CVE-2024-0102

NVIDIA CUDA Toolkit for all platforms contains a vulnerability in nvdisasm, where an attacker can cause an out-of-bounds read issue by deceiving a user into reading a malformed ELF file. A successful exploit of this vulnerability might lead to denial of service...

CVE-2024-0102: Out-of-bounds Read

NVIDIA CUDA Toolkit for all platforms contains a vulnerability in nvdisasm, where an attacker can cause an out-of-bounds read issue by deceiving a user into reading a malformed ELF file. A successful exploit of this vulnerability might lead to denial of service...

CVE-2024-42381: Inclusion of Web Functionality from an Untrusted Source

os/linux/elf.rb in Homebrew brew before 4.2.20 uses ldd to load ELF files obtained from untrusted sources, which allows attackers to achieve code execution via an ELF file with a custom .interp section. NOTE: this code execution would occur during an un-sandboxed binary relocation phase, which...

CVE-2024-42381

os/linux/elf.rb in Homebrew brew before 4.2.20 uses ldd to load ELF files obtained from untrusted sources, which allows attackers to achieve code execution via an ELF file with a custom .interp section. NOTE: this code execution would occur during an un-sandboxed binary relocation phase, which...

CVE-2024-42381

os/linux/elf.rb in Homebrew brew before 4.2.20 uses ldd to load ELF files obtained from untrusted sources, which allows attackers to achieve code execution via an ELF file with a custom .interp section. NOTE: this code execution would occur during an un-sandboxed binary relocation phase, which...

CVE-2024-42381

In Homebrew, the Linux-specific file os/linux/elf.rb in brew prior to 4.2.20 uses ldd to load ELF files obtained from untrusted sources, enabling code execution via an ELF file with a custom .interp section during an un-sandboxed binary relocation phase. The tested vulnerable version is 237d1e783...

The vulnerability of the nvdisasm utility in the NVIDIA CUDA Toolkit, a parallel computing software suite for graphics processors, allows a malicious actor to cause a system failure.

The vulnerability of the nvdisasm utility in the NVIDIA CUDA Toolkit for parallel computing on Graphics Processing Units is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow an attacker to cause a system failure using a specially creat...

CVE-2024-21462 Buffer Over-read in TZ Secure OS

Transient DOS while loading the TA ELF file...

CVE-2024-21462

CVE-2024-21462 describes a Transient DoS issue when loading the TA ELF file in Qualcomm closed‑source components (TZ Secure OS). Public sources assign a Local attacker vector with Low complexity and Low privileges required, potentially causing an availability impact described as HIGH. The CVE is ...

CVE-2024-21462 Buffer Over-read in TZ Secure OS

Transient DOS while loading the TA ELF file...

CVE-2024-21462: Buffer Over-read

Transient DOS while loading the TA ELF file...

PT-2024-18885 · Qualcomm · 315 5G Iot Modem Firmware +268

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: A transient Denial of Service DOS occurs while loading the TA ELF file. Recommendations: At the moment, there is no information about a newer version that contains a fix for this issue...

RHEL 8 : gdb (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - binutils: stack-overflow issue in demangletype in rust-demangle.c. CVE-2021-32256 - An illegal memory...

RHEL 6 : binutils (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - binutils: NULL pointer dereference in bfdelffinallink function CVE-2017-7614 - The srecscan function in...

RHEL 5 : binutils (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - binutils: NULL pointer dereference in bfdelffinallink function CVE-2017-7614 - The srecscan function in...

EulerOS Virtualization 3.0.6.0 : gdb (EulerOS-SA-2024-1681)

According to the versions of the gdb packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function...

EulerOS Virtualization 3.0.6.6 : gdb (EulerOS-SA-2024-1648)

According to the versions of the gdb packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in GNU Binutils 2.34. It is a memory leak when process microblaze-dis.c. This one will consume memory on eac...

RHEL 6 : file (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - file: out-of-bounds read via a crafted ELF file CVE-2018-10360 - File before 5.43 has an stack-based buff...

RHEL 7 : elfutils (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - elfutils: elflint.c does not validate the number of sections and segments CVE-2017-7613 - elfutils: an...

NVIDIA CUDA Toolkit < 12.4.1 Multiple Vulnerabilities

The version of NVIDIA CUDA Toolkit installed on the remote host is prior to 12.4.1. It is, therefore affected by multiple vulnerabilities. - NVIDIA CUDA toolkit for all platforms contains a vulnerability in cuobjdump and nvdisasm where an attacker may cause a crash by tricking a user into reading...