CVE-2024-4767 vulnerabilities

Vulnerabilities for packages: firefox-esr...

CVE-2024-4367 vulnerabilities

Vulnerabilities for packages: firefox-esr...

UBUNTU-CVE-2024-4777

Memory safety bugs present in Firefox 125, Firefox ESR 115.10, and Thunderbird 115.10. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox 126, Firefox ESR...

May 14, 2024—KB5037800 (Monthly Rollup)

None None...

May 14, 2024—KB5037823 (Monthly Rollup)

None None...

May 14, 2024—KB5037778 (Monthly Rollup)

None None...

May 14, 2024-Security and Quality Rollup for .NET Framework 2.0, 3.0, 3.5 SP1, 4.6.2 for Windows Server 2008 SP2 (KB5038291)

May 14, 2024-Security and Quality Rollup for .NET Framework 2.0, 3.0, 3.5 SP1, 4.6.2 for Windows Server 2008 SP2 KB5038291 Applies to: Microsoft .NET Framework 2.0 Microsoft .NET Framework 3.0 Microsoft .NET Framework 3.5 SP1 Microsoft .NET Framework 4.6.2 REMINDER Windows Server 2008 R2 SP1 have...

May 14, 2024-Security and Quality Rollup for .NET Framework 3.5.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Server 2008 R2 SP1 (KB5038288)

May 14, 2024-Security and Quality Rollup for .NET Framework 3.5.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Server 2008 R2 SP1 KB5038288 Applies to: Microsoft .NET Framework 3.5.1 Microsoft .NET Framework 4.6.2 Microsoft .NET Framework 4.7 Microsoft .NET Framework 4.7.1 Microsoft .NET Framework...

OESA-2024-1563 firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. Security Fixes: In certain circumstances, the MCallGetProperty opcode can be emitted with unmet assumptions resulting in an exploitable use-after-free condition. This vulnerability affec...

OESA-2024-1562 firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. Security Fixes: In certain circumstances, the MCallGetProperty opcode can be emitted with unmet assumptions resulting in an exploitable use-after-free condition. This vulnerability affec...

@net7/boilerplate-arianna (>=5.6.0, <=5.6.16), myrta-ui (>=17.0.56, <=17.0.57) +1 more potentially affected by CVE-2024-4367 via ngx-extended-pdf-viewer (>=19.2.0, <=19.7.1)

ngx-extended-pdf-viewer NPM version =19.2.0, =5.6.0, =17.0.56, =18.0.0-next.0, =18.0.0-next.3 Source cves: CVE-2024-4367 Source advisory: SNYK:JS-NGXEXTENDEDPDFVIEWER-11790310...

[SECURITY] Debian 10 LTS will reach end-of-life on June 30th, 2024

Dear Debian LTS users, This is a gentle reminder that Debian 10 "buster" will reach end of support as the LTS release on June 30, 2024. Users are encouraged to upgrade to Debian 11 "bullseye". Starting in July, Debian will not provide further security updates for Debian 10. A subset of buster...

CVE-2023-50223

Inductive Automation Ignition ExtendedDocumentCodec Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. Authentication is required to exploit this...

jp.ikedam.jenkins.plugins:extensible-choice-parameter (>=1.4.0, <=1.8.0), org.jenkins-ci.plugins:extended-choice-parameter (0.65) +4 more potentially affected by CVE-2024-34144 via org.jenkins-ci.plugins:script-security (1.18.1)

org.jenkins-ci.plugins:script-security MAVEN version 1.18.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - jp.ikedam.jenkins.plugins:extensible-choice-parameter =1.4.0, =1.2.3, =1.3.4, =1.9...

org.jenkins-ci.plugins:extended-choice-parameter (>=0.68, <=0.76) potentially affected by CVE-2024-34145 via org.jenkins-ci.plugins:script-security (1.19)

org.jenkins-ci.plugins:script-security MAVEN version 1.19 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - org.jenkins-ci.plugins:extended-choice-parameter =0.68, =0.76 Source cves:...

org.jenkins-ci.plugins:extended-choice-parameter (>=0.68, <=0.76) potentially affected by CVE-2024-34144 via org.jenkins-ci.plugins:script-security (1.19)

org.jenkins-ci.plugins:script-security MAVEN version 1.19 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - org.jenkins-ci.plugins:extended-choice-parameter =0.68, =0.76 Source cves:...

kernel: ext4: init quota for 'old.inode' in 'ext4_rename'

In the Linux kernel, the following vulnerability has been resolved: ext4: init quota for 'old.inode' in 'ext4rename' Syzbot found the following issue: ext4parseparam: swantextraisize=128 ext4inodeinfoinit: swantextraisize=32 ext4rename: old.inode=ffff88823869a2c8 old.dir=ffff888238699828...

kernel: Linux kernel (ext4): Denial of Service due to inode leak via failed extended attribute creation

A flaw was found in the Linux kernel's ext4 filesystem. A local user can exploit this vulnerability by performing a setxattr operation with an injected fault, specifically when ext4markinodedirty fails within the ext4xattrinodecreate function. This can lead to an inode leak, resulting in filesyst...

kernel: ext4: add bounds checking in get_max_inline_xattr_value_size()

In the Linux kernel, the following vulnerability has been resolved: ext4: add bounds checking in getmaxinlinexattrvaluesize Normally the extended attributes in the inode body would have been checked when the inode is first opened, but if someone is writing to the block device while the file syste...

kernel: bpf: Make bpf_refcount_acquire fallible for non-owning refs

A memory-safety flaw was found in the Linux kernel extended Berkeley Packet Filter eBPF subsystem in the way reference counts are acquired for objects after a failed tree insertion. When a program attempts to acquire a reference to a node that may already have been released, the reference count...