CVE-2024-37603

CVE-2024-37603 affects Mercedes-Benz NTG6 head units, with a type-confusion vulnerability in the USB-based UserData import/export workflow. Exploitation requires physical access to the vehicle’s USB interface; an attacker can craft data that causes the UserData service to crash, after which the s...

CVE-2023-34397

Mercedes Benz head-unit NTG 6 contains functions to import or export profile settings over USB. During parsing you can trigger that the service will be crashed...

CVE-2024-37601

CVE-2024-37601 : Mercedes-Benz NTG (New Telematics Generation) 6 contains a heap buffer overflow in the UserData/UD2 decoding path used for import/export via USB. The vulnerability requires local USB access to trigger, and exploitation can crash the UserData service, with the system subsequently ...

CVE-2023-34406

CVE-2023-34406 affects Mercedes‑Benz NTG 6 head units. The issue is an integer overflow in the UserData import/export function of NTG 6. Exploitation requires local access via USB; with prepared data, a attacker can crash the User-Data service, after which the service restarts automatically. The ...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: drm/arm/malidp: fixed a possible null pointer dereferencing issue. In malidpmwconnectorreset, new memory is allocated using kzalloc, but no checks are performed. To prevent null pointer dereferencing, ensure that mwstate is check...

Debian: Security Advisory (DSA-5863-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 5863-1] libtasn1-6 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5863-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso February 10, 2025 https://www.debian.org/security/faq -...

Debian dsa-5863 : libtasn1-6 - security update

The remote Debian 12 host has packages installed that are affected by a vulnerability as referenced in the dsa-5863 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-5863-1 [email protected] https://www.debian.org/security/...

Apple Security Update: watchOS 11.3.1

Apple recommends to install security update watchOS 11.3.1 on devices Apple Watch Series 6 and later...

DSA-5863-1 libtasn1-6 - security update

Bulletin has no description...

UBUNTU-CVE-2025-1017

Memory safety bugs present in Firefox 134, Thunderbird 134, Firefox ESR 128.6, and Thunderbird 128.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox 13...

CVE-2024-43802 affecting package vim for versions less than 9.1.0697-1

CVE-2024-43802 affecting package vim for versions less than 9.1.0697-1. A patched version of the package is available...

CVE-2018-11694 affecting package reaper for versions less than 3.1.1-6

CVE-2018-11694 affecting package reaper for versions less than 3.1.1-6. A patched version of the package is available...

CVE-2022-39382

Keystone is a headless CMS for Node.js — built with GraphQL and React.@keystone-6/[email protected] || 3.0.1 users that use NODEENV to trigger security-sensitive functionality in their production builds are vulnerable to NODEENV being inlined to "development" for user code, irrespective of what your...

CVE-2022-39322

@keystone-6/core is a core package for Keystone 6, a content management system for Node.js. Starting with version 2.2.0 and prior to version 2.3.1, users who expected their multiselect fields to use the field-level access control - if configured - are vulnerable to their field-level access contro...

AZL-56478 CVE-2025-0167 affecting package curl for versions less than 8.8.0-6

When asked to use a .netrc file for credentials and to follow HTTP redirects, curl could leak the password used for the first host to the followed-to host under certain circumstances. This flaw only manifests itself if the netrc file has a default entry that omits both login and password. A rare...

Security update for libxml2

This update for libxml2 fixes the following issues: CVE-2024-34459: Fixed buffer over-read in bsc1224282 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the command listed for your...

RHEL 6 : rsync (RHSA-2025:0849)

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2025:0849 advisory. The rsync utility enables the users to copy and synchronize files locally or across a network. Synchronization with rsync is fast because rsync only...

python-jinja2 security update

2.10.1-6 - Security fix for CVE-2024-56326 Resolves: RHEL-74677...

RHEL 8 : redis:6 (RHSA-2025:0689)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:0689 advisory. Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and...