PT-2024-7332 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.10.0 Description: The issue is related to the ext4 file system in the Linux kernel, specifically with the function ext4 ioctl getlabel in the fs/ext4/ioctl.c module. It involves improper memory access beyond t...

The vulnerability of the av_samples_set_silence component (libavutil/samplefmt.c) in the FFmpeg multimedia library allows a attacker to disclose protected information.

The vulnerability of the avsamplessetsilence component libavutil/samplefmt.c in the FFmpeg multimedia library is related to the execution of operations outside of the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to disclose protected information...

ROS-20240704-04

Vulnerability of the OpenSSL cryptographic library is related to a call of the OpenSSL API function SSLfreebuffers function, resulting in access to previously freed memory. Exploitation of the vulnerability could Allow an attacker acting remotely to cause a denial of service...

CBL Mariner 2.0 Security Update: kata-containers (CVE-2023-41051)

The version of kata-containers installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-41051 advisory. - In a typical Virtual Machine Monitor VMM there are several components, such as boot loader, virtual...

Mageia: Security Advisory (MGASA-2024-0246)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Updated gdb packages fix security vulnerabilities

An illegal memory access flaw was found in the binutils package. Parsing an ELF file containing corrupt symbol version information may result in a denial of service. This issue is the result of an incomplete fix for CVE-2020-16599. CVE-2022-4285 A potential heap based buffer overflow was found in...

MGASA-2024-0246 Updated gdb packages fix security vulnerabilities

An illegal memory access flaw was found in the binutils package. Parsing an ELF file containing corrupt symbol version information may result in a denial of service. This issue is the result of an incomplete fix for CVE-2020-16599. CVE-2022-4285 A potential heap based buffer overflow was found in...

CVE-2024-0153

Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Arm Ltd Valhall GPU Firmware, Arm Ltd Arm 5th Gen GPU Architecture Firmware allows a local non-privileged user to make improper GPU processing operations to access a limited amount outside of buffer bounds. I...

PT-2024-40912 · Softwarex +1 · Softwarex +1

Name of the Vulnerable Software and Affected Versions: SoftwareX versions prior to 0.9.7 SoftwareX versions prior to 0.10.3 Description: The issue arises from unsafe memory accesses due to the assumption that reprpacked guarantees a specific field order in structs. However, the Rust specification...

PT-2024-40913 · Softwarex +1 · Softwarex +1

Name of the Vulnerable Software and Affected Versions: SoftwareX versions prior to 0.9.7 SoftwareX versions prior to 0.10.4 Description: The issue arises from unsafe memory accesses due to the assumption that reprpacked guarantees a specific field order in structs. However, the Rust specification...

PT-2024-29202

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the Linux kernel, where a vulnerability has been resolved by adding sanity checks for xfs dir2 data unused and xfs dir2 data entry to prevent accessing memory...

ARM Valhall GPU Security Vulnerability

The ARM Valhall GPU is a specialized graphics core processor from ARM UK. A security vulnerability exists in the ARM Valhall GPU that stems from the fact that a local, unprivileged user can perform improper GPU processing operations to access limited space outside of buffer boundaries. If these...

An issue was discovered in the nalgebra crate before 0.27.1 for Rust. It allows out-of-bounds memory access because it does not ensure that the number of elements is equal to the product of the row count and column count.

...

RDMA/mlx5: Fix fortify source warning while accessing Eth segment

...

The vulnerability of the e1000e component of the QEMU server, which allows a hacker to trigger a service failure

The vulnerability of the e1000e component of the QEMU server is related to repeated DMA input. Exploiting this vulnerability can allow an attacker to cause a system failure...

The vulnerability of the NVIDIA GPU Display Driver software driver allows a hacker to execute arbitrary code, increase their privileges, or disclose sensitive information.

The vulnerability of the NVIDIA GPU Display Driver software driver is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code, gain elevated privileges, or disclose sensitive information...

Mageia: Security Advisory (MGASA-2024-0233)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MGASA-2024-0233 Updated chromium-browser-stable packages fix security vulnerabilities

High CVE-2024-6100: Type Confusion in V8. Reported by Seunghyun Lee @0x10n participating in SSD Secure Disclosure's TyphoonPWN 2024 on 2024-06-04 High CVE-2024-6101: Inappropriate implementation in WebAssembly. Reported by @ginggilBesel on 2024-05-31 High CVE-2024-6102: Out of bounds memory acces...

Google Chrome has an out-of-bounds memory access vulnerability

Chrome is a web browser from Google that utilizes the Blink rendering engine to provide a fast and secure browsing experience. Chrome supports multiple platforms, including Windows, Mac OS, and Linux, and allows users to access a variety of websites and browse a wide range of content through...

SUSE CVE-2022-48739

In the Linux kernel, the following vulnerability has been resolved: ASoC: hdmi-codec: Fix OOB memory accesses Correct size of iecstatus array by changing it to the size of status array of the struct sndaesiec958. This fixes out-of-bounds slab read accesses made by memcpy of the hdmi-codec driver...