24621 matches found
kernel: Linux kernel: BPF verifier log truncation via crafted user input
A flaw was found in the Linux kernel's Berkeley Packet Filter BPF verifier log. A local user can exploit this by providing excessively long BPF Type Format BTF names or BTF.ext source code line strings. This can lead to the truncation of a single verifier log line, potentially obscuring important...
Moderate: Red Hat Security Advisory: mutt security update
An update for mutt is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...
CVE-2024-31837
DMitry Deepmagic Information Gathering Tool 1.3a has a format-string vulnerability, with a threat model similar to CVE-2017-7938...
CVE-2024-31837
DMitry Deepmagic Information Gathering Tool 1.3a has a format-string vulnerability, with a threat model similar to CVE-2017-7938...
DEBIAN-CVE-2024-31837
DMitry Deepmagic Information Gathering Tool 1.3a has a format-string vulnerability, with a threat model similar to CVE-2017-7938...
UBUNTU-CVE-2024-31837
DMitry Deepmagic Information Gathering Tool 1.3a has a format-string vulnerability, with a threat model similar to CVE-2017-7938...
CVE-2024-31837
DMitry Deepmagic Information Gathering Tool 1.3a has a format-string vulnerability, with a threat model similar to CVE-2017-7938...
DMitry 安全漏洞
DMitry is a Deepmagic Information Gathering Tool by the individual developer J Greig in the UK. A security vulnerability exists in DMitry Deepmagic Information Gathering Tool version 1.3a, which stems from the presence of a format string vulnerability...
Foxit Reader ComboBox widget Format event use-after-free vulnerability
Talos Vulnerability Report TALOS-2024-1959 Foxit Reader ComboBox widget Format event use-after-free vulnerability April 30, 2024 CVE Number CVE-2024-25648 SUMMARY A use-after-free vulnerability exists in the way Foxit Reader 2024.1.0.23997 handles a ComboBox widget. A specially crafted JavaScript...
Moderate: runc security update
The runC tool is a lightweight, portable implementation of the Open Container Format OCF that provides container runtime. Security Fixes: golang: io/fs: stack exhaustion in Glob CVE-2022-30630 golang: compress/gzip: stack exhaustion in Reader.Read CVE-2022-30631 golang: path/filepath: stack...
PT-2024-24234 · Dmitry · Dmitry
Name of the Vulnerable Software and Affected Versions: DMitry Deepmagic Information Gathering Tool version 1.3a Description: The issue is a format-string vulnerability. It has a threat model similar to other known format-string vulnerabilities. Recommendations: For DMitry Deepmagic Information...
CVE-2024-31837
DMitry Deepmagic Information Gathering Tool 1.3a has a format-string vulnerability, with a threat model similar to CVE-2017-7938...
CVE-2024-31837
Affected software and issue : DMitry (Deepmagic Information Gathering Tool) version 1.3a contains a format-string vulnerability identified as CVE-2024-31837. The vulnerability is described as a format-string flaw in DMitry 1.3a (Unix) with a threat model similar to CVE-2017-7938. Root cause and i...
CVE-2024-31837
DMitry Deepmagic Information Gathering Tool 1.3a has a format-string vulnerability, with a threat model similar to CVE-2017-7938...
CVE-2024-27322
Deserialization of untrusted data can occur in the R statistical programming language, on any version starting at 1.4.0 up to and not including 4.4.0, enabling a maliciously crafted RDS R Data Serialization formatted file or R package to run arbitrary code on an end user’s system when interacted...
shim: Out-of-bounds read printing error messages
A flaw was found in Shim when an error happened while creating a new ESL variable. If Shim fails to create the new variable, it tries to print an error message to the user; however, the number of parameters used by the logging function doesn't match the format string used by it, leading to a cras...
Fedora 40 : ghc-base64 / ghc-hakyll / ghc-isocline / ghc-toml-parser / gitit / etc (2024-7d83cbccb6)
The remote Fedora 40 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2024-7d83cbccb6 advisory. Security fix for CVE-2023-35936 and CVE-2023-38745 pandoc: - backport fixes for CVE-2023-35936 and CVE-2023-38745 pandoc-cli: - new package for pand...
Fedora 40 : python-cbor2 (2024-619ac47ce9)
The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-619ac47ce9 advisory. Update to latest upstream release closes rhbz2261550, closes rhbz2245361 Tenable has extracted the preceding description block directly from the Fedora...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a memory leak caused by a blob format error...
