Fedora 40 : firecracker / libkrun / rust-event-manager / rust-kvm-bindings / etc (2024-9974808629)

The remote Fedora 40 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2024-9974808629 advisory. Update rust-vmm components and their consumers to address CVE-2023-50711 Tenable has extracted the preceding description block directly from the Fedora...

kernel: sched/membarrier: reduce the ability to hammer on sys_membarrier

A flaw was found in sysmembarrier in the Linux kernel in sched/membarrier in how a user calls it at too high of a frequency. This flaw allows a local user to saturate the machine...

kernel: sched/membarrier: reduce the ability to hammer on sys_membarrier

A flaw was found in sysmembarrier in the Linux kernel in sched/membarrier in how a user calls it at too high of a frequency. This flaw allows a local user to saturate the machine...

The vulnerability of the driver rndismp6.sys in Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the rndismp6.sys driver in Windows operating systems is related to the swapping of an unreliable pointer. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the driver rndismp6.sys in Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the rndismp6.sys driver in Windows operating systems is related to insufficient input validation. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

CVE-2024-31648

CVE-2024-31648 describes a cross-site scripting (XSS) vulnerability in Insurance Management System v1.0. The issue allows remote attackers to inject arbitrary web scripts or HTML via the Category Name parameter at /core/new_category2, enabling attacker-controlled script execution in the victim’s ...

Popular Rust Crate liblzma-sys Compromised with XZ Utils Backdoor Files

"Test files" associated with the XZ Utils backdoor have made their way to a Rust crate known as liblzma-sys, new findings from Phylum reveal. liblzma-sys, which has been downloaded over 21,000 times to date, provides Rust developers with bindings to the liblzma implementation, an underlying libra...

The vulnerability of the vmm-sys-util module, related to writing beyond buffer boundaries, allows an attacker to cause a service failure or exert other effects.

The vulnerability of the vmm-sys-util module set is related to the lack of checks to ensure that the length stored in the header corresponds to the actual length of the flexible array. Exploiting this vulnerability could allow a remote attacker to cause service failures or exert other adverse...

ROS-20240410-10

Vulnerability of vmm-sys-util module set is related to the lack of checking if the length, stored in the header matches the length of the flexible array. Exploitation of the vulnerability could allow an attacker, acting remotely, to cause a denial of service...

CVE-2024-26252

Windows rndismp6.sys Remote Code Execution Vulnerability...

CVE-2024-26253

Windows rndismp6.sys Remote Code Execution Vulnerability...

CVE-2024-26253

Windows rndismp6.sys Remote Code Execution Vulnerability...

CVE-2024-26252

Windows rndismp6.sys Remote Code Execution Vulnerability...

CVE-2024-26253 Windows rndismp6.sys Remote Code Execution Vulnerability

...

CVE-2024-26252 Windows rndismp6.sys Remote Code Execution Vulnerability

...

CVE-2024-26252

CVE-2024-26252 refers to a Windows kernel vulnerability in the rndismp6.sys driver that enables remote code execution. The issue is described as affecting the Windows component rndismp6.sys with a CVSSv3.1 base score of 6.8 (Medium), and usability concerns indicate a physical attack vector, low a...

CVE-2024-26252 Windows rndismp6.sys Remote Code Execution Vulnerability

...

Windows rndismp6.sys Remote Code Execution Vulnerability

...

Windows rndismp6.sys Remote Code Execution Vulnerability

...

PT-2024-2998 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient input validation in the rndismp6.sys driver of Windows operating systems. This can be exploited by remote attackers to execute arbitrary code, affecting...