, helm-push,...

CVE-2023-45290 vulnerabilities

Vulnerabilities for packages: mage, newrelic-infra-operator, prometheus-pushgateway, temporal, nri-f5, go-md2man, paranoia, gcsfuse, gosu, cluster-proportional-autoscaler, kube-bench, temporal-ui-server, kubernetes-csi-external-resizer, kyverno-policy-reporter-kyverno-plugin, ctop, gitlab-logger,.....

CVE-2024-36949

In the Linux kernel, the following vulnerability has been resolved: amd/amdkfd: sync all devices to wait all processes being evicted If there are more than one device doing reset in parallel, the first device will call kfd_suspend_all_processes() to evict all processes on all devices, this call...

CVE-2024-36914

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Skip on writeback when it's not applicable [WHY] dynamic memory safety error detector (KASAN) catches and generates error messages "BUG: KASAN: slab-out-of-bounds" as writeback connector does not support certain...

CVE-2024-36949 amd/amdkfd: sync all devices to wait all processes being evicted

In the Linux kernel, the following vulnerability has been resolved: amd/amdkfd: sync all devices to wait all processes being evicted If there are more than one device doing reset in parallel, the first device will call kfd_suspend_all_processes() to evict all processes on all devices, this call...

CVE-2024-36914 drm/amd/display: Skip on writeback when it's not applicable

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Skip on writeback when it's not applicable [WHY] dynamic memory safety error detector (KASAN) catches and generates error messages "BUG: KASAN: slab-out-of-bounds" as writeback connector does not support certain...

CVE-2024-36897 drm/amd/display: Atom Integrated System Info v2_2 for DCN35

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Atom Integrated System Info v2_2 for DCN35 New request from KMD/VBIOS in order to support new UMA carveout model. This fixes a null dereference from accessing Ctx->dc_bios->integrated_info while it was NULL. ...

CVE-2024-36026 drm/amd/pm: fixes a random hang in S4 for SMU v13.0.4/11

In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: fixes a random hang in S4 for SMU v13.0.4/11 While doing multiple S4 stress tests, GC/RLC/PMFW get into an invalid state resulting into hard hangs. Adding a GFX reset as workaround just before sending the MP1_UNLOAD...

CVE-2024-36024 drm/amd/display: Disable idle reallow as part of command/gpint execution

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Disable idle reallow as part of command/gpint execution [Why] Workaroud for a race condition where DMCUB is in the process of committing to IPS1 during the handshake causing us to miss the transition into IPS2 and....

Ubuntu: Security Advisory (USN-6797-1)

The remote host is missing an update for...

intel-microcode vulnerabilities

It was discovered that some 3rd and 4th Generation Intel® Xeon® Processors did not properly restrict access to certain hardware features when using Intel® SGX or Intel® TDX. This may allow a privileged local user to potentially further escalate their privileges on the system. This issue only...

Ubuntu: Security Advisory (USN-6795-1)

The remote host is missing an update for...

Security Bulletin: Triton Inference Server - May 2024

NVIDIA has released a software update for NVIDIA Triton Inference Server to address the issue disclosed in this bulletin. To protect your system, install the latest release from the Triton Inference Server Releases page on GitHub, and view the Secure Deployment Considerations Guide. Go to NVIDIA...

Intel Microcode vulnerabilities

Releases Ubuntu 24.04 LTS Ubuntu 23.10 Ubuntu 22.04 LTS Ubuntu 20.04 LTS Ubuntu 18.04 ESM Ubuntu 16.04 ESM Packages intel-microcode - Processor microcode for Intel CPUs Details It was discovered that some 3rd and 4th Generation Intel® Xeon® Processors did not properly restrict access to...

pcTattleTale spyware leaks database containing victim screenshots, gets website defaced

The idea behind the software is simple. When the spying party installs the stalkerware, they grant permission to record what happens on the targeted Android or Windows device. The observer can then log in on an online portal and activate recording, at which point a screen capture is taken on the...

Security Bulletin: Vulnerabilities in IBM Java included with IBM Tivoli Monitoring.

