1812 matches found
Linux 6.6 Race Condition
Summary I found a security-relevant race between mremap and THP code. Reaching the buggy code typically requires the ability to create unprivileged namespaces. The bug leads to installing physical address 0 as a page table, which is likely exploitable in several ways: For example, triggering the...
OSV-2024-1311 Security exception in java.base/java.util.Arrays.copyOfRange
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=378836879 Crash type: Security exception Crash state: java.base/java.util.Arrays.copyOfRange java.base/java.lang.StringUTF16.newString java.base/java.lang.StringBuilder.toString...
CVE-2024-52301
Laravel is a web application framework. When the registerargcargv php directive is set to on , and users call any URL with a special crafted query string, they are able to change the environment used by the framework when handling the request. The vulnerability fixed in 6.20.45, 7.30.7, 8.83.28,...
CVE-2024-11067
creationtimestamp| type| source ---|---|--- 2024-11-11 08:12:00+00:00| seen| https://infosec.exchange/users/cve/statuses/113463310423022630 2024-11-11 10:15:02+00:00| seen| https://t.me/cvedetector/10482 2024-11-13 16:42:10+00:00| seen| https://mstdn.ca/users/rfwaveio/statuses/113476640532735205...
SUSE CVE-2024-45802
Squid is an open source caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to Input Validation, Premature Release of Resource During Expected Lifetime, and Missing Release of Resource after Effective Lifetime bugs, Squid is vulnerable to Denial of Service attacks by a trusted...
qt5-webengine -- Use after free in Serial
Qt qtwebengine-chromium repo reports: Backports for 1 security bug in Chromium: CVE-2024-10827: Use after free in Serial...
CVE-2024-49885 mm, slub: avoid zeroing kmalloc redzone
In the Linux kernel, the following vulnerability has been resolved: mm, slub: avoid zeroing kmalloc redzone Since commit 946fa0dbf2d8 "mm/slub: extend redzone check to extra allocated kmalloc space than requested", setting origsize treats the wasted space objectsize - origsize as a redzone. Howev...
CVE-2024-49883 ext4: aovid use-after-free in ext4_ext_insert_extent()
In the Linux kernel, the following vulnerability has been resolved: ext4: aovid use-after-free in ext4extinsertextent As Ojaswin mentioned in Link, in ext4extinsertextent, if the path is reallocated in ext4extcreatenewleaf, we'll use the stale path and cause UAF. Below is a sample trace with dumm...
CVE-2024-47813
CVE-2024-47813 is a race-condition bug in Wasmtime where concurrent creation/dropping of types (e.g., FuncType, ArrayType) on a shared wasmtime::Engine can cause double-unregistration, potentially corrupting the internal type registry and violating WebAssembly CFI and type safety. The issue arise...
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security bugfixes. The following security bugs were fixed: CVE-2022-48911: kabi: add nfqueuegetrefs for kabi compliance. bsc1229633. CVE-2022-48923: btrfs: prevent copying too big compressed lzo segment bsc1229662...
RHSA-2021:5085 Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.9.0 enhancement, security, and bug fix update
Bulletin has no description...
CVE-2024-46824
Summary (CVE-2024-46824) The connected MiracleLinux/MiracleLinux AXSA advisory AXSA:2024-9508:43 for MiracleLinux 9 ( kernel 5.14.0-503.14.1.el9_5 ) explicitly lists CVE-2024-46824 among the vulnerabilities. The advisory notes that the issue affects iommufd: drivers must supply the cache_invalida...
kernel: wifi: mac80211: Avoid address calculations via out of bounds array indexing
No description is available for this CVE...
RHSA-2021:2104 Red Hat Security Advisory: rh-ruby25-ruby security, bug fix, and enhancement update
Bulletin has no description...
RHSA-2021:1184 Red Hat Security Advisory: RHV RHEL Host (ovirt-host) 4.4.z [ovirt-4.4.5] security, bug fix, enhancement
Bulletin has no description...
RHSA-2020:5325 Red Hat Security Advisory: Red Hat Ceph Storage 4.1 security and bug fix update
Bulletin has no description...
RHSA-2017:1859 Red Hat Security Advisory: golang security, bug fix, and enhancement update
Bulletin has no description...
RHSA-2016:2592 Red Hat Security Advisory: subscription-manager security, bug fix, and enhancement update
Bulletin has no description...