SUSE SLES15 Security Update : kernel (Live Patch 29 for SLE 15 SP4) (SUSE-SU-2024:4268-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2024:4268-1 advisory. This update for the Linux Kernel 5.14.21-15040024128 fixes several issues. The following security issue was fixed: - CVE-2024-43861: Fix memory leak fo...

The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to inefficient algorithmic complexity, allows attackers to trigger service interruptions.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to its inefficient algorithmic complexity. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures using a specially created file called...

The vulnerability of the USER command processor in TP-Link VN020 F3v(T) wireless routers allows a hacker to cause a service failure.

The vulnerability of the USER command handler in TP-Link VN020 F3vT Wi-Fi routers lies in the execution of operations outside the buffer in memory. Exploiting this vulnerability allows an attacker to cause service failures remotely...

Security update for the Linux Kernel (Live Patch 27 for SLE 15 SP4)

This update for the Linux Kernel 5.14.21-15040024122 fixes several issues. The following security issues were fixed: CVE-2024-36904: tcp: Use refcountincnotzero in tcptwskunique bsc1225733. CVE-2024-43861: Fix memory leak for not ip packets bsc1229553. CVE-2021-47598: schcake: do not call...

SUSE-SU-2024:4275-1 Security update for the Linux Kernel (Live Patch 27 for SLE 15 SP4)

This update for the Linux Kernel 5.14.21-15040024122 fixes several issues. The following security issues were fixed: - CVE-2024-36904: tcp: Use refcountincnotzero in tcptwskunique bsc1225733. - CVE-2024-43861: Fix memory leak for not ip packets bsc1229553. - CVE-2021-47598: schcake: do not call...

Security update for the Linux Kernel (Live Patch 29 for SLE 15 SP4)

This update for the Linux Kernel 5.14.21-15040024128 fixes several issues. The following security issue was fixed: CVE-2024-43861: Fix memory leak for not ip packets bsc1229553. Fix intermittent nfs mount failures, may be due to SUNRPC over UDP. bsc1231353 Patch Instructions: To install this SUSE...

SUSE-SU-2024:4268-1 Security update for the Linux Kernel (Live Patch 29 for SLE 15 SP4)

This update for the Linux Kernel 5.14.21-15040024128 fixes several issues. The following security issue was fixed: - CVE-2024-43861: Fix memory leak for not ip packets bsc1229553. - Fix intermittent nfs mount failures, may be due to SUNRPC over UDP. bsc1231353...

SUSE-SU-2024:4266-1 Security update for the Linux Kernel (Live Patch 24 for SLE 15 SP4)

This update for the Linux Kernel 5.14.21-15040024111 fixes several issues. The following security issues were fixed: - CVE-2024-36904: tcp: Use refcountincnotzero in tcptwskunique bsc1225733. - CVE-2024-43861: Fix memory leak for not ip packets bsc1229553. - CVE-2024-35905: Fixed int overflow for...

SUSE-SU-2024:4262-1 Security update for the Linux Kernel (Live Patch 28 for SLE 15 SP4)

This update for the Linux Kernel 5.14.21-15040024125 fixes several issues. The following security issues were fixed: - CVE-2024-43861: Fix memory leak for not ip packets bsc1229553. - CVE-2021-47598: schcake: do not call cakedestroy from cakeinit bsc1227471. - CVE-2024-40954: net: do not leave a...

SUSE-SU-2024:4236-1 Security update for the Linux Kernel (Live Patch 26 for SLE 15 SP4)

This update for the Linux Kernel 5.14.21-15040024119 fixes several issues. The following security issues were fixed: - CVE-2024-36904: tcp: Use refcountincnotzero in tcptwskunique bsc1225733. - CVE-2024-43861: Fix memory leak for not ip packets bsc1229553. - CVE-2024-35905: Fixed int overflow for...

The vulnerability of the OpenDMARC authentication and email analysis software lies in the handling of the NULL pointer, which allows a perpetrator to trigger a service failure.

The vulnerability of the OpenDMARC authentication and email analysis software relates to the use of the NULL pointer. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of cloud-based software for creating and using Nextcloud Server and Nextcloud Enterprise Server lies in the lack of security measures for website structures, allowing attackers to trigger service failures.

The vulnerability of cloud-based software for creating and using Nextcloud Server and Nextcloud Enterprise Server is related to the lack of protective measures for the website structure. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

Vulnerability of TCP components of Linux operating system’s kernel, allowing attackers to cause service failures

The vulnerability of TCP components in Linux operating systems is related to the operation of data out of the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...

The vulnerabilities of the s390/qeth component of Linux operating system kernels, which allow a hacker to trigger a service failure

The vulnerability of the s390/qeth component of Linux operating system kernels is related to resource management errors. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the Ethernet connection extension module of Mitsubishi Electric India GC-ENET-COM, related to the improper operation of the signal processor, allows a perpetrator to trigger a service failure.

The vulnerability of the Mitsubishi Electric India GC-ENET-COM Ethernet connection device is related to improper operation of the signal processor. Exploiting this vulnerability allows attackers to send specially crafted packets and trigger service failures...

The vulnerability of DRM/AMD components in Linux operating systems allows a hacker to trigger a service failure.

The vulnerability of DRM/AMDKFD components in Linux kernel relates to read misses beyond the boundary. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the ldap_escape() function in the PHP programming language allows a hacker to trigger a service failure.

The vulnerability of the ldapescape function in the PHP programming language is related to the escape operation going beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

The vulnerability of DRM/AMD components in Linux operating systems allows a hacker to trigger a service failure.

The vulnerability of DRM/AMDKFD components in Linux kernel relates to read misses beyond the boundary. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the deployment and model management software for deep learning in the Intel Distribution of OpenVINO Model Server lies in insufficient validation of input data, allowing attackers to trigger service failures.

The vulnerability of the deployment and model management software for deep learning in the Intel Distribution of OpenVINO Model Server is related to insufficient testing of input data. Exploiting this vulnerability can allow attackers to cause service failures...

Fedora 40 : php (2024-e0d390d35b)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-e0d390d35b advisory. PHP version 8.3.14 21 Nov 2024 CLI: Fixed bug GH-16373 Shebang is not skipped for router script in cli-server started through shebang. ilutov Fixed...