Amazon Linux 2 : kernel (ALAS-2025-2775)

The version of kernel installed on the remote host is prior to 4.14.355-274.598. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2025-2775 advisory. In the Linux kernel, the following vulnerability has been resolved: tipc: wait and exit until all work queues are...

The vulnerability in the file src/include/OpenImageIO/detail/farmhash.h of the OpenImageIO image processing library allows a hacker to execute arbitrary code.

The vulnerability in the src/include/OpenImageIO/detail/farmhash.h file of the image processing library OpenImageIO is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: tipc: wait and exit until all work queues are done CVE-2021-47163 Placeholder CVE. Details forthcoming CVE-2024-10929 In the Linux kernel, the following vulnerability has been resolved: tipc: guard against string...

Linux Distros Unpatched Vulnerability : CVE-2024-53106

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ima: fix buffer overrun in imaeventdigestinitcommon Function imaeventdigestinit calls...

Linux Distros Unpatched Vulnerability : CVE-2024-49995

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: tipc: guard against string buffer overrun Smatch reports that copying medianame and ifname t...

Linux Distros Unpatched Vulnerability : CVE-2024-53142

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - initramfs: avoid filename buffer overrun The initramfs filename field is defined in Documentation/driver- api/early-userspace/buffer-format.rst as: 37 cpiofile ...

Important: kernel-livepatch-4.14.355-275.582

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: tipc: guard against string buffer overrun CVE-2024-49995 In the Linux kernel, the following vulnerability has been resolved: dm cache: fix out-of-bounds access to the dirty bitset when resizing CVE-2024-50279...

Important: kernel-livepatch-4.14.355-275.572

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: tipc: guard against string buffer overrun CVE-2024-49995 In the Linux kernel, the following vulnerability has been resolved: dm cache: fix out-of-bounds access to the dirty bitset when resizing CVE-2024-50279...

Linux Distros Unpatched Vulnerability : CVE-2024-49971

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Increase array size of dummyboolean WHY dml2coresharedmodesupport and...

The vulnerabilities of Intel System Resources Defense and Intel System Security Report, microprogramming software for Intel processors, allow attackers to enhance their privileges.

The vulnerability of Intel System Resources Defense and Intel System Security software related to Intel microprocessors involves executing operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow attackers to enhance their privileges...

Linux Distros Unpatched Vulnerability : CVE-2024-42121

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amd/display: Check index msgid before read or write WHAT msgid is used as an array index and it cannot be a negative value, and therefore cannot be equal to...

Linux Distros Unpatched Vulnerability : CVE-2021-3712

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ASN.1 strings are represented internally within OpenSSL as an ASN1STRING structure which contains a buffer holding the string data and a field holding the buffe...

Linux Distros Unpatched Vulnerability : CVE-2024-40970

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: Avoid hwdesc array overrun in dw-axi- dmac I have a use case where nrbuffers = 3 and in whic...

The vulnerabilities of Intel System Resources Defense and Intel System Security Report, microprogramming software for Intel processors, allow attackers to enhance their privileges.

The vulnerability of Intel System Resources Defense and Intel System Security software related to Intel microprocessors involves executing operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow attackers to enhance their privileges...

Linux Distros Unpatched Vulnerability : CVE-2023-22745

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tpm2-tss is an open source software implementation of the Trusted Computing Group TCG Trusted Platform Module TPM 2 Software Stack TSS2. In versions prior to...

Linux Distros Unpatched Vulnerability : CVE-2022-49231

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: rtw88: fix memory overrun and memory leak during hwscan Previously we allocated less memory...

Linux Distros Unpatched Vulnerability : CVE-2024-41038

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: firmware: csdsp: Prevent buffer overrun when processing V2 alg headers Check that all fields...

Linux Distros Unpatched Vulnerability : CVE-2022-4899

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in zstd v1.4.10, where an attacker can supply empty string as an argument to the command line tool to cause buffer overrun...

The vulnerability of the BioNTdrv.sys driver, a software component used for working with Paragon Partition Manager partition drives, allows a hacker to execute arbitrary code.

The vulnerability of the BioNTdrv.sys driver, a software component used for working with Paragon Partition Manager partition management tools, is related to writing beyond buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

The vulnerability of the library for working with the DICOM format in DCMT, related to the occurrence of operations outside the buffer in memory, allows a malicious actor to trigger a service failure.

The vulnerability of the library for working with the DICOM format in DCMT is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...