Important: gstreamer1-plugins-good security update

GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under the LGPL license. Security Fixes: gstreamer1-plugins-good: uninitialized stack memory in...

Rockwell Automation Arena < 16.20.03 Multiple Vulnerabilities

The version of Rockwell Automation Arena installed on the remote Windows host is prior to 16.20.06. It is, therefore, affected by a number of different vulnerabilities - An “out of bounds write” code execution vulnerability exists in the affected products that could allow a threat actor to...

Huawei EulerOS: Security Advisory for openssl (EulerOS-SA-2024-2970)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ROS-20241205-02

A vulnerability in the drmfileupdatepid function in the drivers/gpu/drm/drmfile.c module of the kernel video driver of the of the Linux operating system is related to the reuse of previously freed memory due to competitive resource access race condition. competitive access to the resource race...

RHEL 8 : kernel (RHSA-2024:9500)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:9500 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: drm/amdgpu: use-after-free...

EulerOS 2.0 SP12 : kernel (EulerOS-SA-2024-2806)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : ASoC: topology: Fix references to freed memoryCVE-2024-41069 bcache: fix variable length array abuse in btreeiterCVE-2024-39482 bnx2x: Fix multipl...

CVE-2024-50066

creationtimestamp| type| source ---|---|--- 2024-10-23 09:01:36+00:00| seen| https://t.me/cvedetector/8674 2025-01-11 23:00:00+00:00| seen| https://u1f383.github.io/linux/2025/01/12/memory-related-cves-exploited-in-kernelctf.html 2025-01-14 16:21:53+00:00| seen|...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-46675)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-46675 advisory. - In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: core: Prevent USB core invali...

PT-2024-6794 · Microsoft · Windows Kernel +1

Name of the Vulnerable Software and Affected Versions: Windows Kernel affected versions not specified Description: The issue is related to the use of memory after it has been freed, which can be exploited to elevate privileges. This can allow an attacker to affect the system. There is no...

MGASA-2024-0306 Updated suricata packages fix security vulnerabilities

CVE-2024-37151 Mishandling of multiple fragmented packets using the same IP ID value can lead to packet reassembly failure, which can lead to policy bypass. CVE-2024-38534 Crafted modbus traffic can lead to unlimited resource accumulation within a flow CVE-2024-38535, CVE-2024-38536 Suricata can...

CVE-2024-46675

CVE-2024-46675 affects the Linux kernel’s USB subsystem (usb: dwc3: core). The vulnerability could allow the USB core to access an invalid event buffer address during runtime suspend, potentially causing SMMU faults and memory issues on Exynos platforms. It stems from a sequence where the event b...

The vulnerabilities in web browsers Firefox and Firefox ESR, as well as the Thunderbird email client, involve memory management issues after memory is freed. These vulnerabilities allow attackers to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerabilities in web browsers Firefox and Firefox ESR, as well as the Thunderbird email client, are related to the use of memory after it is freed. Exploiting these vulnerabilities can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failure...

CVE-2023-7256

In affected libpcap versions during the setup of a remote packet capture the internal function sockinitaddress calls getaddrinfo and possibly freeaddrinfo, but does not clearly indicate to the caller function whether freeaddrinfo still remains to be called after the function returns. This makes i...

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: TIPC message reassembly use-after-free remote code execution vulnerability CVE-2024-36886 kernel: ethernet: hisilicon: hns: hnsdsafmisc: fix a possible array overflow in hnsdsafgesrstbypo...

MGASA-2024-0262 Updated php packages fix security vulnerability

This update ships the latest version of php 8.2. It brings fixed security issues and the usual bug fixes. Vulnerability: A code logic error, filtering functions such as filtervar when validating URLs FILTERVALIDATEURL for certain types of URLs the function will result in invalid user information...

MGASA-2024-0251 Updated dcmtk packages fix security vulnerabilities

Multiple vulnerabilities have been fixed in DCMTK, a collection of libraries and applications implementing large parts the DICOM standard for medical images. CVE-2024-28130 Segmentation faults due to incorrect typecast CVE-2024-34508 Segmentation fault via invalid DIMSE message CVE-2024-34509...

Opensc: multiple memory issues with pkcs15-init (enrollment tool)

...

[SECURITY] [DLA 3847-1] dcmtk security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3847-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk June 28, 2024 https://wiki.debian.org/LTS -...

CVE-2023-52768

In the Linux kernel, the following vulnerability has been resolved: wifi: wilc1000: use vmmtable as array in wilc struct Enabling KASAN and running some iperf tests raises some memory issues with vmmtable: BUG: KASAN: slab-out-of-bounds in wilcwlanhandletxq+0x6ac/0xdb4 Write of size 4 at addr...

SUSE-SU-2024:1870-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2019-25160: Fixed out-of-bounds memory accesses in netlabel bsc1220394. - CVE-2020-36312: Fixed an issue in virt/kvm/kvmmain.c that had a kvmiobusunregisterdev...