The vulnerability of the Consul and Consul Enterprise service configuration tool lies in the premature release of resources during the expected lifespan of the service. This allows a perpetrator to trigger a service failure.

The vulnerability of the Consul and Consul Enterprise service configuration tool is related to an error that allows a one-node cluster with a service named the same as the local service to potentially compromise the Consul system. Exploiting this vulnerability could enable a malicious actor to...

On the Cyber Safety Review Board

When an airplane crashes, impartial investigatory bodies leap into action, empowered by law to unearth what happened and why. But there is no such empowered and impartial body to investigate CrowdStrikes faulty update that recently unfolded, ensnarling banks, airlines, and emergency services to t...

Expected Behavior Violation

Overview Affected versions of this package are vulnerable to Expected Behavior Violation via the HPackParser function when the gRPC client is communicating with an HTTP/2 proxy, allowing the attacker to poison the HPACK table. By manipulating the header encoding and poisoning the HPACK table...

Fedora 40 : bind / bind-dyndb-ldap (2024-8af1780fdf)

The remote Fedora 40 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2024-8af1780fdf advisory. Update to BIND 9.18.28 Security Fixes - A malicious DNS client that sent many queries over TCP but never read the responses could cause a server to...

The vulnerability of the Safe Browsing service in Google Chrome and Microsoft Edge browsers allows a malicious actor to trigger a service failure.

The vulnerability of Google Chrome and Microsoft Edge browsers’ Safe Browsing service is related to insufficient validation of entered data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

PT-2024-32156

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a qgroup reserve leak in the cow file range function of the btrfs filesystem. In the buffered write path, the dirty page owns the qgroup reserve until it creates ...

The vulnerability of the Safe Browsing service in Google Chrome and Microsoft Edge browsers allows a hacker to trigger a service failure.

The vulnerability of Google Chrome and Microsoft Edge browsers’ Safe Browsing service is related to insufficient validation of entered data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of embedded software developed by Qualcomm, related to operations that occur outside of the buffer in memory, allows attackers to disclose protected information or cause system failures.

The vulnerability of embedded Qualcomm software is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to disclose protected information or cause system failures...

Virtuozzo Hybrid Server 7.5 Update 6 Hotfix 3 (7.5.6-126)

The Hotfix 3 for Virtuozzo Hybrid Server 7.5 Update 6 provides stability and usability bug fixes. Vulnerability id: PSBM-156725 Some virtual machines failed to start, and ‘libvirtd.service’ hung after the Virtuozzo Hybrid Server 7.5 Update 6 Hotfix 2 upgrade. Vulnerability id: PSBM-157279 Default...

GHSA-3JCG-VX7F-J6QF The fuels-ts typescript SDK has no awareness of to-be-spent transactions

Brief/Intro The typescript SDK has no awareness of to-be-spent transactions causing some transactions to fail or silently get pruned as they are funded with already used UTXOs. The Typescript SDK provides the fund function which retrieves UTXOs, which belong to the owner and can be used to fund t...

CVE-2024-41945

fuels-ts is a library for interacting with Fuel v2. The typescript SDK has no awareness of to-be-spent transactions causing some transactions to fail or silently get pruned as they are funded with already used UTXOs. The problem occurs, because the fund function in...

AZL-47403 CVE-2024-42156 affecting package kernel for versions less than 6.6.64.2-9

In the Linux kernel, the following vulnerability has been resolved: s390/pkey: Wipe copies of clear-key structures on failure Wipe all sensitive data from stack for all IOCTLs, which convert a clear-key into a protected- or secure-key...

The vulnerability of the JOSE component in Apache CXF web services allows a attacker to cause a service failure.

The vulnerability of the JOSE component in Apache CXF web services is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the github.com/containers/image library, related to improper checking of integrity values, allows attackers to trigger service failures, perform path traversal attacks, or carry out other malicious actions.

The vulnerability of the github.com/containers/image library is related to improper checking of integrity values. Exploiting this vulnerability could allow a remote attacker to cause service failures, perform path traversal attacks, or exert other types of influence...

The vulnerability of Zoom’s video conferencing software relates to operations that go beyond the buffer limits in memory, allowing attackers to trigger a service failure.

The vulnerability of Zoom’s video conferencing software relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Vulnerability of the .NET software platform and Microsoft Visual Studio, a development environment for software applications. This vulnerability arises due to insufficient testing of input data, allowing attackers to trigger system failures.

The vulnerability of the .NET software platform and the Microsoft Visual Studio development environment exists due to insufficient testing of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the RESTEasy Reactive Java framework component in Quarkus allows attackers to trigger a service failure.

The vulnerability of the RESTEasy Reactive Java framework in Quarkus is related to improper permission storage. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

The vulnerability of Zoom’s video conferencing software lies in its uncontrolled search path, which allows attackers to trigger service failures.

The vulnerability of Zoom, a video conferencing software, is related to an uncontrolled element in the search process. Exploiting this vulnerability can allow attackers to cause service failures...

The vulnerability of the SINEMA Remote Connect client web interface, related to security mechanism failures, allows attackers to view and edit protected information regarding VxLAN network configurations.

The vulnerability of the SINEMA Remote Connect client web interface is related to security mechanism errors. Exploiting this vulnerability allows an attacker to remotely view and edit protected information regarding VxLAN network configurations without proper access rights...

The vulnerability of the Packet Forwarding Engine (PFE) mechanism in Juniper Networks’ Junos OS operating system allows a attacker to cause a service failure. This vulnerability affects devices in the ACX5448 and ACX710 series.

The vulnerability of the Packet Forwarding Engine PFE mechanism in Juniper Networks’ Junos OS on ACX5448 and ACX710 series devices is related to synchronization errors. Exploiting this vulnerability can allow a malicious actor to cause service failures...