AZL-57428 CVE-2025-22869 affecting package kubernetes for versions less than 1.28.4-15

SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but never transmitted...

CVE-2022-49107

In the Linux kernel, the following vulnerability has been resolved: ceph: fix memory leak in cephreaddir when notelastdentry returns error Reset the lastreaddir at the same time, and add a comment explaining why we don't free lastreaddir when diremit returns false...

Azure Linux 3.0 Security Update: kernel (CVE-2024-39487)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-39487 advisory. - In the Linux kernel, the following vulnerability has been resolved: bonding: Fix out-of-bounds read in...

Huawei EulerOS: Security Advisory for krb5 (EulerOS-SA-2025-1124)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2025-19368

Name of the Vulnerable Software and Affected Versions pcpp affected versions not specified Description The software contains a flaw related to an unknown read issue within the RawPacket::insertData, Packet::extendLayer, and BgpUpdateMessageLayer::setNetworkLayerReachabilityInfo functions...

Amazon Linux 2 : exiv2 (ALAS-2025-2728)

The version of exiv2 installed on the remote host is prior to 0.27.0-4. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2025-2728 advisory. Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. ...

CVE-2024-53190

In the Linux kernel, the following vulnerability has been resolved: wifi: rtlwifi: Drastically reduce the attempts to read efuse in case of failures Syzkaller reported a hung task with ueventshow on stack trace. That specific issue was addressed by another commit 0, but even with that fix applied...

CVE-2024-53190 wifi: rtlwifi: Drastically reduce the attempts to read efuse in case of failures

In the Linux kernel, the following vulnerability has been resolved: wifi: rtlwifi: Drastically reduce the attempts to read efuse in case of failures Syzkaller reported a hung task with ueventshow on stack trace. That specific issue was addressed by another commit 0, but even with that fix applied...

CVE-2024-47777

CVE-2024-47777 affects GStreamer, specifically the gst_wavparse_smpl_chunk function in gstwavparse.c. The issue is an out-of-bounds read caused by reading 4 bytes from data + 12 without validating the data buffer size, which can lead to accessing memory beyond the buffer. The vulnerability is fix...

CVE-2024-47598 GHSL-2024-246: GStreamer has an OOB-read in qtdemux_merge_sample_table

GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been discovered in the qtdemuxmergesampletable function within qtdemux.c. The problem is that the size of the stts buffer isn’t properly checked before reading sttsduration, allowing the...

CVE-2024-47596 GHSL-2024-244: GStreamer has an OOB-read in FOURCC_SMI_ parsing

GStreamer is a library for constructing graphs of media-handling components. An OOB-read has been discovered in the qtdemuxparsesvq3stsddata function within qtdemux.c. In the FOURCCSMI case, seqhsize is read from the input file without proper validation. If seqhsize is greater than the remaining...

PT-2024-41089

Name of the Vulnerable Software and Affected Versions glslang affected versions not specified Description The software contains a flaw related to an unknown read issue within the glslang::HlslTokenStream::advanceToken, glslang::HlslGrammar::acceptLiteral, and...

OSV-2024-1312 Heap-buffer-overflow in jv_string_vfmt

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=378836890 Crash type: Heap-buffer-overflow READ 13 Crash state: jvstringvfmt jvstringfmt jvparsesizedcustomflags...

PT-2024-40596 · Git +1 · Fluent-Bit

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A crash occurred due to an unknown read issue. The crash state involves functions such as cfl sds len, unpack meta opts, and cmt mpack unpack map. No...

PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

NFS: Fix nfs_netfs_issue_read() xarray locking for writeback interrupt

...

PT-2024-40563 · Git +1 · Ghostscript

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: A crash occurred due to an unknown read issue. The crash state involves functions such as chunk free object, file close file, and sclose. Recommendations: At the moment, there is no...

PT-2024-40857 · Git +1 · Ghostscript

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: A crash occurred due to an unknown read issue, as reported by OSS-Fuzz. The crash state includes functions such as chunk free object, sclose, and sfclose. No information is available...

PT-2024-40861

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A crash occurred due to an unknown read issue, as reported by OSS-Fuzz. The crash state involves the functions jvp object free, jv equal, and jv equal...

PT-2024-40879

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A crash occurred due to an unknown read issue. The crash state involves the pcpp::PcapNgFileReaderDevice::getNextPacket function. No information is availab...