The vulnerability of the erofs_kill_sb() function in the EROFS file system, a enhanced read-only file system, in the Linux operating system, allows a malicious actor to trigger a service failure.

The vulnerability of the erofskillsb function in the fs/erofs/super.c file of the EROFS file system’s kernel for Linux operating systems is related to the release of previously unallocated memory. Exploiting this vulnerability could allow an attacker to trigger a service failure...

CVE-2024-38443

C/sorting/binaryinsertionsort.c in The Algorithms - C through e5dad3f has a segmentation fault for deep recursion, which may affect common use cases such as sorting an array of 50 elements...

PT-2024-28005 · Unknown · The Algorithms

Name of the Vulnerable Software and Affected Versions: The Algorithms - C versions through e5dad3f Description: The issue is related to a segmentation fault caused by deep recursion in the binary insertion sort.c file. This may impact common use cases, such as sorting an array of 50 elements...

OPENSUSE-SU-2024:12175-1 libprotobuf-c-devel-1.4.0-3.1 on GA media

These are all security issues fixed in the libprotobuf-c-devel-1.4.0-3.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11720-1 cargo-c-0.8.1~git0.cce1b08-2.1 on GA media

These are all security issues fixed in the cargo-c-0.8.1git0.cce1b08-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:10039-1 libxerces-c-3_1-3.1.4-1.3 on GA media

These are all security issues fixed in the libxerces-c-31-3.1.4-1.3 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13540-1 libxerces-c-3_2-3.2.5-1.1 on GA media

These are all security issues fixed in the libxerces-c-32-3.2.5-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12885-1 libprotobuf-c-devel-1.4.1-4.1 on GA media

These are all security issues fixed in the libprotobuf-c-devel-1.4.1-4.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12674-1 c-ares-devel-1.19.0-2.1 on GA media

These are all security issues fixed in the c-ares-devel-1.19.0-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12951-1 c-ares-devel-1.19.1-1.1 on GA media

These are all security issues fixed in the c-ares-devel-1.19.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13722-1 c-ares-devel-1.27.0-1.1 on GA media

These are all security issues fixed in the c-ares-devel-1.27.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:10013-1 libjson-c-devel-0.12.1-1.3 on GA media

These are all security issues fixed in the libjson-c-devel-0.12.1-1.3 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:10668-1 c-ares-devel-1.17.2-2.2 on GA media

These are all security issues fixed in the c-ares-devel-1.17.2-2.2 package on the GA media of openSUSE Tumbleweed...

RLSA-2024:2853 Important: nodejs:20 security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fixes: c-ares: Out of bounds read in aresreadline CVE-2024-25629 nghttp2: CONTINUATION frames DoS CVE-2024-28182 nodejs: using the fetch function to...

c-ares bug fix and enhancement update

An update is available for c-ares. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 8.10...

Rocky Linux 9 : nodejs:20 (RLSA-2024:2853)

The remote Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2024:2853 advisory. c-ares: Out of bounds read in aresreadline CVE-2024-25629 nghttp2: CONTINUATION frames DoS CVE-2024-28182 nodejs: using the fetch function to retrieve...

Rocky Linux 9 : nodejs (RLSA-2024:2910)

The remote Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2024:2910 advisory. nodejs: CONTINUATION frames DoS CVE-2024-27983 nodejs: using the fetch function to retrieve content from an untrusted URL leads to denial of service...

AlmaLinux 9 : c-ares (ALSA-2024:3842)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2024:3842 advisory. c-ares: Out of bounds read in aresreadline CVE-2024-25629 Tenable has extracted the preceding description block directly from the AlmaLinux security advisory. Note...

CLSA-2024-1718270850 Fix CVE(s): CVE-2023-4016

SECURITY UPDATE: Ability to write almost unlimited amounts of unfiltered data into the process heap - debian/patches/CVE-2023-4016-2.patch: ps: extended fix of the CVE-2023-4016 - fix possible buffer overflow in -C option. - CVE-2023-4016...

AZL-42652 CVE-2023-52890 affecting package ntfs-3g for versions less than 2022.10.3-2

NTFS-3G before 75dcdc2 has a use-after-free in ntfsuppercasembs in libntfs-3g/unistr.c. NOTE: discussion suggests that exploitation would be challenging...