3839 matches found
OESA-2024-2204 ffmpeg security update
FFmpeg is a complete and free Internet live audio and video broadcasting solution for Linux/Unix. It also includes a digital VCR. It can encode in real time in many formats including MPEG1 audio and video, MPEG4, h263, ac3, asf, avi, real, mjpeg, and flash. Security Fixes: FFmpeg version n5.1 to...
OESA-2024-2202 ffmpeg security update
FFmpeg is a complete and free Internet live audio and video broadcasting solution for Linux/Unix. It also includes a digital VCR. It can encode in real time in many formats including MPEG1 audio and video, MPEG4, h263, ac3, asf, avi, real, mjpeg, and flash. Security Fixes: FFmpeg version n5.1 to...
Security Bulletin: Vulnerability in glibc affects IBM Integrated Analytics System [CVE-2021-3999]
Summary Redhat provided glibc is used by IBM Integrated Analytics System. IBM Integrated Analytics System has addressed the applicable CVE CVE-2021-3999 Vulnerability Details CVEID:CVE-2021-3999 DESCRIPTION: GNU glibc is vulnerable to an off-by-one buffer overflow and underflow, caused by imprope...
SUSE-SU-2024:3375-1 Security update for the Linux Kernel (Live Patch 25 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-15040024116 fixes several issues. The following security issues were fixed: - CVE-2023-52846: Prevent use after free in prpcreatetaggedframe bsc1225099. - CVE-2022-48662: Fixed a general protection fault GPF in i915perfopenioctl bsc1223521. - CVE-2024-3581...
OESA-2024-2155 ffmpeg security update
FFmpeg is a complete and free Internet live audio and video broadcasting solution for Linux/Unix. It also includes a digital VCR. It can encode in real time in many formats including MPEG1 audio and video, MPEG4, h263, ac3, asf, avi, real, mjpeg, and flash. Security Fixes: FFmpeg version n5.1 to...
OESA-2024-2091 syslinux security update
Security Fixes: The pngformatbuffer function in pngerror.c in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4 allows remote attackers to cause a denial of service application crash via a crafted PNG image that triggers an out-of-bounds read during the...
Ivanti Avalanche < 6.4.4 Multiple Vulnerabilities
The version of Ivanti Avalanche running on the remote host is prior to 6.4.4. It is, therefore, is affected by multiple vulnerabilities : - An off-by-one error in WLInfoRailService allows a remote unauthenticated attacker to crash the service. CVE-2024-36136 - Improper input validation in the...
GO-2022-0550 Off-by-one Error in v2fly/v2ray-core in github.com/v2fly/v2ray-core
Off-by-one Error in v2fly/v2ray-core in github.com/v2fly/v2ray-core...
Advisory ROSA-SA-2024-2470
software: systemd 249 WASP: ROSA-CHROME packageevrstring: systemd-249-1.gitfab79a.21 CVE-ID: CVE-2022-3821 BDU-ID: None CVE-Crit: MEDIUM CVE-DESC.: An off-by-one error problem was discovered in Systemd in the formattimespan function time-util.c. An attacker could provide specific values for time...
EulerOS Virtualization 2.11.0 : libvirt (EulerOS-SA-2024-2202)
According to the versions of the libvirt package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : An off-by-one error flaw was found in the udevListInterfacesByStatus function in libvirt when the number of interfaces exceeds the...
Huawei EulerOS: Security Advisory for libvirt (EulerOS-SA-2024-2202)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE CVE-2024-43852
In the Linux kernel, the following vulnerability has been resolved: hwmon: ltc2991 re-order conditions to fix off by one bug LTC2991TINTCHNR is 4. The st-tempen array has LTC2991MAXCHANNEL 4 elements. Thus if "channel" is equal to LTC2991TINTCHNR then we have read one element beyond the end of th...
DEBIAN-CVE-2024-43852
In the Linux kernel, the following vulnerability has been resolved: hwmon: ltc2991 re-order conditions to fix off by one bug LTC2991TINTCHNR is 4. The st-tempen array has LTC2991MAXCHANNEL 4 elements. Thus if "channel" is equal to LTC2991TINTCHNR then we have read one element beyond the end of th...
CVE-2024-43852
In the Linux kernel, the following vulnerability has been resolved: hwmon: ltc2991 re-order conditions to fix off by one bug LTC2991TINTCHNR is 4. The st-tempen array has LTC2991MAXCHANNEL 4 elements. Thus if "channel" is equal to LTC2991TINTCHNR then we have read one element beyond the end of th...
CVE-2024-43852
CVE-2024-43852 refers to a Linux kernel hwmon LTC2991 off-by-one bug in which LTC2991_T_INT_CH_NR is 4 and st->temp_en[] has 4 elements. The vulnerability occurs when channel equals LTC2991_T_INT_CH_NR, reading beyond the end of the array. The fix, described in the description, is to reorder t...
CVE-2024-43852
In the Linux kernel, the following vulnerability has been resolved: hwmon: ltc2991 re-order conditions to fix off by one bug LTC2991TINTCHNR is 4. The st-tempen array has LTC2991MAXCHANNEL 4 elements. Thus if "channel" is equal to LTC2991TINTCHNR then we have read one element beyond the end of th...
CVE-2024-43852 hwmon: (ltc2991) re-order conditions to fix off by one bug
In the Linux kernel, the following vulnerability has been resolved: hwmon: ltc2991 re-order conditions to fix off by one bug LTC2991TINTCHNR is 4. The st-tempen array has LTC2991MAXCHANNEL 4 elements. Thus if "channel" is equal to LTC2991TINTCHNR then we have read one element beyond the end of th...
CVE-2024-43852 hwmon: (ltc2991) re-order conditions to fix off by one bug
In the Linux kernel, the following vulnerability has been resolved: hwmon: ltc2991 re-order conditions to fix off by one bug LTC2991TINTCHNR is 4. The st-tempen array has LTC2991MAXCHANNEL 4 elements. Thus if "channel" is equal to LTC2991TINTCHNR then we have read one element beyond the end of th...
CBL Mariner 2.0 Security Update: kernel (CVE-2024-23849)
The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-23849 advisory. - In rdsrecvtracklatency in net/rds/afrds.c in the Linux kernel through 6.7.1, there is an off-by-one error fo...