RHEL 6 : exiv2 (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - exiv2: integer overflow in the LoaderExifJpeg class in preview.cpp CVE-2018-12265 - exiv2: Heap-based...

RLSA-2024:2549 Moderate: skopeo security and bug fix update

The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create and verify files. Security Fixes: golang-protobuf: encoding/protojson, internal/encoding/json: infinite loop in protojson.Unmarshal when unmarshaling certain forms...

buildah bug fix update

An update is available for buildah. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The buildah package provides a tool for facilitating building OCI container...

RLSA-2024:2264 Important: edk2 security update

EDK Embedded Development Kit is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU and KVM. Security Fixes: edk2: Buffer overflow when handling Server ID option from a DHCPv6 proxy Advertise message CVE-2023-45235 EDK2: heap buffer...

edk2 security update

An update is available for edk2. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list EDK Embedded Development Kit is a project to enable UEFI support for Virtual...

CVE-2024-30172

An issue was discovered in Bouncy Castle Java Cryptography APIs before 1.78. An Ed25519 verification code infinite loop can occur via a crafted signature and public key...

CVE-2024-30172

An issue exists in the Bouncy Castle Java Cryptography APIs before version 1.78 (starting in 1.73), where a crafted signature and public key can trigger an infinite loop during Ed25519 verification. This vulnerability can lead to a Denial of Service (DoS) , as evidenced by several high-severity f...

CVE-2024-30172

An issue was discovered in Bouncy Castle Java Cryptography APIs before 1.78. An Ed25519 verification code infinite loop can occur via a crafted signature and public key...

Security Bulletin: TPF Toolkit is affected by vulnerabilities in the Eclipse IDE and Apache Commons Compress

Summary The org.eclipse.core.runtime component is used by TPF Toolkit as part of the basic platform infrastructure CVE-2023-4218. Additionally, the Apache commons-compress package is used by TPF Toolkit web applications services as part of the code coverage feature CVE-2024-26308, CVE-2024-25710...

CVE-2024-24788

A malformed DNS message in response to a query can cause the Lookup functions to get stuck in an infinite loop...

CVE-2024-24788

A malformed DNS message in response to a query can cause the Lookup functions to get stuck in an infinite loop...

AZL-40375 CVE-2024-24788 affecting package golang for versions less than 1.22.3-1

A malformed DNS message in response to a query can cause the Lookup functions to get stuck in an infinite loop...

AZL-40436 CVE-2024-24788 affecting package msft-golang for versions less than 1.22.3

A malformed DNS message in response to a query can cause the Lookup functions to get stuck in an infinite loop...

AZL-40517 CVE-2024-24788 affecting package golang for versions less than 1.22.3

A malformed DNS message in response to a query can cause the Lookup functions to get stuck in an infinite loop...

AZL-79020 CVE-2024-24788 affecting package golang 1.25.7-1

A malformed DNS message in response to a query can cause the Lookup functions to get stuck in an infinite loop...

AZL-98589 CVE-2024-24788 affecting package golang 1.27.1-1

A malformed DNS message in response to a query can cause the Lookup functions to get stuck in an infinite loop...

CVE-2024-24788

A malformed DNS message in response to a query can cause the Lookup functions to get stuck in an infinite loop...

CVE-2024-24788

A malformed DNS message in response to a query can cause the Lookup functions to get stuck in an infinite loop...

CVE-2024-24788 Malformed DNS message can cause infinite loop in net

A malformed DNS message in response to a query can cause the Lookup functions to get stuck in an infinite loop...

CVE-2024-24788

A malformed DNS message in response to a query can cause the Lookup functions to get stuck in an infinite loop , potentially leading to a Denial of Service. This vulnerability is identified with CWE-835 (Loop with Unreachable Exit Condition). While specific software versions are not detailed in t...