Summary Vulnerabilities in IBM® SDK Java™ Technology Edition that is shipped as part of multiple IBM Tivoli Monitoring (ITM) components. CVEs: CVE-2023-38264, CVE-2024-21011, CVE-2024-21085 and CVE-2024-21094 Vulnerability Details ** CVEID: CVE-2024-21094 DESCRIPTION: **An unspecified...

linux-intel-iotg vulnerabilities

Zheng Wang discovered that the Broadcom FullMAC WLAN driver in the Linux kernel contained a race condition during device removal, leading to a use- after-free vulnerability. A physically proximate attacker could possibly use this to cause a denial of service (system crash). (CVE-2023-47233) It was....

Exploit for OS Command Injection in Fortinet Fortisiem

CVE-2024-23108 POC Proof of concept exploit to blindly...

CVE-2024-4429 Cross Site Request Forgery vulnerability in iManager

Cross-Site Request Forgery vulnerability has been discovered in OpenText™ iManager 3.2.6.0200. This could lead to sensitive information...

CVE-2024-3969 XML External Entity injection vulnerability in iManager

XML External Entity injection vulnerability found in OpenText™ iManager 3.2.6.0200. This could lead to remote code execution by parsing untrusted XML...

(RHSA-2024:3421) Important: kernel security and bug fix update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): kernel: Marvin vulnerability side-channel leakage in the RSA decryption operation (CVE-2023-6240) kernel: nf_tables: use-after-free vulnerability in the nft_verdict_init() function...

Pyrit - The Famous WPA Precomputed Cracker

Pyrit allows you to create massive databases of pre-computed WPA/WPA2-PSK authentication phase in a space-time-tradeoff. By using the computational power of Multi-Core CPUs and other platforms through ATI-Stream,Nvidia CUDA and OpenCL, it is currently by far the most powerful attack against one of....

Code Injection

pug is vulnerable to Code execution. The vulnerability is due to the lack of proper input validation for the name option in the compileClient, compileFileClient, or compileClientWithDependenciesTracked functions, which allows attackers to execute arbitrary JavaScript code in the context of the...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : kernel (SUSE-SU-2024:1787-1)

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:1787-1 advisory. The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes. This update...

AutomationDirect P3-550E Telnet Diagnostic Interface leftover debug code vulnerability

Talos Vulnerability Report TALOS-2024-1942 AutomationDirect P3-550E Telnet Diagnostic Interface leftover debug code vulnerability May 28, 2024 CVE Number CVE-2024-21785 SUMMARY A leftover debug code vulnerability exists in the Telnet Diagnostic Interface functionality of AutomationDirect P3-550E...

Linux kernel (Intel IoTG) vulnerabilities

Releases Ubuntu 22.04 LTS Packages linux-intel-iotg - Linux kernel for Intel IoT platforms Details Zheng Wang discovered that the Broadcom FullMAC WLAN driver in the Linux kernel contained a race condition during device removal, leading to a use- after-free vulnerability. A physically...

CVE-2021-47551

In the Linux kernel, the following vulnerability has been resolved: drm/amd/amdkfd: Fix kernel panic when reset failed and been triggered again In SRIOV configuration, the reset may failed to bring asic back to normal but stop cpsch already been called, the start_cpsch will not be called since...

CVE-2021-47550

In the Linux kernel, the following vulnerability has been resolved: drm/amd/amdgpu: fix potential memleak In function amdgpu_get_xgmi_hive, when kobject_init_and_add failed There is a potential memleak if not call...

[SECURITY] Fedora 40 Update: rust-snphost-0.1.2-4.fc40

Administrative utility for AMD...

[SECURITY] Fedora 40 Update: rust-sevctl-0.4.3-4.fc40

Administrative utility for AMD...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : ucode-intel (SUSE-SU-2024:1771-1)

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:1771-1 advisory. Intel CPU Microcode was updated to the 20240514 release (bsc#1224277) - CVE-2023-45733: Fixed...

CVE-2021-47550

In the Linux kernel, the following vulnerability has been resolved: drm/amd/amdgpu: fix potential memleak In function amdgpu_get_xgmi_hive, when kobject_init_and_add failed There is a potential memleak if not call...

CVE-2021-47550

In the Linux kernel, the following vulnerability has been resolved: drm/amd/amdgpu: fix potential memleak In function amdgpu_get_xgmi_hive, when kobject_init_and_add failed There is a potential memleak if not call...

CVE-2021-47551

In the Linux kernel, the following vulnerability has been resolved: drm/amd/amdkfd: Fix kernel panic when reset failed and been triggered again In SRIOV configuration, the reset may failed to bring asic back to normal but stop cpsch already been called, the start_cpsch will not be called since...