CVE-2024-45147

CVE-2024-45147 affects Adobe Bridge: out-of-bounds read (CWE-125) in Bridge versions 13.0.9, 14.1.2 and earlier, potentially exposing sensitive memory and enabling bypass of mitigations like ASLR. Exploitation requires the victim to open a malicious file, i.e., a user interaction attack with a lo...

CVE-2024-47458

Adobe Bridge CVE-2024-47458 is a NULL Pointer Dereference affecting Bridge versions up to 14.1.2 and earlier, causing denial of service when a user opens a crafted file. The issue is triggered by user interaction and results in a crash; exploitation details beyond what the report states are not p...

CVE-2024-47458 Bridge | NULL Pointer Dereference (CWE-476)

Bridge versions 13.0.9, 14.1.2 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial of service condition. Exploitation of this issue...

CVE-2024-47458 Bridge | NULL Pointer Dereference (CWE-476)

Bridge versions 13.0.9, 14.1.2 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial of service condition. Exploitation of this issue...

Adobe Releases Security Updates for Multiple Products

Adobe released security updates to address multiple vulnerabilities in Adobe software. A cyber threat actor could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the following Adobe Security Bulletins and apply the...

kernel: net: bridge: switchdev: Skip MDB replays of deferred events on offload

A flaw was found in the Linux kernel. A race condition in network bridge management could lead to a denial of service...

kernel: rtnetlink: fix error logic of IFLA_BRIDGE_FLAGS writing back

In the Linux kernel, the following vulnerability has been resolved: rtnetlink: fix error logic of IFLABRIDGEFLAGS writing back The Linux kernel CVE team has assigned CVE-2024-27414 to this issue. Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024051702-CVE-2024-27414-5c5d@gregkh/T...

kernel: cxl/mem: Fix no cxl_nvd during pmem region auto-assembling

In the Linux kernel, the following vulnerability has been resolved: cxl/mem: Fix no cxlnvd during pmem region auto-assembling When CXL subsystem is auto-assembling a pmem region during cxl endpoint port probing, always hit below calltrace. BUG: kernel NULL pointer dereference, address:...

Adobe Bridge 代码问题漏洞

Adobe Bridge is a file viewer from the American company Audobee Adobe. Adobe Bridge has a security vulnerability that can be exploited by an attacker to cause a denial of service in the application...

Adobe Bridge < 14.1.3 Multiple Vulnerabilities (APSB24-77)

The version of Adobe Bridge installed on the remote macOS or Mac OS X host is prior to 14.1.3. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb24-77 advisory. - Out-of-bounds Read CWE-125 potentially leading to Memory leak CVE-2024-45147 - NULL Pointer Dereference...

Adobe Bridge < 14.1.3 Multiple Vulnerabilities (APSB24-77)

The version of Adobe Bridge installed on the remote Windows host is prior to 14.1.3. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb24-77 advisory. - Out-of-bounds Read CWE-125 potentially leading to Memory leak CVE-2024-45147 - NULL Pointer Dereference CWE-476...

Adobe Bridge 缓冲区错误漏洞

Adobe Bridge is a file viewer from the American company Audobee Adobe. A security vulnerability exists in Adobe Bridge, which can be exploited by an attacker to cause a sensitive memory leak...

net/mlx5: Fix bridge mode operations when there are no VFs

...

kernel security update

An update is available for kernel. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel packages contain the Linux kernel, the core of any Linux operating...

OESA-2024-2343 mosquitto security update

Mosquitto is an open source message broker that implements the MQ Telemetry Transport protocol version 3.1 and 3.1.1 MQTT provides a lightweight method of carrying out messaging using a publish/subscribe model. This makes it suitable for "machine to machine" messaging such as with low power senso...

OESA-2024-2346 mosquitto security update

Mosquitto is an open source message broker that implements the MQ Telemetry Transport protocol version 3.1 and 3.1.1 MQTT provides a lightweight method of carrying out messaging using a publish/subscribe model. This makes it suitable for "machine to machine" messaging such as with low power senso...

OESA-2024-2344 mosquitto security update

Mosquitto is an open source message broker that implements the MQ Telemetry Transport protocol version 3.1 and 3.1.1 MQTT provides a lightweight method of carrying out messaging using a publish/subscribe model. This makes it suitable for "machine to machine" messaging such as with low power senso...

Malicious code in immutable-axelar-bridge (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d36818770ca9a97d6b714a041348e2e44a341e8d2f017aff4fb1dc912d185e41 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10560 Malicious code in immutable-axelar-bridge (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d36818770ca9a97d6b714a041348e2e44a341e8d2f017aff4fb1dc912d185e41 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Tenda O3 安全漏洞

Tenda O3 is an outdoor wireless bridge from Tenda, China. The Tenda O3 suffers from a buffer overflow vulnerability that originates from a boundary error when the application processes untrusted input. A remote attacker could use this vulnerability to cause a denial of service via a fixed-format...