openSUSE Security Advisory (SUSE-SU-2024:1167-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2024-30718

CVE-2024-30718 entry is rejected/not used and does not represent an active vulnerability.

AlmaLinux 8 : varnish (ALSA-2024:1690)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2024:1690 advisory. varnish: HTTP/2 Broken Window Attack may result in denial of service CVE-2024-30156 Tenable has extracted the preceding description block directly from the AlmaLin...

CVE-2023-50431 affecting package kernel for versions less than 5.15.153.1-1

CVE-2023-50431 affecting package kernel for versions less than 5.15.153.1-1. A patched version of the package is available...

CVE-2023-6560 affecting package kernel for versions less than 5.15.153.1-1

CVE-2023-6560 affecting package kernel for versions less than 5.15.153.1-1. A patched version of the package is available...

CVE-2023-52434 affecting package kernel for versions less than 5.15.153.1-1

CVE-2023-52434 affecting package kernel for versions less than 5.15.153.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-23850 affecting package kernel for versions less than 5.15.153.1-1

CVE-2024-23850 affecting package kernel for versions less than 5.15.153.1-1. A patched version of the package is available...

CVE-2023-5633 affecting package kernel for versions less than 5.15.153.1-1

CVE-2023-5633 affecting package kernel for versions less than 5.15.153.1-1. A patched version of the package is available...

CVE-2024-0562 affecting package kernel for versions less than 5.15.153.1-1

CVE-2024-0562 affecting package kernel for versions less than 5.15.153.1-1. A patched version of the package is available...

CVE-2023-6040 affecting package kernel for versions less than 5.15.153.1-1

CVE-2023-6040 affecting package kernel for versions less than 5.15.153.1-1. A patched version of the package is available...

CVE-2022-2585 affecting package kernel for versions less than 5.15.153.1-1

CVE-2022-2585 affecting package kernel for versions less than 5.15.153.1-1. A patched version of the package is available...

CVE-2024-23849 affecting package kernel for versions less than 5.15.153.1-1

CVE-2024-23849 affecting package kernel for versions less than 5.15.153.1-1. A patched version of the package is available...

CVE-2024-0646 affecting package kernel for versions less than 5.15.153.1-1

CVE-2024-0646 affecting package kernel for versions less than 5.15.153.1-1. A patched version of the package is available...

CVE-2024-1086 affecting package kernel for versions less than 5.15.153.1-1

CVE-2024-1086 affecting package kernel for versions less than 5.15.153.1-1. A patched version of the package is available...

CVE-2023-35827 affecting package kernel for versions less than 5.15.153.1-1

CVE-2023-35827 affecting package kernel for versions less than 5.15.153.1-1. A patched version of the package is available...

K000139236: Apache Traffic Server HTTP/2 CONTINUATION DoS attack vulnerability CVE-2024-31309

Security Advisory Description HTTP/2 CONTINUATION DoS attack can cause Apache Traffic Server to consume more resources on the server. Version from 8.0.0 through 8.1.9, from 9.0.0 through 9.2.3 are affected. CVE-2024-31309 Impact There is no impact; F5 products are not affected by this...

K000139228: Envoy vulnerability CVE-2024-27919

Security Advisory Description Envoy is a cloud-native, open-source edge and service proxy. In versions 1.29.0 and 1.29.1, theEnvoy HTTP/2 protocol stack is vulnerable to the flood of CONTINUATION frames. Envoy's HTTP/2 codec does not reset a request when header map limits have been exceeded. This...

Security Bulletin: An Eclipse Jetty vulnerability affects IBM Rational Functional Tester/ IBM DevOps Test UI

Summary There is vulnerability in Eclipse Jetty used by Rational Functional TesterRFT / DevOps Test UI Test UI. RFT/Test UI has addressed the applicable CVE-2024-22201. Vulnerability Details CVEID:CVE-2024-22201 DESCRIPTION: Eclipse Jetty is vulnerable to a denial of service, caused by a flaw whe...

Description of the security update for SharePoint Enterprise Server 2016: April 9, 2024 (KB5002583)

None None...

CVE-2024-27983

An attacker can make the Node.js HTTP/2 server completely unavailable by sending a small amount of HTTP/2 frames packets with a few HTTP/2 frames inside. It is possible to leave some data in nghttp2 memory after reset when headers with HTTP/2 CONTINUATION frame are sent to the server and then a T...