Lucene search
K

3661 matches found

OSV
OSV
added 2024/06/28 7:15 p.m.1 views

UBUNTU-CVE-2024-27629

An issue in dc2niix before v.1.0.20240202 allows a local attacker to execute arbitrary code via the generated file name is not properly escaped and injected into a system call when certain types of compression are used...

7.8CVSS6.2AI score0.00206EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2024/06/28 12:0 a.m.11 views

CVE-2024-27629

An issue in dc2niix before v.1.0.20240202 allows a local attacker to execute arbitrary code via the generated file name is not properly escaped and injected into a system call when certain types of compression are used...

7.6AI score0.00206EPSS
Exploits0References1
CVE
CVE
added 2024/06/28 12:0 a.m.63 views

CVE-2024-27629

CVE-2024-27629 affects dc2niix (dcm2niix) prior to v1.0.20240202. The issue allows a local attacker to execute arbitrary code via generated filenames that are not properly escaped in certain compression scenarios, due to unsafe injection into system calls. Affected version range is before 1.0.202...

7.8CVSS7.7AI score0.00206EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/06/28 12:0 a.m.3 views

dcm2niix Security Vulnerabilities

dcm2niix is an open source library from Chris Rorden Lab. Designed to convert neuroimaging data from DICOM format to NIfTI format. A security vulnerability exists in versions prior to dcm2niix v.1.0.20240202, which stems from the fact that when certain types of compression are used, an attacker c...

7.8CVSS7.6AI score0.00206EPSS
Exploits0References2
Cvelist
Cvelist
added 2024/06/28 12:0 a.m.16 views

CVE-2024-27629

An issue in dc2niix before v.1.0.20240202 allows a local attacker to execute arbitrary code via the generated file name is not properly escaped and injected into a system call when certain types of compression are used...

0.00206EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/06/28 12:0 a.m.5 views

PT-2024-21977 · Dc2Niix +1 · Dc2Niix +1

Name of the Vulnerable Software and Affected Versions: dc2niix versions prior to 1.0.20240202 Description: The issue allows a local attacker to execute arbitrary code via a generated file name that is not properly escaped and injected into a system call when certain types of compression are used...

7.8CVSS7.6AI score0.00206EPSS
Exploits0References10
Debian CVE
Debian CVE
added 2024/06/28 12:0 a.m.17 views

CVE-2024-27629

An issue in dc2niix before v.1.0.20240202 allows a local attacker to execute arbitrary code via the generated file name is not properly escaped and injected into a system call when certain types of compression are used...

7.8CVSS6.2AI score0.00206EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2024/06/28 12:0 a.m.34 views

EulerOS 2.0 SP12 : python3 (EulerOS-SA-2024-1861)

According to the versions of the python3 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : An issue was found in the CPython tempfile.TemporaryDirectory class affecting versions 3.12.1, 3.11.7, 3.10.13, 3.9.18, and 3.8.18 and prior.The...

7.8CVSS6.9AI score0.00333EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2024/06/28 12:0 a.m.30 views

EulerOS 2.0 SP12 : python3 (EulerOS-SA-2024-1875)

According to the versions of the python3 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : An issue was found in the CPython tempfile.TemporaryDirectory class affecting versions 3.12.1, 3.11.7, 3.10.13, 3.9.18, and 3.8.18 and prior.The...

7.8CVSS6.9AI score0.00333EPSS
Exploits0References3
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/06/25 1:27 p.m.4 views

Malicious code in Be.Vlaanderen.Basisregisters.AspNetCore.Mvс.Middleware.DefaultResponseCompressiоnQuality (NuGet)

--- -= Per source details. Do not edit below this line.=-...

7AI score
Exploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/06/25 1:26 p.m.3 views

Malicious code in Be.Vlaanderen.Basisregistеrs.AspNetCore.Mvс.Middleware.DefaultResponseCompressіоnQuality (NuGet)

--- -= Per source details. Do not edit below this line.=-...

7AI score
Exploits0
Microsoft KB
Microsoft KB
added 2024/06/25 12:0 a.m.2 views

June 25, 2024—KB5039302 (OS Builds 22621.3810 and 22631.3810) Preview

June 25, 2024—KB5039302 OS Builds 22621.3810 and 22631.3810 Preview For information about Windows update terminology, see the article about the types of Windows updates and the monthly quality update types. For an overview of Windows 11, version 23H2, see its update history page. Note Follow...

