CVE-2023-33103 Improper Input Validation in Multi-Mode Call Processor

Transient DOS while processing CAG info IE received from NW...

CVE-2023-33096 Reachable Assertion in Multi-Mode Call Processor

Transient DOS while processing DL NAS Transport message, as specified in 3GPP 24.501 v16...

CVE-2023-33095 Reachable Assertion in Multi-Mode Call Processor

Transient DOS while processing multiple payload container type with incorrect container length received in DL NAS transport OTA in NR...

Intel SGX DCAP Buffer Overflow Information Disclosure

The vulnerability of Intel SGX DCAP microprogramming software is related to insufficient validation of input data. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

Qualcomm Chipsets Security Vulnerability

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that originates from a denial of service in the processing of channel information for the speaker protection v2 module in the ADSP...

ARM Mali GPU Kernel Driver Resource Management Error Vulnerability

The ARM Mali GPU Kernel Driver is a driver for a graphics processor unit from ARM UK. A security vulnerability exists in the ARM Mali GPU Kernel Driver that stems from the presence of post-release reuse, which allows a local, unprivileged user to perform incorrect memory handling operations by...

CVE-2023-52497

In the Linux kernel, the following vulnerability has been resolved: erofs: fix lz4 inplace decompression Currently EROFS can map another compressed buffer for inplace decompression, that was used to handle the cases that some pages of compressed data are actually not in-place I/O. However, like...

CVE-2023-52497

In the Linux kernel, the following vulnerability has been resolved: erofs: fix lz4 inplace decompression Currently EROFS can map another compressed buffer for inplace decompression, that was used to handle the cases that some pages of compressed data are actually not in-place I/O. However, like...

Spoofing

In the Linux kernel, the following vulnerability has been resolved: erofs: fix lz4 inplace decompression Currently EROFS can map another compressed buffer for inplace decompression, that was used to handle the cases that some pages of compressed data are actually not in-place I/O. However, like...

CVE-2023-52497

In the Linux kernel, the following vulnerability has been resolved: erofs: fix lz4 inplace decompression Currently EROFS can map another compressed buffer for inplace decompression, that was used to handle the cases that some pages of compressed data are actually not in-place I/O. However, like...

CVE-2023-52497 erofs: fix lz4 inplace decompression

In the Linux kernel, the following vulnerability has been resolved: erofs: fix lz4 inplace decompression Currently EROFS can map another compressed buffer for inplace decompression, that was used to handle the cases that some pages of compressed data are actually not in-place I/O. However, like...

CVE-2023-52497 erofs: fix lz4 inplace decompression

In the Linux kernel, the following vulnerability has been resolved: erofs: fix lz4 inplace decompression Currently EROFS can map another compressed buffer for inplace decompression, that was used to handle the cases that some pages of compressed data are actually not in-place I/O. However, like...

CVE-2023-52497

In the Linux kernel, the following vulnerability has been resolved: erofs: fix lz4 inplace decompression Currently EROFS can map another compressed buffer for inplace decompression, that was used to handle the cases that some pages of compressed data are actually not in-place I/O. However, like...

Linux kernel security vulnerabilities

The Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. A security vulnerability exists in the Linux kernel that arises from a kernel thread using and not releasing the CPU for longer than a specified period of time...

com.dslplatform:dsl-clc (>=1.8.3, <=1.9.0), com.dslplatform:dsl-json-processor (>=1.4.1, <=1.4.6) +1 more potentially affected by CVE-2024-1597 +1 more via org.postgresql:postgresql (9.4.1212.jre6)

org.postgresql:postgresql MAVEN version 9.4.1212.jre6 is affected by a known vulnerability. The following packages have a transitive dependency on org.postgresql:postgresql and may be impacted: - com.dslplatform:dsl-clc =1.8.3, =1.4.1, =1.1.0, =1.2.0 Source cves: CVE-2024-1597, CVE-2024-32888...

com.dslplatform:dsl-clc (>=1.6.2, <=1.7.2), com.dslplatform:dsl-json-processor (>=0.8, <=1.2) +1 more potentially affected by CVE-2024-1597 +1 more via org.postgresql:postgresql (9.4.1208.jre6)

org.postgresql:postgresql MAVEN version 9.4.1208.jre6 is affected by a known vulnerability. The following packages have a transitive dependency on org.postgresql:postgresql and may be impacted: - com.dslplatform:dsl-clc =1.6.2, =0.8, =0.7, =0.9 Source cves: CVE-2024-1597, CVE-2024-32888 Source...

com.dslplatform:dsl-clc (>=1.8.0, <=1.8.2), com.dslplatform:dsl-json-processor (>=1.3, <=1.4) +1 more potentially affected by CVE-2024-1597 +1 more via org.postgresql:postgresql (9.4.1209.jre6)

org.postgresql:postgresql MAVEN version 9.4.1209.jre6 is affected by a known vulnerability. The following packages have a transitive dependency on org.postgresql:postgresql and may be impacted: - com.dslplatform:dsl-clc =1.8.0, =1.3, =1.0, =1.0.1 Source cves: CVE-2024-1597, CVE-2024-32888 Source...

Multiple Siemens Products Communication Channel Source Verification Error Vulnerability

The SIMATIC CP 343-1 is a communication processor CP that provides Ethernet communication for the SIMATIC S7-300 cpu. SIPLUS Extreme products are designed for reliable operation under extreme conditions and are based on SIMATIC, LOGO!, SITOP, SINAMICS, SIMOTION, SCALANCE or other devices. SIPLUS...

kernel: nfp: use-after-free in area_cache_get()

A vulnerability was found in areacacheget in drivers/net/ethernet/netronome/nfp/nfpcore/nfpcppcore.c in the Netronome Flow Processor NFP driver in the Linux kernel. This flaw allows a manipulation that may lead to a use-after-free issue...

UBUNTU-CVE-2024-22019

A vulnerability in Node.js HTTP servers allows an attacker to send a specially crafted HTTP request with chunked encoding, leading to resource exhaustion and denial of service DoS. The server reads an unbounded number of bytes from a single connection, exploiting the lack of limitations on chunk...