CVE-2023-52435 net: prevent mss overflow in skb_segment()

In the Linux kernel, the following vulnerability has been resolved: net: prevent mss overflow in skbsegment Once again syzbot is able to crash the kernel in skbsegment 1 GSOBYFRAGS is a forbidden value, but unfortunately the following computation in skbsegment can reach it quite easily : mss = ms...

CVE-2024-21304

Trusted Compute Base Elevation of Privilege Vulnerability...

CVE-2024-21304

Trusted Compute Base Elevation of Privilege Vulnerability...

Privilege escalation

Trusted Compute Base Elevation of Privilege Vulnerability...

CVE-2024-21304 Trusted Compute Base Elevation of Privilege Vulnerability

...

CVE-2024-21304 Trusted Compute Base Elevation of Privilege Vulnerability

...

CVE-2024-21304

Technical details about CVE-2024-21304 are not provided in the supplied documents. Monitor for updates as new public information becomes available.

Trusted Compute Base Elevation of Privilege Vulnerability

...

Microsoft Windows Trusted Compute Base Security Vulnerability

Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. A security vulnerability exists in Microsoft Windows Trusted Compute Base. The following products and versions are affected:Windows 10 Version 1809 for 32-bit...

PT-2024-1703

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to an elevation-of-privilege vulnerability in the Trusted Compute Base TCB of Windows operating systems, which is caused by inadequate access control. This vulnerability...

PT-2024-21476

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.3.9-arch1-1 Description The Linux kernel has a vulnerability in the drm/amd/display module, specifically in the function drm dp atomic find time slots. This vulnerability is caused by a NULL pointer dereference...

Virtuozzo Hybrid Infrastructure 6.0 Update 1 Hotfix 1 (6.0.1-85)

This update provides stability and performance improvements. Vulnerability id: VSTOR-72592 Increased the speed of VM filtering in clusters with a huge number of existing projects. Vulnerability id: VSTOR-79462 Parts of a multipart object are not deleted. Vulnerability id: VSTOR-79650, VSTOR-80493...

HPESBHF04576 rev.4 - HPE Superdome Flex, Superdome Flex 280 and Compute Scale-up Server 3200 Servers, Multiple Vulnerabilities (PixieFAIL)

Potential Security Impact: Remote: Code Execution, Denial of Service DoS, Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Superdome Flex Server - Prior to v3.100.26 HPE Superdome Flex 280 Server - Prior to v1.80.20 HPE Compute Scale-up Server 3200 -...

CVE-2023-42766

Improper input validation in some Intel NUC 8 Compute Element BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2023-42766: Improper Input Validation

Improper input validation in some Intel NUC 8 Compute Element BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access...

Multiple General Graphics Processing Unit Security Vulnerabilities

OpenCL and Vulkan are products of the Khronos Group.OpenCL is a framework for writing programs for heterogeneous platforms.Vulkan is a low-overhead, cross-platform application programming interface API for 2D and 3D graphics and computing. A security vulnerability exists in Khronos Group OpenCL,...

PT-2024-1193 · Intel · Intel Nuc 8 Compute Element

Name of the Vulnerable Software and Affected Versions: Intel NUC 8 Compute Element BIOS firmware affected versions not specified Description: The issue is related to improper input validation in the BIOS firmware, which may allow a privileged user to potentially enable escalation of privilege via...

SUSE CVE-2023-51107

A floating point exception divide-by-zero vulnerability was discovered in Artifex MuPDF 1.23.4 in functon computecolor of jquant2.c. NOTE: this is disputed by the supplier because there was not reasonable evidence to determine the existence of a vulnerability or identify the affected product...

DEBIAN-CVE-2023-51107

A floating point exception divide-by-zero vulnerability was discovered in Artifex MuPDF 1.23.4 in functon computecolor of jquant2.c. NOTE: this is disputed by the supplier because there was not reasonable evidence to determine the existence of a vulnerability or identify the affected product...

UBUNTU-CVE-2023-51107

A floating point exception divide-by-zero vulnerability was discovered in Artifex MuPDF 1.23.4 in functon computecolor of jquant2.c. NOTE: this is disputed by the supplier because there was not reasonable evidence to determine the existence of a vulnerability or identify the affected product...