6.7AI score
Exploits0
SUSE CVE
SUSE CVE
added 2024/06/24 11:18 p.m.1 views

SUSE CVE-2024-33847

In the Linux kernel, the following vulnerability has been resolved: f2fs: compress: don't allow unaligned truncation on released compress inode f2fs image may be corrupted after below testcase: - mkfs.f2fs -O extraattr,compression -f /dev/vdb - mount /dev/vdb /mnt/f2fs - touch /mnt/f2fs/file -...

5.5CVSS6.7AI score0.00225EPSS
Exploits0References3
OSV
OSV
added 2024/06/24 2:15 p.m.2 views

DEBIAN-CVE-2024-33847

In the Linux kernel, the following vulnerability has been resolved: f2fs: compress: don't allow unaligned truncation on released compress inode f2fs image may be corrupted after below testcase: - mkfs.f2fs -O extraattr,compression -f /dev/vdb - mount /dev/vdb /mnt/f2fs - touch /mnt/f2fs/file -...

5.5CVSS5.3AI score0.00225EPSS
Exploits0References1
OSV
OSV
added 2024/06/24 2:15 p.m.0 views

DEBIAN-CVE-2024-34027

In the Linux kernel, the following vulnerability has been resolved: f2fs: compress: fix to cover reserve,releasecompressblocks w/ cprwsem lock It needs to cover reserve,releasecompressblocks w/ cprwsem lock to avoid racing with checkpoint, otherwise, filesystem metadata including blkaddr in dnode...

7CVSS5.5AI score0.00228EPSS
Exploits0References1
UbuntuCve
UbuntuCve
added 2024/06/24 2:15 p.m.12 views

CVE-2024-33847

In the Linux kernel, the following vulnerability has been resolved: f2fs: compress: don't allow unaligned truncation on released compress inode f2fs image may be corrupted after below testcase: - mkfs.f2fs -O extraattr,compression -f /dev/vdb - mount /dev/vdb /mnt/f2fs - touch /mnt/f2fs/file -...

5.5CVSS5.8AI score0.00225EPSS
Exploits0References21
OSV
OSV
added 2024/06/24 2:15 p.m.0 views

UBUNTU-CVE-2024-33847

In the Linux kernel, the following vulnerability has been resolved: f2fs: compress: don't allow unaligned truncation on released compress inode f2fs image may be corrupted after below testcase: - mkfs.f2fs -O extraattr,compression -f /dev/vdb - mount /dev/vdb /mnt/f2fs - touch /mnt/f2fs/file -...

5.5CVSS5.8AI score0.00225EPSS
Exploits0References22
OSV
OSV
added 2024/06/24 2:15 p.m.0 views

UBUNTU-CVE-2024-34027

In the Linux kernel, the following vulnerability has been resolved: f2fs: compress: fix to cover reserve,releasecompressblocks w/ cprwsem lock It needs to cover reserve,releasecompressblocks w/ cprwsem lock to avoid racing with checkpoint, otherwise, filesystem metadata including blkaddr in dnode...

7CVSS6.1AI score0.00228EPSS
Exploits0References22
Vulnrichment
Vulnrichment
added 2024/06/24 1:56 p.m.21 views

CVE-2024-33847 f2fs: compress: don't allow unaligned truncation on released compress inode

In the Linux kernel, the following vulnerability has been resolved: f2fs: compress: don't allow unaligned truncation on released compress inode f2fs image may be corrupted after below testcase: - mkfs.f2fs -O extraattr,compression -f /dev/vdb - mount /dev/vdb /mnt/f2fs - touch /mnt/f2fs/file -...

6.9AI score0.00225EPSS
Exploits0References6
Cvelist
Cvelist
added 2024/06/24 1:56 p.m.25 views

CVE-2024-33847 f2fs: compress: don't allow unaligned truncation on released compress inode

In the Linux kernel, the following vulnerability has been resolved: f2fs: compress: don't allow unaligned truncation on released compress inode f2fs image may be corrupted after below testcase: - mkfs.f2fs -O extraattr,compression -f /dev/vdb - mount /dev/vdb /mnt/f2fs - touch /mnt/f2fs/file -...

0.00225EPSS
Exploits0References6
Rows per page
Query Builder