3523 matches found
CVE-2024-41038
In the Linux kernel, the following vulnerability has been resolved: firmware: csdsp: Prevent buffer overrun when processing V2 alg headers Check that all fields of a V2 algorithm header fit into the available firmware data buffer. The wmfw V2 format introduced variable-length strings in the...
AZL-47489 CVE-2024-41038 affecting package kernel for versions less than 6.6.43.1-7
In the Linux kernel, the following vulnerability has been resolved: firmware: csdsp: Prevent buffer overrun when processing V2 alg headers Check that all fields of a V2 algorithm header fit into the available firmware data buffer. The wmfw V2 format introduced variable-length strings in the...
UBUNTU-CVE-2024-41038
In the Linux kernel, the following vulnerability has been resolved: firmware: csdsp: Prevent buffer overrun when processing V2 alg headers Check that all fields of a V2 algorithm header fit into the available firmware data buffer. The wmfw V2 format introduced variable-length strings in the...
CVE-2024-41038 firmware: cs_dsp: Prevent buffer overrun when processing V2 alg headers
In the Linux kernel, the following vulnerability has been resolved: firmware: csdsp: Prevent buffer overrun when processing V2 alg headers Check that all fields of a V2 algorithm header fit into the available firmware data buffer. The wmfw V2 format introduced variable-length strings in the...
CVE-2024-41038 firmware: cs_dsp: Prevent buffer overrun when processing V2 alg headers
In the Linux kernel, the following vulnerability has been resolved: firmware: csdsp: Prevent buffer overrun when processing V2 alg headers Check that all fields of a V2 algorithm header fit into the available firmware data buffer. The wmfw V2 format introduced variable-length strings in the...
CVE-2024-41038
In the Linux kernel, the following vulnerability has been resolved: firmware: csdsp: Prevent buffer overrun when processing V2 alg headers Check that all fields of a V2 algorithm header fit into the available firmware data buffer. The wmfw V2 format introduced variable-length strings in the...
CVE-2024-41038: Buffer Copy without Checking Size of Input
In the Linux kernel, the following vulnerability has been resolved: firmware: csdsp: Prevent buffer overrun when processing V2 alg headers Check that all fields of a V2 algorithm header fit into the available firmware data buffer. The wmfw V2 format introduced variable-length strings in the...
Fedora 40 : tcpreplay (2024-ecd4cc8435)
The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-ecd4cc8435 advisory. Announcing v4.5.1 This release contains contributions from a record number of new contributors. This is greatly appreciated since I am a team of one, and do...
CVE-2024-40633
Sylius is an Open Source eCommerce Framework on Symfony. A security vulnerability was discovered in the /api/v2/shop/adjustments/id endpoint, which retrieves order adjustments based on incremental integer IDs. The vulnerability allows an attacker to enumerate valid adjustment IDs and retrieve ord...
PT-2024-28954
Name of the Vulnerable Software and Affected Versions Sylius versions prior to 1.12.19 Sylius versions prior to 1.13.4 Description A security issue was discovered in the "/api/v2/shop/adjustments/id" endpoint, which retrieves order adjustments based on incremental integer IDs. The issue allows an...
Target Device Fails to Boot on Hyper-V V2
Provisioning Service Target Devices fails to boot when launched from a HyperV v2 host other than the host where the Provisioning Service Server is located...
Realtek AP-Router SDK Input Validation Error Vulnerability
The Realtek AP-Router SDK is a software package for wireless chipsets from Realtek Semiconductor Realtek of China. An input validation error vulnerability exists in the Realtek AP-Router SDK, which stems from an integer overflow vulnerability in the boa updateConfigIntoFlash function, which can...
Realtek AP-Router SDK Security Vulnerability
Realtek AP-Router SDK is a software package for wireless chipsets from Realtek Semiconductor Realtek, a Chinese company. A security vulnerability exists in the Realtek AP-Router SDK that stems from a stack-based buffer overflow vulnerability in the boa formRoute feature, which can lead to remote...
New Intel CPU Vulnerability 'Indirector' Exposes Sensitive Data
Modern CPUs from Intel, including Raptor Lake and Alder Lake, have been found vulnerable to a new side-channel attack that could be exploited to leak sensitive information from the processors. The attack, codenamed Indirector by security researchers Luyi Li, Hosein Yavarzadeh, and Dean Tullsen,...
CLSA-2024-1719568080 Fix CVE(s): CVE-2021-33631, CVE-2021-47545, CVE-2024-2201, CVE-2024-26642
CVE-url: https://ubuntu.com/security/CVE-2024-2201 - x86/cpufeatures: Add CPUIDLNX5 to track recently added Linux-defined word - x86/bugs: Change commas to semicolons in 'spectrev2' sysfs file - x86/bhi: Add support for clearing branch history at syscall entry - x86/bhi: Define SPECCTRLBHIDISS -...
PT-2024-29219
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a buffer overrun when processing V2 algorithm headers in the Linux kernel's firmware, specifically in the cs dsp module. The wmfw V2 format introduces...
MAL-2024-5902 Malicious code in requests-toolbelt-v2 (PyPI)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in ZendeskApi.Client.V2 (NuGet)
--- -= Per source details. Do not edit below this line.=-...