kernel: irqchip/gic-v3-its: Prevent double free on error

In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v3-its: Prevent double free on error The Linux kernel CVE team has assigned CVE-2024-35847 to this issue. Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024051738-CVE-2024-35847-7e4b@gregkh/T...

The vulnerability of the ITS Dissector component of the Wireshark computer network traffic analyzer allows a hacker to cause a service failure.

The vulnerability of the ITS Dissector traffic analyzer component in Wireshark is related to the absence of initialization for the buffer. Exploiting this vulnerability can allow attackers to cause service failures...

SUSE CVE-2024-9780

ITS dissector crash in Wireshark 4.4.0 allows denial of service via packet injection or crafted capture file...

CVE-2024-9780

ITS dissector crash in Wireshark 4.4.0 allows denial of service via packet injection or crafted capture file...

CVE-2024-9780

ITS dissector crash in Wireshark 4.4.0 allows denial of service via packet injection or crafted capture file...

CVE-2024-9780

ITS dissector crash in Wireshark 4.4.0 allows denial of service via packet injection or crafted capture file...

CVE-2024-9780

ITS dissector crash in Wireshark 4.4.0 allows denial of service via packet injection or crafted capture file...

DEBIAN-CVE-2024-9780

ITS dissector crash in Wireshark 4.4.0 allows denial of service via packet injection or crafted capture file...

UBUNTU-CVE-2024-9780

ITS dissector crash in Wireshark 4.4.0 allows denial of service via packet injection or crafted capture file...

CVE-2024-9780 Missing Initialization of a Variable in Wireshark

ITS dissector crash in Wireshark 4.4.0 allows denial of service via packet injection or crafted capture file...

Wireshark 安全漏洞

Wireshark formerly known as Ethereal is a suite of network packet analysis software from the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis. A security vulnerability exists in Wireshark version 4.4.0, which stems from a crash in...

KLA73942 DoS vulnerability in Wireshark

Denial of service vulnerability was found in Wireshark. Malicious users can exploit this vulnerability to cause denial of service. Original advisories wnpa-sec-2024-12 · ITS dissector crash Exploitation Public exploits exist for this vulnerability. Related products Wireshark CVE list CVE-2024-978...

PT-2024-7626

Name of the Vulnerable Software and Affected Versions Wireshark version 4.4.0 Description The issue is related to a crash in the ITS dissector component of Wireshark, which can be triggered by packet injection or a crafted capture file, leading to a denial of service. This is due to a lack of...

Wireshark 4.4.x < 4.4.1 Multiple Vulnerabilities (macOS)

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 4.4.1. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-4.4.1 advisory. - ITS dissector crash in Wireshark 4.4.0 allows denial of service via packet injection or crafted capture...

Wireshark 4.4.x < 4.4.1 Multiple Vulnerabilities

The version of Wireshark installed on the remote Windows host is prior to 4.4.1. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-4.4.1 advisory. - ITS dissector crash in Wireshark 4.4.0 allows denial of service via packet injection or crafted capture file...

Citrix Workspace App for Windows Multiple Vulnerabilities (CTX691485)

The version of Citrix Workspace installed on the remote host is prior 2402 LTSR CU1 or 2405. It is, therefore, affected by multiple vulnerabilities: - Local privilege escalation allows a low-privileged user to gain SYSTEM privileges Improper Control of a Resource Through its Lifetime CVE-2024-788...

Oracle Linux 8 : kernel (ELSA-2024-5101)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-5101 advisory. - ionic: fix use after netifnapidel CKI Backport Bot RHEL-47624 CVE-2024-39502 - ionic: clean interrupt before enabling queue to avoid credit race CKI...

kernel: irqchip/gic-v3-its: Prevent double free on error

In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v3-its: Prevent double free on error The Linux kernel CVE team has assigned CVE-2024-35847 to this issue. Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024051738-CVE-2024-35847-7e4b@gregkh/T...

kernel: kvm: Avoid potential UAF in LPI translation cache

A flaw was found in the Linux kernel pertaining to a potential use-after-free UAF scenario in a system involving Logical Partitioning Interrupts LPI translation cache operations. Specifically, the issue arises when a cache hit occurs concurrently with an operation that invalidates the cache, such...

CVE-2024-32849

Trend Micro Security 17.x Consumer is vulnerable to a Privilege Escalation vulnerability that could allow a local attacker to unintentionally delete privileged Trend Micro files including its own...