CVE-2024-8654

CVE-2024-8654 affects MongoDB Server (v6.0.3) and is caused by accessing a non-initialized region of memory when zero arguments are passed in an internal aggregation stage, leading to unexpected behavior. The vulnerability impact is described with high severity in NVD metrics (CVSS v3.1: CRITICAL...

NewStart CGSL MAIN 6.02 : sip Vulnerability (NS-SA-2024-0063)

The remote NewStart CGSL host, running version MAIN 6.02, has sip packages installed that are affected by a vulnerability: - A flaw was found in Qt. An out-of-bounds read vulnerability was found in QRadialFetchSimd in qt/qtbase/src/gui/painting/qdrawhelperp.h in Qt/Qtbase. While rendering and...

PT-2024-39153

Name of the Vulnerable Software and Affected Versions: MongoDB Server version 6.0.3 Description: The issue is related to MongoDB Server accessing a non-initialized region of memory, leading to unexpected behavior when zero arguments are called in an internal aggregation stage. Recommendations: Fo...

PT-2024-29940 · Dell · Dell Precision Rack

Name of the Vulnerable Software and Affected Versions: Dell Precision Rack, 14G Intel BIOS versions prior to 2.22.2 Description: The issue is related to an Access of Memory Location After End of Buffer vulnerability. A low privileged attacker with local access could potentially exploit this...

Fedora: Security Advisory (FEDORA-2024-39b249a59c)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Advisory (SUSE-SU-2024:3112-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security Bulletin: Vulnerability in Eclipse Openj9 affects watsonx.data

Summary Eclipse Openj9 could allow a remote attacker to bypass security restrictions, where memory could be accessed or modified. This exploit can affect watsonx.data. Vulnerability Details CVEID:CVE-2022-3676 DESCRIPTION: Eclipse Openj9 could allow a remote attacker to bypass security...

ROS-20240905-04

Vulnerability of the dosetvfinfo function in the net/core/rtnetlink.c module of the TCP/IP protocol stack implementation of the Linux kernel of Linux operating system is related to reading memory outside the allocated buffer. Exploitation exploitation of the vulnerability may allow an intruder to...

PT-2024-29425 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to kernel drivers peeking into memory, referred to as PhysMeme. There is no detailed information about the issue, its impact, or th...

DEBIAN-CVE-2024-44984

In the Linux kernel, the following vulnerability has been resolved: bnxten: Fix double DMA unmapping for XDPREDIRECT Remove the dmaunmappageattrs call in the driver's XDPREDIRECT code path. This should have been removed when we let the page pool handle the DMA mapping. This bug causes the warning...

DEBIAN-CVE-2024-44976

In the Linux kernel, the following vulnerability has been resolved: ata: patamacio: Fix DMA table overflow Kolbjørn and Jonáš reported that their 32-bit PowerMacs were crashing in pata-macio since commit 09fe2bfa6b83 "ata: patamacio: Fix maxsegmentsize with PAGESIZE == 64K". For example: kernel B...

kernel: nvme-rdma: destroy cm id before destroy qp to avoid use after free

A vulnerability was found in the Linux kernel's nvme-rdma driver where the driver failed to destroy a component cmid before another component qp was destroyed. This issue occurs when the kernel incorrectly manages memory during RDMA, leading to a potential use-after-free...

kernel: xfs: add bounds checking to xlog_recover_process_data

A vulnerability has been identified within the Linux kernel's xlogrecoverprocessdata function. Specifically, the function lacks proper bounds checking on the space allocated for the fixed members of the xlogopheader structure during log record processing. This omission can lead to an out-of-bound...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel, which stems from a DMA table overflow vulnerability in the ata: patamacio component...

AZL-78570 CVE-2024-6119 affecting package openssl-fips-provider 3.1.2-2

Issue summary: Applications performing certificate name checks e.g., TLS clients checking server certificates may attempt to read an invalid memory address resulting in abnormal termination of the application process. Impact summary: Abnormal termination of an application can a cause a denial of...

CVE-2024-6119

Issue summary: Applications performing certificate name checks e.g., TLS clients checking server certificates may attempt to read an invalid memory address resulting in abnormal termination of the application process. Impact summary: Abnormal termination of an application can a cause a denial of...

AZL-48798 CVE-2024-6119 affecting package hvloader for versions less than 1.0.1-5

Issue summary: Applications performing certificate name checks e.g., TLS clients checking server certificates may attempt to read an invalid memory address resulting in abnormal termination of the application process. Impact summary: Abnormal termination of an application can a cause a denial of...

AZL-48535 CVE-2024-6119 affecting package openssl for versions less than 3.3.2-1

Issue summary: Applications performing certificate name checks e.g., TLS clients checking server certificates may attempt to read an invalid memory address resulting in abnormal termination of the application process. Impact summary: Abnormal termination of an application can a cause a denial of...

kernel: r8169: Fix possible ring buffer corruption on fragmented Tx packets.

in linux kernel r8169, when transmitting small fragmented packets, invalid entries were inserted into the transmit ring buffer, leading to calls to dmaunmapsingle with a null address...

SUSE-SU-2024:3112-1 Security update for MozillaThunderbird

This update for MozillaThunderbird fixes the following issues: - Mozilla Thunderbird 115.14 fixed: When using an external installation of GnuPG, Thunderbird occassionally sent/received corrupted messages fixed: Users of external GnuPG were unable to decrypt incorrectly encoded messages bmo1906903...