8415 matches found
UBUNTU-CVE-2024-46691
In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: Move unregister out of atomic section Commit '9329933699b3 "soc: qcom: pmicglink: Make client-lock non-sleeping"' moved the pmicglink client list under a spinlock, as it is accessed by the rpmsg/glink callback,...
Siemens Industrial Product Null Pointer Dereference Vulnerability
SIMATIC CP 1242 and CP 1243 associated processors connect SIMATIC S7-1200 controllers to a wide area network WAN. They provide integrated security features such as firewalls, virtual private networks VPNs, and support for other data encryption protocols.SIMATIC HMI Panels are used for operator...
libmicrohttpd MHD_create_post_processor DoS
The vulnerability of the MHDcreatepostprocessor function lies in the implementation of the HTTP server in the libmicrohttpd library. This issue is related to incorrect handling of the multipart/form-data boundary. Exploiting this vulnerability could allow an attacker to cause service failures...
Mageia: Security Advisory (MGASA-2024-0296)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Updated microcode package fix security vulnerabilities
Improper isolation in the IntelR CoreTM Ultra Processor stream cache mechanism may allow an authenticated user to potentially enable escalation of privilege via local access. CVE-2023-42667 Improper isolation in some IntelR Processors stream cache mechanism may allow an authenticated user to...
MGASA-2024-0296 Updated microcode package fix security vulnerabilities
Improper isolation in the IntelR CoreTM Ultra Processor stream cache mechanism may allow an authenticated user to potentially enable escalation of privilege via local access. CVE-2023-42667 Improper isolation in some IntelR Processors stream cache mechanism may allow an authenticated user to...
kprobes/x86: Use copy_from_kernel_nofault() to read from unsafe address
...
cpufreq: amd-pstate: fix memory leak on CPU EPP exit
...
ASoC: SOF: amd: Fix memory leak in amd_sof_acp_probe()
...
remoteproc: mediatek: Make sure IPI buffer fits in L2TCM
...
ROS-20240911-11
Vulnerability in the cross-platform Xen hypervisor of the Linux operating system kernel is related to disclosure of information. Exploitation of the vulnerability could allow an attacker acting remotely to gain Unauthorized access to protected information A vulnerability in the libfsimage compone...
CVE-2024-25073
An issue was discovered in Samsung Semiconductor Mobile Processor and Modem Exynos 9820, Exynos 9825, Exynos 980, Exynos 990, Exynos 850, Exynos 1080, Exynos 2100, Exynos 2200, Exynos 1280, Exynos 1380, Exynos 1330, Exynos 9110, Exynos W920, Exynos W930, Exynos Modem 5123, Exynos Modem 5300. The...
AZL-49024 CVE-2024-23184 affecting package dovecot 2.3.20-1
Having a large number of address headers From, To, Cc, Bcc, etc. becomes excessively CPU intensive. With 100k header lines CPU usage is already 12 seconds, and in a production environment we observed 500k header lines taking 18 minutes to parse. Since this can be triggered by external actors...
dovecot: using a large number of address headers may trigger a denial of service
A flaw was found in Dovecot. Processing a large number of address headers From, To, Cc, Bcc, etc can be excessively CPU intensive. This flaw allows a remote attacker to trigger a denial of service...
CVE-2024-31960
An issue was discovered in Samsung Mobile Processor Exynos 1480, Exynos 2400. The xclipse amdgpu driver has a reference count bug. This can lead to a use after free...
CVE-2024-31960
CVE-2024-31960 affects Samsung Mobile Processor Exynos 1480 and Exynos 2400. The xclipse amdgpu driver contains a reference-counting bug that can cause a use-after-free. The issue is described as a local vulnerability with high impact on confidentiality, integrity, and availability; exploitation ...
CVE-2024-31960: Use After Free
An issue was discovered in Samsung Mobile Processor Exynos 1480, Exynos 2400. The xclipse amdgpu driver has a reference count bug. This can lead to a use after free...
CVE-2024-25073
Summary: A vulnerability (CVE-2024-25073) affects Samsung Semiconductor Mobile Processor and Modem Exynos families (versions 9820–9825, 980–990, 850–1080, 2100–2200, 1280–1380, 1330, 9110, W920, W930, Modem 5123, 5300). The baseband software does not properly check a pointer in the Call Control (...
PT-2024-24322
Name of the Vulnerable Software and Affected Versions Samsung Mobile Processor Exynos versions 1480, 2400 Description An issue was discovered in the xclipse amdgpu driver, which has a reference count bug. This can lead to a use after free. Recommendations For Samsung Mobile Processor Exynos...
Samsung Mobile Processor security vulnerabilities
SAMSUNG Mobile Processor is a family of mobile processors from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile Processor, which originates from a reference counting error in the xclipse amdgpu driver, resulting in memory reuse after release...