PT-2024-21863

Name of the Vulnerable Software and Affected Versions Samsung Mobile Processor Exynos versions 980, 850, 1280, 1380, and 1330 Description An issue was discovered in the function slsi nan subscribe get nl params, where there is no input validation check on hal req-rx match filter len coming from...

PT-2024-21866

Name of the Vulnerable Software and Affected Versions Samsung Mobile Processor Exynos versions 980, 850, 1280, 1380, and 1330 Description An issue was discovered in the function slsi nan subscribe get nl params, where there is no input validation check on hal req-num intf addr present coming from...

CVE-2024-3657 389-ds-base: potential denial of service via specially crafted kerberos as-req request

A flaw was found in 389-ds-base. A specially-crafted LDAP query can potentially cause a failure on the directory server, leading to a denial of service...

CVE-2024-3657 389-ds-base: potential denial of service via specially crafted kerberos as-req request

A flaw was found in 389-ds-base. A specially-crafted LDAP query can potentially cause a failure on the directory server, leading to a denial of service...

CVE-2024-35926 crypto: iaa - Fix async_disable descriptor leak

In the Linux kernel, the following vulnerability has been resolved: crypto: iaa - Fix asyncdisable descriptor leak The disableasync paths of iaacompress/decompress don't free idxd descriptors in the asyncdisable case. Currently this only happens in the testcases where req-dst is set to null. Add ...

CVE-2024-35820

Summary: Multiple sources indicate CVE-2024-35820 has been withdrawn by its CVE Numbering Authority. In the connected Red Hat advisory, the issue is described in the Linux kernel io_uring subsystem: a vulnerability in the io_queue_proc function arises from improper modification of req->flags, ...

UBUNTU-CVE-2024-27005

In the Linux kernel, the following vulnerability has been resolved: interconnect: Don't access reqlist while it's being manipulated The icclock mutex was split into separate icclock and iccbwlock mutexes in 1 to avoid lockdep splats. However, this didn't adequately protect access to...

CVE-2024-31750

SQL injection vulnerability in f-logic datacube3 v.1.0 allows a remote attacker to obtain sensitive information via the reqid parameter...

PT-2024-5786

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a memory leak in the hci req sync complete function in the Linux kernel's Bluetooth component. This leak occurs due to the failure to free the previous sync reque...

CLSA-2024-1711026811 kernel: Fix of 7 CVEs

netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one CVE-2023-39197 - mtd: Fix gluebi NULL pointer dereference caused by ftl notifier CVE-2023-52449 - media: pvrusb2: fix use after free on context disconnection CVE-2023-52445 - net: prevent mss overflow in skbsegment...

CLSA-2024-1711026398 kernel: Fix of 7 CVEs

netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one CVE-2023-39197 - mtd: Fix gluebi NULL pointer dereference caused by ftl notifier CVE-2023-52449 - media: pvrusb2: fix use after free on context disconnection CVE-2023-52445 - net: prevent mss overflow in skbsegment...

CVE-2023-52612

A vulnerability was found in scomp component Linux Kernel causing a buffer overflow in the req-dst buffer. This occurred because the buffer size was not checked before copying data from scompscratch-dst, leading to potential overflow and DoS. Mitigation Mitigation for this issue is either not...

CVE-2023-52612: Buffer Copy without Checking Size of Input

In the Linux kernel, the following vulnerability has been resolved: crypto: scomp - fix req-dst buffer overflow The req-dst buffer size should be checked before copying from the scompscratch-dst to avoid req-dst buffer overflow problem...

PT-2024-15318

Name of the Vulnerable Software and Affected Versions Google Android affected versions not specified Description The issue is related to a possible out of bounds read in the smp proc sec req function of smp act.cc due to improper input validation. This could lead to remote information disclosure...

PT-2024-7318

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.1.74 Description: The vulnerability is related to a buffer overflow in the arp req get function in the Linux kernel. When the ioctlSIOCGARP command is issued, the function looks up a neighbor entry and copies...

PT-2024-1849

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the Linux kernel's handling of backlogging of crypto requests. When the CRYPTO TFM REQ MAY BACKLOG flag is set on requests to the crypto API, crypto aead...

PT-2024-14654

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A buffer overflow issue has been resolved in the Linux kernel. The problem occurs when copying from scomp scratch-dst to req-dst without checking the req-dst buffer size, leading to a...

CVE-2020-11447: Exposure of Sensitive Information to an Unauthorized Actor

An issue was discovered on Bell HomeHub 3000 SG48222070 devices. Remote authenticated users can retrieve the serial number via cgi/json-req - this is an information leak because the serial number is intended to prove an actor's physical access to the device...

SUSE-SU-2023:3866-1 Security update for salt

This update for salt fixes the following issues: Security issues fixed: - CVE-2023-20897: Fixed DOS in minion return. bsc1214796, bsc1213441 - CVE-2023-20898: Fixed Git Providers can read from the wrong environment because they get the same cache directory base name. bsc1214797, bsc1193948 Bugs...

SUSE-SU-2023:3862-1 Security update for salt

This update for salt fixes the following issues: Security issues fixed: - CVE-2023-20897: Fixed DOS in minion return. bsc1214796, bsc1213441 - CVE-2023-20898: Fixed Git Providers can read from the wrong environment because they get the same cache directory base name. bsc1214797, bsc1193948 Bugs...