15330 matches found
EulerOS 2.0 SP10 : orc (EulerOS-SA-2024-2449)
According to the versions of the orc packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Stack-based buffer overflow vulnerability exists in orcparse.c of ORC versions prior to 0.4.39. If a developer is tricked to process a specially...
Buildah: full container escape at build time
...
MGASA-2024-0288 Updated orc packages fix security vulnerability
Stack-based buffer overflow vulnerability exists in orcparse.c of ORC versions prior to 0.4.39. If a developer is tricked to process a specially crafted file with the affected ORC compiler, an arbitrary code may be executed on the developer's build environment. This may lead to compromise of...
BIT-GOLANG-2024-34158 Stack exhaustion in Parse in go/build/constraint
Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion...
September 10, 2024—KB5043080 (OS Build 26100.1742)
September 10, 2024—KB5043080 OS Build 26100.1742 Applies To Windows 11 version 24H2, all editions Note For information about Windows update terminology, see the article about the types of Windows updates and the monthly quality update types. Note Follow @WindowsUpdate to find out when new content...
September 10, 2024—KB5043067 (OS Build 22000.3197)
September 10, 2024—KB5043067 OS Build 22000.3197 Applies To Windows 11 version 21H2, all editions Note 07/09/24---END OF SERVICE NOTICE --- IMPORTANT All editions of Windows 11, version 21H2 will reach end of service on October 8, 2024. After that date, these devices will not receive monthly...
Description of the security update for SharePoint Server 2019: September 10, 2024 (KB5002639)
Description of the security update for SharePoint Server 2019: September 10, 2024 KB5002639 Applies To SharePoint Server 2019 Summary This security update resolves a Microsoft SharePoint Server remote code execution vulnerability, and Microsoft SharePoint Server denial of service vulnerability. T...
PT-2024-10168
Name of the Vulnerable Software and Affected Versions QNAP QTS versions prior to 5.1.9.2954 build 20241120 QNAP QTS versions prior to 5.2.2.2950 build 20241114 QNAP QuTS hero versions prior to h5.1.9.2954 build 20241120 QNAP QuTS hero versions prior to h5.2.2.2952 build 20241116 Description The...
PT-2024-10169
Name of the Vulnerable Software and Affected Versions QTS versions prior to 5.1.9.2954 build 20241120 QTS versions prior to 5.2.2.2950 build 20241114 QuTS hero versions prior to h5.1.9.2954 build 20241120 QuTS hero versions prior to h5.2.2.2952 build 20241116 Description An improper neutralizatio...
QNAP QTS Multiple Vulnerabilities (QSA-24-28)
QNAP QTS is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:qnap:qts"; ifdescription...
QNAP QTS curl Vulnerability (QSA-24-27)
QNAP QTS is prone to a heap buffer overflow vulnerability in curl. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:qnap:qts";...
CVE-2024-34158
A flaw was found in the go/build/constraint package of the Golang standard library. Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion. Mitigation Mitigation for this issue is either not available or the currently available optio...
CVE-2024-34158
Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion...
AZL-79078 CVE-2024-34158 affecting package golang 1.25.7-1
Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion...
AZL-98805 CVE-2024-34158 affecting package golang 1.27.1-1
Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion...
CVE-2024-34158
Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion...
DEBIAN-CVE-2024-34158
Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion...
AZL-48929 CVE-2024-34158 affecting package golang for versions less than 1.18.8-6
Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion...
