25640 matches found
Zend Server formatting string error vulnerability
Zend Server is a complete and certified PHP distribution stack from Zend USA. A security vulnerability exists in Zend Server that stems from the inclusion of a formatting string injection issue...
PT-2024-39449
Name of the Vulnerable Software and Affected Versions Zend Server versions 8.5 through 9.2 Description A format string injection issue was discovered in Zend Server. This issue was reported by Dylan Marino. Recommendations For versions 8.5 through 9.2, update to a version newer than 9.2 to resolv...
Debian dla-3933 : dmitry - security update
The remote Debian 11 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-3933 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3933-1 [email protected]...
CVE-2024-49995
A string buffer over-run was found in the Linux kernel. Copying medianame and ifname to nameparts may overwrite the destination, resulting in a software crash. Mitigation Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security...
CVE-2024-49995
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
CVE-2024-49995
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
CVE-2024-49869
In the Linux kernel, the following vulnerability has been resolved: btrfs: send: fix buffer overflow detection when copying path to cache entry Starting with commit c0247d289e73 "btrfs: send: annotate struct namecacheentry with countedby" we annotated the variable length array "name" from the...
CVE-2024-49995
CVE-2024-49995 affects Linux kernels and is described as a string buffer overrun in the TIPC subsystem. Public advisories (e.g., Siemens/ICS, CISA, and Amazon Linux livepatch notes) identify the issue as resolved by updating to patched kernel versions or applying kernel livepatches (e.g., 4.14.35...
SUSE CVE-2024-49860
In the Linux kernel, the following vulnerability has been resolved: ACPI: sysfs: validate return type of STR method Only buffer objects are valid return values of STR. If something else is returned descriptionshow will access invalid memory...
AZL-51017 CVE-2024-49860 affecting package kernel for versions less than 6.6.56.1-5
In the Linux kernel, the following vulnerability has been resolved: ACPI: sysfs: validate return type of STR method Only buffer objects are valid return values of STR. If something else is returned descriptionshow will access invalid memory...
CVE-2024-47742
CVE-2024-47742 : Linux kernel firmware_loader path traversal vulnerability. Several code paths construct firmware filenames from device or userspace data (e.g., lpfc_sli4_request_firmware_update, nfp_net_fw_find, module_flash_fw_schedule). The issue arises when dynamic firmware names can include ...
Exploit for Use of Externally-Controlled Format String in Fortinet Fortiproxy
CVE-2024-23113 The script is designed to detect CVE-2024-2311...
cJSON: OOB read in parse_string
Recording https://github.com/DaveGamble/cJSON/issues/800 here for historical purposes...
Malicious code in string-locale-compare (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-9870 Malicious code in string-locale-compare (npm)
--- -= Per source details. Do not edit below this line.=-...
kernel: firmware: cs_dsp: Use strnlen() on name fields in V1 wmfw files
A buffer overrun flaw exists in the Linux kernel when the strlen function is used on name fields in V1 wmfw files. This issue results in a loss of system availability...
Regular Expression Denial of Service (ReDoS)
Overview Affected versions of this package are vulnerable to Regular Expression Denial of Service ReDoS via the filteredquerystring function through the query parameter filtering process. By sending specially crafted query parameters, an attacker can cause the service to slow down or become...
libarchive:libarchive_fuzzer: Heap-buffer-overflow in archive_mstring_copy_mbs
Project: https://github.com/libarchive/libarchive.git Detailed Report: https://oss-fuzz.com/testcase?key=5142007711858688 Project: libarchive Fuzzing Engine: libFuzzer Fuzz Target: libarchivefuzzer Job Type: libfuzzerasanlibarchive Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash...
kernel: tipc: Return non-zero value from tipc_udp_addr2str() on error
A flaw was found in Linux kernel tipc. tipcudpaddr2str does not return a nonzero value when UDP media address is invalid, which can result in a buffer overflow in tipcmediaaddrprintf...