Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel, which stems from a regulator component that could trigger a kernel crash under certain conditions...

tomcat security update

1:9.0.87-1.el810.2 - Resolves: RHEL-46167 tomcat: Improper Handling of Exceptional Conditions CVE-2024-34750...

Red Hat Undertow 竞争条件问题漏洞

Red Hat Undertow is a Java-based embedded web server from Red Hat USA and is the default web server for Wildfly Java Application Server. Red Hat Undertow suffers from a Competitive Conditions Issue vulnerability. An attacker exploiting this vulnerability could gain access to sensitive information...

RHEL 8 : tomcat (RHSA-2024:5695)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:5695 advisory. Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages JSP technologies. Security Fixes: tomcat: Improper Handling o...

RHEL 8 : tomcat (RHSA-2024:5694)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:5694 advisory. Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages JSP technologies. Security Fixes: tomcat: Improper Handling o...

GO-2023-1754 Rekor's compressed archives can result in OOM conditions in github.com/sigstore/rekor

Rekor's compressed archives can result in OOM conditions in github.com/sigstore/rekor...

SUSE-SU-2024:2973-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2023-0160: Fixed deadlock flaw in BPF that could allow a local user to potentially crash the system bsc1209657. - CVE-2023-38417: wifi: iwlwifi: bump FW API t...

The vulnerability of the parisc component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the parisc component in the Linux operating system’s kernel is related to improper handling of exceptional conditions. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2024-43852 hwmon: (ltc2991) re-order conditions to fix off by one bug

In the Linux kernel, the following vulnerability has been resolved: hwmon: ltc2991 re-order conditions to fix off by one bug LTC2991TINTCHNR is 4. The st-tempen array has LTC2991MAXCHANNEL 4 elements. Thus if "channel" is equal to LTC2991TINTCHNR then we have read one element beyond the end of th...

Amazon Linux 2 : tomcat (ALASTOMCAT8.5-2024-020)

The version of tomcat installed on the remote host is prior to 8.5.100-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2TOMCAT8.5-2024-020 advisory. Improper Handling of Exceptional Conditions, Uncontrolled Resource Consumption vulnerability in Apache Tomcat. When...

CVE-2024-21806

Improper conditions check in Linux kernel mode driver for some IntelR Ethernet Network Controllers and Adapters E810 Series before version 28.3 may allow an authenticated user to potentially enable denial of service via local access...

PT-2024-26330 · Ibm · Ibm Db2

Name of the Vulnerable Software and Affected Versions: IBM Db2 for Linux, UNIX and Windows includes DB2 Connect Server federated server versions 10.5, 11.1, and 11.5 Description: The issue is a denial of service vulnerability that can be triggered with a specially crafted query under certain...

SAP Permit to Work 信息泄露漏洞

SAP Permit to Work is a systematic solution from SAP, Germany, that provides a secure and efficient way to control and perform operations and maintenance activities in the workplace. An information disclosure vulnerability exists in SAP Permit to Work that originates from allowing an authenticate...

CVE-2024-42253

CVE-2024-42253 – Linux kernel GPIO (pca953x) race The vulnerability is in the pca953x GPIO driver: a race can occur between irq_bus_sync_unlock() and an irq, when a request races against irq_bus_sync_unlock() on i.MX8MP platforms. The fix requires that i2c_lock is held when setting the interrupt ...

DoS (Denial of Service) org.apache.tomcat:tomcat-coyote Dependency in Confluence Data Center and Server

This High severity org.apache.tomcat:tomcat-coyote Dependency vulnerability was introduced in versions 1.0 of Confluence Data Center and Server. This org.apache.tomcat:tomcat-coyote Dependency vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:...

kernel: PM / devfreq: Synchronize devfreq_monitor_[start/stop]

A flaw was found in the Linux kernel resulting from race conditions and a lack of synchronization in handling the delayed work timers in the devfreq component. This issue can lead to inconsistencies and a corruption of the timer list...

ROS-20240725-13

A vulnerability in the NVIDIA GPU Display Driver software driver for Linux is related to privilege management errors. Exploitation of the vulnerability could allow an attacker to disclose protected information and cause a denial of service A vulnerability in the NVIDIA GPU Display Driver for Linu...

PT-2024-27987 · Qualcomm · 315 5G Iot Modem Firmware +210

Name of the Vulnerable Software and Affected Versions: No specific software or affected versions are mentioned in the provided descriptions. Description: A cryptographic issue occurs when a controller receives an LMP start encryption command under unexpected conditions. Recommendations: At the...

CVE-2024-38482

CloudLink, versions 7.1.x and 8.x, contain an Improper check or handling of Exceptional Conditions Vulnerability in Cluster Component. A highly privileged malicious user with remote access could potentially exploit this vulnerability, leading to execute unauthorized actions and retrieve sensitive...

CVE-2024-38482

CloudLink, versions 7.1.x and 8.x, contain an Improper check or handling of Exceptional Conditions Vulnerability in Cluster Component. A highly privileged malicious user with remote access could potentially exploit this vulnerability, leading to execute unauthorized actions and retrieve sensitive...