SUSE CVE-2024-27434

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: don't set the MFP flag for the GTK The firmware doesn't need the MFP flag for the GTK, it can even make the firmware crash. in case the AP is configured with: group cipher TKIP and MFPC. We would send the GTK...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the fact that a guest can access an invalid physical address with an invalid gfn...

PT-2024-11258 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue concerns a fix for the skb length check in the ieee80211 scan rx function within the mac80211 module. It replaces hard-coded compile-time constants for header length checks...

CVE-2021-47428: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: powerpc/64s: fix program check interrupt emergency stack path Emergency stack path was jumping into a 3: label inside the GENCOMMONBODY macro for the normal path after it had finished, rather than jumping over it. By a small...

UBUNTU-CVE-2024-35987

In the Linux kernel, the following vulnerability has been resolved: riscv: Fix loading 64-bit NOMMU kernels past the start of RAM commit 3335068f8721 "riscv: Use PUD/P4D/PGD pages for the linear mapping" added logic to allow using RAM below the kernel load address. However, this does not work for...

UBUNTU-CVE-2024-27434

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: don't set the MFP flag for the GTK The firmware doesn't need the MFP flag for the GTK, it can even make the firmware crash. in case the AP is configured with: group cipher TKIP and MFPC. We would send the GTK...

mod_http2: reset requests exhaust memory (incomplete fix of CVE-2023-44487)

A flaw was found in modhttp2. When a HTTP/2 stream is reset RST frame by a client, there is a time window were the request's memory resources were not reclaimed immediately. Instead, de-allocation was deferred to connection close. A client could send new requests and resets, keeping the connectio...

PT-2024-25815

Name of the Vulnerable Software and Affected Versions TYPO3 versions prior to 9.5.48 ELTS TYPO3 versions prior to 10.4.45 ELTS TYPO3 versions prior to 11.5.37 LTS TYPO3 versions prior to 12.4.15 LTS TYPO3 versions prior to 13.1.1 Description The ShowImageController eID tx cms showpic lacks a...

CVE-2024-21477 Buffer Over-read in WLAN Firmware

Transient DOS while parsing a protected 802.11az Fine Time Measurement FTM frame...

CVE-2024-21477 Buffer Over-read in WLAN Firmware

Transient DOS while parsing a protected 802.11az Fine Time Measurement FTM frame...

CVE-2024-21477

CVE-2024-21477 is linked to Qualcomm WLAN firmware with a Transient DoS issue that occurs while parsing a protected 802.11az FTM frame. Connected sources describe a concrete technical detail: a Buffer Over-read in WLAN firmware related to FTM frame parsing. The vulnerability is associated with Qu...

PT-2024-18897 · Qualcomm · Qualcomm Snapdragon

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon affected versions not specified Description: The issue is related to a Transient Denial of Service DOS that occurs while parsing a protected 802.11az Fine Time Measurement FTM frame. This affects the parsing of specific...

CVE-2024-21477: Buffer Over-read

Transient DOS while parsing a protected 802.11az Fine Time Measurement FTM frame...

Important: nodejs

Issue Overview: An attacker can make the Node.js HTTP/2 server completely unavailable by sending a small amount of HTTP/2 frames packets with a few HTTP/2 frames inside. It is possible to leave some data in nghttp2 memory after reset when headers with HTTP/2 CONTINUATION frame are sent to the...

CVE-2024-32984

Yamux is a stream multiplexer over reliable, ordered connections such as TCP/IP. The Rust implementation of the Yamux stream multiplexer uses a vector for pending frames. This vector is not bounded in length. Every time the Yamux protocol requires sending of a new frame, this frame gets appended ...

nghttp2:nghttp2_fuzzer_frames: Use-of-uninitialized-value in lookup_token

Project: https://github.com/nghttp2/nghttp2.git Detailed Report: https://oss-fuzz.com/testcase?key=4582323763871744 Project: nghttp2 Fuzzing Engine: libFuzzer Fuzz Target: nghttp2fuzzerframes Job Type: libfuzzermsannghttp2 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

DEBIAN-CVE-2024-26947

In the Linux kernel, the following vulnerability has been resolved: ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses Since commit a4d5613c4dc6 "arm: extend pfnvalid to take into account freed memory map alignment" changes the semantics of pfnvalid to check presence of t...

PT-2024-25032 · Yamux · Yamux

Name of the Vulnerable Software and Affected Versions: Yamux affected versions not specified Description: Yamux is a stream multiplexer over reliable, ordered connections such as TCP/IP. The Rust implementation of the Yamux stream multiplexer uses a vector for pending frames, which is not bounded...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel, which stems from a security flaw in XDPupdateframefrombuff...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from exceeding the maximum value of a stack frame...