Vulnerability of RDMA/siw components of Linux operating system cores, allowing attackers to cause service interruptions

The vulnerability of RDMA/siw components of the Linux operating system’s kernel is related to the lack of memory release after the effective lifespan of these components. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the hns3 component in the Linux operating system’s kernel, which allows a hacker to cause a service failure

The vulnerability of the hns3 component in the Linux operating system’s kernel is related to improper locking mechanisms. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the IBM DB2 database management system (including the IBM DB2 Connect server) is related to uncontrolled memory allocation, which allows a attacker to cause a service failure.

The vulnerability of the IBM DB2 database management system, including IBM DB2 Connect and the IBM DB2 Connect server, is related to uncontrolled memory allocation. Exploiting this vulnerability could allow a malicious actor to cause service interruptions through a specially crafted query...

The vulnerability of the mm/kmemleak component in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of mm/kmemleak in Linux kernel components is related to the lack of memory release after the effective lifespan of components. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the mpt3sas component in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the mpt3sas component in the Linux operating system is related to reading data beyond the allowed range in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

Vulnerability of components of the Linux operating system’s kernel, net/mlx5e, which allows a hacker to cause a service failure

The vulnerability of the net/mlx5e components in the Linux operating system’s kernel is related to the assignment of the NULL pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of component ca8210 in the Linux operating system, related to the lack of memory release after the effective lifespan, allows a hacker to trigger a service failure.

The vulnerability of component ca8210 in the Linux operating system is related to the lack of memory release after the effective lifespan of the component. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2024-9743

Name of the Vulnerable Software and Affected Versions Apache Tomcat versions 11.0.0-M1 through 11.0.1 Apache Tomcat versions 10.1.0-M1 through 10.1.33 Apache Tomcat versions 9.0.0.M1 through 9.0.97 Description The issue is related to an uncontrolled resource consumption vulnerability in the...

The vulnerability of the JxlEncoderAddJPEGFrame() function in the JPEG XL decoder library Libjxl allows a hacker to induce a service failure.

The vulnerability of the JxlEncoderAddJPEGFrame function in the JPEG XL decoder from the Libjxl library is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the Ruby Syntax Detector component of the JetBrains YouTrack project management and task management software allows a hacker to trigger a service failure.

The vulnerability of the Ruby Syntax Detector component of the JetBrains YouTrack project management and task management software is related to the use of a regular expression with high computational complexity. Exploiting this vulnerability could allow an attacker to cause service interruptions...

The vulnerability of the str_base64_encode_rfc2047() function in the Zabbix universal monitoring system allows a attacker to trigger a service failure.

The vulnerability of the strbase64encoderfc2047 function in the Zabbix universal monitoring system is related to the operation exceeding the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the zbx_snmp_cache_handle_engineid() function in the proxy server of the Zabbix monitoring system allows a attacker to cause a service failure.

The vulnerability of the zbxsnmpcachehandleengineid function in the Zabbix monitoring proxy server relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

The vulnerability of the Telephony Agent component in the AlarmWorX Multimedia SCADA system GENESIS64 software package for monitoring alarm signals, along with the MC Works64 software packages for dispatch control and data collection, allows a intruder to gain unauthorized access to read, modify, or delete data, execute arbitrary code, or cause a service failure.

The vulnerability of the Telephony Agent component in the AlarmWorX Multimedia SCADA system of GENESIS64, as well as the software packages for monitoring and data collection of MC Works64, is related to an uncontrolled element in the search process. Exploiting this vulnerability can allow attacke...

The vulnerability of the gsocks4aproxy.c component in the Glib library allows a hacker to cause a service failure.

The vulnerability of the gsocks4aproxy.c component in the Glib library is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

CVE-2024-45207

DLL injection in Veeam Agent for Windows can occur if the system's PATH variable includes insecure locations. When the agent runs, it searches these directories for necessary DLLs. If an attacker places a malicious DLL in one of these directories, the Veeam Agent might load it inadvertently,...

Veeam Agent for Windows 安全漏洞

Veeam Agent for Windows is a data protection and disaster recovery solution for physical and virtual machines from Veeam USA. A security vulnerability exists in Veeam Agent for Windows 6.2 and prior versions 6.X. The vulnerability stems from the presence of a DLL injection vulnerability, which...

The vulnerability of components related to DRM/AMD/AMDKFD in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the DRM/AMD/AMDKFD component in Linux operating systems is related to improper initialization. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the proc/vmcore components of the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the proc/vmcore components in the Linux operating system’s kernel is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the xdp component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the xdp component in the Linux operating system’s kernel is related to the pointer to NULL. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the kasan component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the kasan component in the Linux operating system’s kernel is related to errors in reading beyond the buffer boundaries of memory. Exploiting this vulnerability can allow an attacker to cause a service failure...