3955 matches found
Exploit for Improper Privilege Management in Enlightenment
CVE-2022-37706 !CVE-2022-37706-poc-zoomhttps://user-image...
Fedora 39 : bind / bind-dyndb-ldap (2024-ef8a7031e7)
The remote Fedora 39 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2024-ef8a7031e7 advisory. Update to BIND 9.18.28 Security Fixes - A malicious DNS client that sent many queries over TCP but never read the responses could cause a server to...
Amazon Linux 2 : kernel (ALASKERNEL-5.4-2024-079)
The version of kernel installed on the remote host is prior to 5.4.274-187.369. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.4-2024-079 advisory. In the Linux kernel, the following vulnerability has been resolved: vt: fix memory overlapping when deleti...
CVE-2024-6534 Directus 10.13.0 - Insecure object reference via PATH presets
Directus v10.13.0 allows an authenticated external attacker to modify presets created by the same user to assign them to another user. This is possible because the application only validates the user parameter in the 'POST /presets' request but not in the PATCH request. When chained with...
PT-2025-28258 · Invt · Invt Hmitool
Name of the Vulnerable Software and Affected Versions: INVT HMITool affected versions not specified Description: The issue is related to a remote code execution vulnerability due to out-of-bounds write in VPM file parsing. It is reported as a 0-day vulnerability. Recommendations: At the moment,...
PT-2024-13684 · Unknown · Openbmc Firmware
Name of the Vulnerable Software and Affected Versions: OpenBMC Firmware versions prior to egs-1.15-0 OpenBMC Firmware versions prior to bhs-0.27 Description: The issue is an out of bounds read that may allow a privileged user to potentially enable information disclosure via local access...
PT-2024-12501 · Unknown · Openbmc Firmware
Name of the Vulnerable Software and Affected Versions: OpenBMC Firmware versions prior to egs-1.14-0 OpenBMC Firmware versions prior to bhs-0.27 Description: The issue is related to an uncaught exception in OpenBMC Firmware for some IntelR Server Platforms, which may allow an authenticated user t...
SUSE SLES15: gettext-its-gtk3 / gtk3-data / gtk3-devel / gtk3-devel-doc / etc (SUSE-SU-2024:2898-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:2898-1 advisory. - CVE-2024-6655: Fixed library injection from current working directory bsc1228120. Tenable has extracted the preceding description block...
OPENSUSE-SU-2024:14267-1 klp-build-0~20240812.ad9f0e0-1.1 on GA media
These are all security issues fixed in the klp-build-020240812.ad9f0e0-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:14259-1 libzzip-0-13-0.13.78-1.1 on GA media
These are all security issues fixed in the libzzip-0-13-0.13.78-1.1 package on the GA media of openSUSE Tumbleweed...
SUSE-SU-2024:2863-1 Security update for bind
This update for bind fixes the following issues: Update to 9.16.50: - Bug Fixes: A regression in cache-cleaning code enabled memory use to grow significantly more quickly than before, until the configured max-cache-size limit was reached. This has been fixed. Using rndc flush inadvertently caused...
AMD CPUs -- Guest Memory Vulnerabilities
AMD reports: Researchers from IOActive have reported that it may be possible for an attacker with ring 0 access to modify the configuration of System Management Mode SMM even when SMM Lock is enabled. Improper validation in a model specific register MSR could allow a malicious program with ring0...
SMM Lock Bypass
AMD ID: AMD-SB-7014 Potential Impact: Arbitrary Code Execution Severity: High Summary Researchers from IOActive have reported that it may be possible for an attacker with ring 0 access to modify the configuration of System Management Mode SMM even when SMM Lock is enabled...
SUSE SLED15: bind / bind-chrootenv / bind-devel / bind-doc / bind-utils / etc (SUSE-SU-2024:2810-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:2810-1 advisory. - CVE-2024-1737: It is possible to craft excessively large numbers of resource record types for a given owner...
SUSE SLES15: bind / bind-chrootenv / bind-devel / bind-doc / bind-utils / etc (SUSE-SU-2024:2811-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:2811-1 advisory. - CVE-2024-1737: It is possible to craft excessively large numbers of resource record types for a given owner name, which has the...
SUSE-SU-2024:2811-1 Security update for bind
This update for bind fixes the following issues: - CVE-2024-1737: It is possible to craft excessively large numbers of resource record types for a given owner name, which has the effect of slowing down database processing. This has been addressed by adding a configurable limit to the number of...
ROS-20240807-10
BIND DNS server vulnerability is related to uncontrolled resource consumption. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service by sending multiple DNS messages over TCP The BIND DNS server vulnerability involves sending a large number of clie...
PT-2024-30746
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.50 Description A divide-by-0 panic can occur in the padata mt helper function when ps-chunk size is 0. This happens when the min chunk in the passed-in padata mt job structure is 0. The issue is resolved by...
Important: bind
Issue Overview: Resolver caches and authoritative zone databases that hold significant numbers of RRs for the same hostname of any RTYPE can suffer from degraded performance as content is being added or updated, and also when handling client queries for this name. This issue affects BIND 9 versio...