FreeBSD 安全漏洞

FreeBSD is a set of Unix-like operating systems from the FreeBSD Foundation. A security vulnerability exists in FreeBSD that stems from the NVMe driver function nvmeopcgetlogpage being susceptible to buffer over-reading, which allows an attacker to perform a denial-of-service DoS attack against t...

PT-2024-10468

Name of the Vulnerable Software and Affected Versions Xen hypervisor versions prior to 4.7 Description The issue is related to the hypervisor's code for accelerating VGA memory accesses for HVM guests in "standard" mode. The locking mechanism involved has an unusual discipline, which can lead to ...

SQLite Vulnerable to Out-of-Bounds Memory Access via Insufficient Input Validation in 'sessionReadRecord' Function of 'Sessions' Extension

SQLite is vulnerable to an out-of-bounds memory access issue due to a lack of sufficient input validation in the sessionReadRecord function. An attacker could submit a crafted input in order to trigger the flaw which could allow for a 1-byte out-of-bounds read to occur which could lead to...

Mageia: Security Advisory (MGASA-2024-0354)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-10367

Certain Cypress and Broadcom Wireless Combo chips, when a January 2021 firmware update is not present, allow memory access via a "Spectra" attack...

CVE-2020-10367

Certain Cypress and Broadcom Wireless Combo chips, when a January 2021 firmware update is not present, allow memory access via a "Spectra" attack...

PT-2024-10760

Name of the Vulnerable Software and Affected Versions Cypress and Broadcom Wireless Combo chips versions prior to January 2021 firmware update Raspberry Pi devices affected versions not specified BlueZ firmware affected versions not specified Apple products affected versions not specified Broadco...

CVE-2020-10367

Certain Cypress (and Broadcom) Wireless Combo chips are vulnerable to a memory access flaw via a "Spectra" attack . This vulnerability exists when a January 2021 firmware update is not present. The provided documents do not specify the exact component or file affected, nor do they detail the spec...

CVE-2020-10367: Observable Discrepancy

Certain Cypress and Broadcom Wireless Combo chips, when a January 2021 firmware update is not present, allow memory access via a "Spectra" attack...

CVE-2020-10368

Certain Cypress and Broadcom Wireless Combo chips, when a January 2021 firmware update is not present, allow memory read access via a "Spectra" attack...

RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency

...

RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled

...

RDMA/cxgb4: Added NULL check for lookup_atid

...

RDMA/hns: Fix Use-After-Free of rsv_qp on HIP08

...

RDMA/rtrs-srv: Avoid null pointer deref during path establishment

...

Updated quictls packages fix security vulnerability

Invalid low-level GF2^m parameters can lead to an OOB memory access. CVE-2024-9143...

MGASA-2024-0354 Updated quictls packages fix security vulnerability

Invalid low-level GF2^m parameters can lead to an OOB memory access. CVE-2024-9143...

SUSE CVE-2024-50206

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mtkethsoc: fix memory corruption during fq dma init The loop responsible for allocating up to MTKFQDMALENGTH buffers must only touch as many descriptors, otherwise it ends up corrupting unrelated memory. Fix the lo...

SUSE CVE-2024-50209

In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxtre: Add a check for memory allocation allocpbl can return error when memory allocation fails. Driver is not checking the status on one of the instances...

OESA-2024-2345 mosquitto security update

Mosquitto is an open source message broker that implements the MQ Telemetry Transport protocol version 3.1 and 3.1.1 MQTT provides a lightweight method of carrying out messaging using a publish/subscribe model. This makes it suitable for "machine to machine" messaging such as with low power senso...