openSUSE: Security Advisory for libvirt (SUSE-SU-2024:1100-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLES15: libvirt / libvirt-client / libvirt-daemon / etc (SUSE-SU-2024:1100-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:1100-1 advisory. - CVE-2024-2494: Add a check for negative array lengths before allocation to prevent potential DoS. bsc1221815 Tenable has extracted the...

MGASA-2024-0114 Updated libvirt packages fix security vulnerability

A flaw was found in the RPC library APIs of libvirt. The RPC server deserialization code allocates memory for arrays before the non-negative length check is performed by the C API entry points. Passing a negative length to the gnew0 function results in a crash due to the negative length being...

Updated libvirt packages fix security vulnerability

A flaw was found in the RPC library APIs of libvirt. The RPC server deserialization code allocates memory for arrays before the non-negative length check is performed by the C API entry points. Passing a negative length to the gnew0 function results in a crash due to the negative length being...

SUSE-SU-2024:1083-1 Security update for libvirt

This update for libvirt fixes the following issues: - CVE-2024-2494: Fixed negative gnew0 length leading to unbounded memory allocation bsc1221815...

SUSE SLES15 Security Update : libvirt (SUSE-SU-2024:1078-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2024:1078-1 advisory. - CVE-2024-2494: Fixed negative gnew0 length can lead to unbounded memory allocation bsc1221815. Tenable has extracted the preceding...

SUSE-SU-2024:1078-1 Security update for libvirt

This update for libvirt fixes the following issues: - CVE-2024-2494: Fixed negative gnew0 length can lead to unbounded memory allocation bsc1221815...

CVE-2024-2494

CVE-2024-2494 affects libvirt RPC library APIs: during server deserialization, memory for arrays is allocated before non-negative length checks, so passing a negative length to g_new0 crashes the libvirt daemon. This vulnerability can allow a local, unprivileged user to trigger a denial of servic...

CVE-2024-2494 Libvirt: negative g_new0 length can lead to unbounded memory allocation

A flaw was found in the RPC library APIs of libvirt. The RPC server deserialization code allocates memory for arrays before the non-negative length check is performed by the C API entry points. Passing a negative length to the gnew0 function results in a crash due to the negative length being...

CVE-2024-2494

A flaw was found in the RPC library APIs of libvirt. The RPC server deserialization code allocates memory for arrays before the non-negative length check is performed by the C API entry points. Passing a negative length to the gnew0 function results in a crash due to the negative length being...

CVE-2019-2494

creationtimestamp| type| source ---|---|--- 2023-11-15 16:53:23+00:00| published-proof-of-concept| https://t.me/BABATATASASA/5991...

Huawei EulerOS: Security Advisory for sudo (EulerOS-SA-2023-2494)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

WordPress Go Pricing Plugin <= 3.3.19 is vulnerable to Broken Access Control

Software Go Pricing Type Plugin Vulnerable versions = 3.3.19 Fixed in 3.4 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-2494 Patch priority Medium CVSS severity Medium 5.4 Developer Claim ownership PSID 71975662f90e Credits Lana Codes Required privilege...

CVE-2023-2494

creationtimestamp| type| source ---|---|--- 2023-05-24 07:26:51+00:00| seen| https://t.me/cibsecurity/64668...

CVE-2023-2494

The Go Pricing - WordPress Responsive Pricing Tables plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'processpostdata' function in versions up to, and including, 3.3.19. This makes it possible for authenticated attackers with a role...

CVE-2023-2494

CVE-2023-2494 affects the Go Pricing - WordPress Responsive Pricing Tables plugin for WordPress. Vulnerable in versions up to 3.3.19 due to a missing capability check in the function process_postdata, enabling authenticated attackers (with a role granted access to the plugin) to modify access to ...

SUSE CVE-2010-2494

Multiple buffer underflows in the base64 decoder in base64.c in 1 bogofilter and 2 bogolexer in bogofilter before 1.2.2 allow remote attackers to cause a denial of service heap memory corruption and application crash via an e-mail message with invalid base64 data that begins with an = equals...

SUSE CVE-2019-2494

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: DDL. Supported versions that are affected are 8.0.13 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

MariaDB 10.0.0 < 10.0.12 Multiple Vulnerabilities

The version of MariaDB installed on the remote host is prior to 10.0.12. It is, therefore, affected by multiple vulnerabilities as referenced in the 10.0.12 advisory. - Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier and 5.6.17 and earlier allows remote...

CVE-2022-2494

CVE-2022-2494 is a Cross-site Scripting (XSS) vulnerability stored in OpenEMR repositories prior to version 7.0.0. Multiple connected sources consistently describe the issue as arising from failure to encode key/value data in patientdate.js, enabling attackers to execute JavaScript in a victim’s ...