[SECURITY] Fedora 41 Update: glibc-2.40-14.fc41

The glibc package contains standard libraries which are used by multiple programs on the system. In order to save disk space and memory, as well as to make upgrading easier, common system code is kept in one place and shared between programs. This particular package contains the most important se...

Medium: apr

Issue Overview: Lax permissions set by the Apache Portable Runtime library on Unix platforms would allow local users read access to named shared memory segments, potentially revealing sensitive application data. This issue does not affect non-Unix platforms, or builds with APRUSESHMEMSHMGET=1 apr...

IBM Watson Speech Services Cartridge Data Analysis Tool DoS

The vulnerability of the IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data data analysis service lies in synchronization errors when using a shared resource. Exploiting this vulnerability can allow a malicious actor to cause a service failure...

PT-2025-3639

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.12.0-rc6-06316-g7f63786ad3d1-dirty Description The issue is related to a NULL pointer dereference in the tcpci irq function when handling shared interrupts. This can occur when two Type-C ports share an...

Windows Kernel Privilege Escalation

The vulnerability of the kernel of Microsoft Windows is related to synchronization errors when using a shared resource „Race Conditions“. Exploiting this vulnerability can allow an attacker to increase their privileges...

Windows LDAP Code Execution

The vulnerability of the LDAP Lightweight Directory Access Protocol implementation in Windows operating systems is related to synchronization errors when using a shared resource. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

PT-2025-3608

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.13.0-rc2master+ Description The issue is related to the Linux kernel's handling of huge page tables. The folio refcount may be increased unexpectedly through try get folio by callers such as split huge pages...

Malicious code in @infoserver/gov-shared-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5b54fde6a5995ffcf57ff5e926b8e0ddb11018b6a6107970a724342f83745df0 The OpenSSF Package Analysis project identified '@infoserver/gov-shared-ui' @ 21.2.15 npm as malicious. It is considered malicious because: - Th...

TLS 1.3 client issue handling malicious server when not including a KSE and PSK extension

...

Medium: apr

Issue Overview: Lax permissions set by the Apache Portable Runtime library on Unix platforms would allow local users read access to named shared memory segments, potentially revealing sensitive application data. This issue does not affect non-Unix platforms, or builds with APRUSESHMEMSHMGET=1 apr...

CVE-2024-47834

GStreamer is a library for constructing graphs of media-handling components. An Use-After-Free read vulnerability has been discovered affecting the processing of CodecPrivate elements in Matroska streams. In the GSTMATROSKAIDCODECPRIVATE case within the gstmatroskademuxparsestream function, a dat...

Linux kernel net/mlx5 Privilege Escalation

The vulnerability of the net/mlx5 components in the Linux operating system’s kernel is related to the state of the race condition when a shared resource is used. Exploiting this vulnerability can allow an attacker to gain elevated privileges within the system...

PT-2024-40144 · Pqclean · Pqclean

Name of the Vulnerable Software and Affected Versions: PQClean affected versions not specified Description: A correctness error has been identified in the reference implementation of the HQC key encapsulation mechanism, where an indexing error causes part of the secret key to be incorrectly treat...

CVE-2024-45494

An issue was discovered in MSA FieldServer Gateway 5.0.0 through 6.5.2 Fixed in 7.0.0. The FieldServer Gateway has an internally used shared administrative user account on all devices. The authentication for this user is implemented through an unsafe shared secret that is static in all affected...

CVE-2024-45494

The MSA FieldServer Gateway (versions 5.0.0 through 6.5.2 ) is vulnerable to an authentication bypass because it utilizes an internally used shared administrative user account across all devices. The security flaw stems from the use of an unsafe, static shared secret for this account's authentica...

CVE-2024-45494: Incorrect Default Permissions

An issue was discovered in MSA FieldServer Gateway 5.0.0 through 6.5.2 Fixed in 7.0.0. The FieldServer Gateway has an internally used shared administrative user account on all devices. The authentication for this user is implemented through an unsafe shared secret that is static in all affected...

PT-2024-9420 · Microsoft · Windows Kernel +1

Name of the Vulnerable Software and Affected Versions: Windows Kernel affected versions not specified Description: The issue is related to an elevation of privilege vulnerability in the Windows kernel, which is caused by synchronization errors when using a shared resource, also known as a "race...

CVE-2024-45494

An issue was discovered in MSA FieldServer Gateway 5.0.0 through 6.5.2 Fixed in 7.0.0. The FieldServer Gateway has an internally used shared administrative user account on all devices. The authentication for this user is implemented through an unsafe shared secret that is static in all affected...

CVE-2024-45494

An issue was discovered in MSA FieldServer Gateway 5.0.0 through 6.5.2 Fixed in 7.0.0. The FieldServer Gateway has an internally used shared administrative user account on all devices. The authentication for this user is implemented through an unsafe shared secret that is static in all affected...

PT-2024-31661

Name of the Vulnerable Software and Affected Versions: MSA FieldServer Gateway versions 5.0.0 through 6.5.2 Description: An issue was discovered in the FieldServer Gateway, where an internally used shared administrative user account is present on all devices. The authentication for this user is...