Astra Linux – Vulnerability in PHP 8.2

In PHP versions 8.1. before 8.1.31, and 8.2. before 8.2.26, as well as 8.3. before 8.3.14, a bug in the convert.quoted-printable-decode filter can cause certain data to be read as one byte too much. This can, under certain circumstances, lead to crashes or reveal content from other memory areas...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Wifi: iwlwifi: mvm – Do not read beyond the mfuart notification. In the event that the firmware sends a notification claiming to have more data than it actually does, we will read beyond the allocated space for the notification. ...

The vulnerability of JavaScript script handlers in Google Chrome browsers allows attackers to partially compromise the accessibility of protected information.

The vulnerability of JavaScript script handlers in Google Chrome browsers relates to reading beyond the buffer boundary. Exploiting this vulnerability allows a malicious actor to partially compromise the accessibility of protected information through a specially crafted HTML page...

Vulnerability of the Server component: Security: Privileges of the Oracle MySQL Server database management system, allowing attackers to gain read access to data, modify data, or obtain privileged access.

The vulnerability of the Server component, specifically Security: Privileges of the Oracle MySQL Server database management system, relates to reading data beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker, operating remotely, to gain read access to data, modify...

Azure Linux 3.0 Security Update: php (CVE-2024-11233)

The version of php installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-11233 advisory. - In PHP versions 8.1. before 8.1.31, 8.2. before 8.2.26, 8.3. before 8.3.14, due to an error in...

Azure Linux 3.0 Security Update: cloud-hypervisor-cvm / openssl (CVE-2024-5535)

The version of cloud-hypervisor-cvm / openssl installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-5535 advisory. - Issue summary: Calling the OpenSSL API function SSLselectnextproto with an empty...

K000149654: PHP vulnerabilities CVE-2024-11233, CVE-2024-11234

Security Advisory Description CVE-2024-11233 In PHP versions 8.1. before 8.1.31, 8.2. before 8.2.26, 8.3. before 8.3.14, due to an error in convert.quoted-printable-decode filter certain data can lead to buffer overread by one byte, which can in certain circumstances lead to crashes or disclose...

CVE-2024-22040

A vulnerability has been identified in Cerberus PRO EN Engineering Tool All versions, Cerberus PRO EN Fire Panel FC72x IP6 All versions, Cerberus PRO EN Fire Panel FC72x IP7 All versions, Cerberus PRO EN Fire Panel FC72x IP8 All versions IP8 SR4, Cerberus PRO EN X200 Cloud Distribution IP7 All...

Security update for Mesa

This update for Mesa fixes the following issues: CVE-2023-45913: Fixed NULL pointer dereference via dri2GetGlxDrawableFromXDrawableId bsc1222040. CVE-2023-45919: Fixed buffer over-read in glXQueryServerString bsc1222041. CVE-2023-45922: Fixed segmentation violation in glXGetDrawableAttribute...

The vulnerability in Firefox and Firefox ESR web browsers, as well as in the Thunderbird email client, relates to reading data beyond the allowed buffer limits, allowing an attacker to cause a service failure.

The vulnerabilities in web browsers Firefox and Firefox ESR, as well as the Thunderbird email client, are related to reading data from buffer areas beyond the allowed limits. Exploiting these vulnerabilities can allow a remote attacker to cause service interruptions...

The vulnerability of the ice component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the ice component in the Linux operating system’s kernel is related to errors in reading beyond the allocated memory buffer. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the qdrawhelper_p.h component of the cross-platform development framework for Qt software, which allows a hacker to trigger a service failure.

The vulnerability of the qdrawhelperp.h component of the cross-platform framework for developing Qt software relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...

The vulnerability of the gst_wavparse_cue_chunk function in the Gstreamer multimedia framework, which allows a hacker to access confidential information

The vulnerability of the gstwavparsecuechunk function in the Gstreamer multimedia framework relates to reading data outside of the allowed range by the WAV parser. Exploiting this vulnerability can allow a remote attacker to gain access to confidential information...

The vulnerability of the QOutlineMapper::convertPath function in the cross-platform framework for Qt software development allows a attacker to cause a service failure.

The vulnerability of the QOutlineMapper::convertPath function in the cross-platform framework for Qt software development is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability in the module/loaders/loader_ico.c component of the Imlib2 image processing library allows a attacker to cause a service failure.

The vulnerability in the modules/loaders/loaderico.c component of the Imlib2 image processing library is related to reading data beyond the allowable buffer size. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability in the net_openvswitch/actions.c component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the netopenvswitch/actions.c component of the Linux kernel relates to reading data from the buffer beyond its allowable limits. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the fib6_nh_flush_exceptions() function in the net/ipv6/route.c component of the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the fib6nhflushexceptions function in the net/ipv6/route.c component of the Linux operating system is related to reading data from the buffer beyond its allowable limits. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability in the driver/net/dsa/mv88e6xxx/global1_atu.c component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the drivers/net/dsa/mv88e6xxx/global1atu.c component of the Linux operating system is related to reading data from the buffer beyond its allowable limits. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the Digital Media component of Windows operating systems, which allows attackers to enhance their privileges

The vulnerability of the Digital Media component of Windows operating systems relates to reading data beyond the allowed range in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the CSC (Client-Side Caching) service in Windows operating systems allows attackers to disclose sensitive information.

The vulnerability of the CSC Client-Side Caching service in Windows operating systems lies in the fact that operations may be performed outside of the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by the system’s security...