DEBIAN-CVE-2024-26988

In the Linux kernel, the following vulnerability has been resolved: init/main.c: Fix potential staticcommandline memory overflow We allocate memory of size 'xlen + strlenbootcommandline + 1' for staticcommandline, but the strings copied into staticcommandline are extracommandline and commandline,...

Debian dla-3805 : libqt5concurrent5 - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3805 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3805-1 [email protected]...

zstd: mysql: buffer overrun in util.c

A vulnerability was found in zstd. This flaw allows an attacker to supply an empty string as an argument to the command line tool to cause a buffer overrun...

kernel: samples/bpf: Fix buffer overflow in tcp_basertt

A buffer overflow was found in the BPF sample code tcpbasertt. Incorrect buffer size calculation could cause out-of-bounds writes when copying string data...

CVE-2024-31837

DMitry Deepmagic Information Gathering Tool 1.3a has a format-string vulnerability, with a threat model similar to CVE-2017-7938...

CVE-2024-31837

DMitry Deepmagic Information Gathering Tool 1.3a has a format-string vulnerability, with a threat model similar to CVE-2017-7938...

DEBIAN-CVE-2024-31837

DMitry Deepmagic Information Gathering Tool 1.3a has a format-string vulnerability, with a threat model similar to CVE-2017-7938...

UBUNTU-CVE-2024-31837

DMitry Deepmagic Information Gathering Tool 1.3a has a format-string vulnerability, with a threat model similar to CVE-2017-7938...

SUSE CVE-2022-48661

In the Linux kernel, the following vulnerability has been resolved: gpio: mockup: Fix potential resource leakage when register a chip If creation of software node fails, the locally allocated string array is left unfreed. Free it on error path...

DMitry security vulnerabilities

DMitry is a Deepmagic Information Gathering Tool by the individual developer J Greig in the UK. A security vulnerability exists in DMitry Deepmagic Information Gathering Tool version 1.3a, which stems from the presence of a format string vulnerability...

CVE-2024-31837

DMitry Deepmagic Information Gathering Tool 1.3a has a format-string vulnerability, with a threat model similar to CVE-2017-7938...

CVE-2024-31837: Use of Externally-Controlled Format String

DMitry Deepmagic Information Gathering Tool 1.3a has a format-string vulnerability, with a threat model similar to CVE-2017-7938...

CVE-2024-31837

DMitry Deepmagic Information Gathering Tool 1.3a has a format-string vulnerability, with a threat model similar to CVE-2017-7938...

PT-2024-40742 · Git +1 · Libredwg

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-use-after-free error, specifically a WRITE 11 crash type. The crash state involves json fixed string, json RNUMBER Header,...

CVE-2024-31837

DMitry Deepmagic Information Gathering Tool 1.3a has a format-string vulnerability, with a threat model similar to CVE-2017-7938...

CVE-2024-31837

The DMitry (Deepmagic Information Gathering Tool) version 1.3a is affected by a format-string vulnerability , which follows a threat model similar to CVE-2017-7938 . This flaw allows for potential unauthorized access or system manipulation. For Debian 11 bullseye users, the issue is addressed in ...

PT-2024-24234

Name of the Vulnerable Software and Affected Versions DMitry Deepmagic Information Gathering Tool version 1.3a Description The issue is a format-string vulnerability. It has a threat model similar to other known format-string vulnerabilities. Recommendations For DMitry Deepmagic Information...

CVE-2024-31837

DMitry Deepmagic Information Gathering Tool 1.3a has a format-string vulnerability, with a threat model similar to CVE-2017-7938...

Fedora 40 : abseil-cpp (2024-bb70b21754)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-bb70b21754 advisory. Update to 20240116.2: fixes possible out-of-bounds string access as described in https://github.com/abseil/abseil-cpp/pull/1650. Tenable has extracted the...

emdns security vulnerabilities

emdns is a DNS software by the individual developer Michael Santos. A security vulnerability exists in versions prior to emdns be565c3, which stems from emdnsresolveraw in emdns.c calling strlen via fbd1eef, whose input may not terminate with a termination, resulting in an over-read of a...