OESA-2024-1498 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: crypto: qcom-rng - ensure buffer for generate is completely filled The generate function in struct rngalg expects that the destination buffer is completely fille...

Envoy proxy server Heap Buffer Overflow DoS

The vulnerability of the Envoy proxy server is related to improper checking of the error value of the pointer. Exploiting this vulnerability can allow a malicious actor to cause an unexpected termination of the application...

PT-2024-6595

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the use of an uninitialized value size when calling amdgpu vce cs reloc in the drm/amdgpu module. This could potentially impact the confidentiality, integrity,...

CVE-2024-32883: Improper Validation of Integrity Check Value

MCUboot is a secure bootloader for 32-bits microcontrollers. MCUboot uses a TLV tag-length-value structure to represent the meta data associated with an image. The TLVs themselves are divided into two sections, a protected and an unprotected section. The protected TLV entries are included as part...

imagemagick:encoder_jxl_fuzzer: Use-of-uninitialized-value in jxl::RenderPipeline::InputReady

Detailed Report: https://oss-fuzz.com/testcase?key=6261165370966016 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderjxlfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: jxl::RenderPipeline::InputReady...

CVE-2022-36029 BigBlueButton Greenlight Open Redirect vulnerability

Greenlight is an end-user interface for BigBlueButton servers. Versions prior to 2.13.0 have an open redirect vulnerability in the Login page due to unchecked the value of the returnto cookie. Versions 2.13.0 contains a patch for the issue...

HTML attributes vs DOM properties

Attributes and properties are fundamentally different things. You can have an attribute and property of the same name set to different values. For example: … const div = document.querySelector'divfoo=bar'; console.logdiv.getAttribute'foo'; // 'bar' console.logdiv.foo; // undefined div.foo = 'hell...

PT-2024-25302

Name of the Vulnerable Software and Affected Versions lua-resty-jwt version 0.2.3 Description The issue allows attackers to bypass all JWT-parsing signature checks by crafting a JWT with an enc header with the value A256GCM. This enables them to potentially access unauthorized resources or perfor...

Earth Hundun’s Deuterbear Sets Sights on High-Value Sectors

...

SUSE CVE-2023-40548

A buffer overflow was found in Shim in the 32-bit system. The overflow happens due to an addition operation involving a user-controlled value parsed from the PE binary being used by Shim. This value is further used for memory allocation operations, leading to a heap-based buffer overflow. This fl...

CVE-2022-46897

An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. The CapsuleIFWUSmm driver does not check the return value from a method or function. This can prevent it from detecting unexpected states and conditions...

CVE-2022-46897

An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. The CapsuleIFWUSmm driver does not check the return value from a method or function. This can prevent it from detecting unexpected states and conditions...

imagemagick:encoder_mpo_fuzzer: Use-of-uninitialized-value in LocaleNCompare

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5187143476510720 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encodermpofuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Cra...

CVE-2022-46897

An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. The CapsuleIFWUSmm driver does not check the return value from a method or function. This can prevent it from detecting unexpected states and conditions...

CVE-2022-46897

A vulnerability exists in Insyde InsydeH2O (kernels 5.0 through 5.5 ) within the CapsuleIFWUSmm driver. The root cause is the driver failing to check return values from specific methods or functions, which can prevent the system from detecting unexpected states and conditions . As a temporary wor...

CVE-2022-46897: Unchecked Return Value

An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. The CapsuleIFWUSmm driver does not check the return value from a method or function. This can prevent it from detecting unexpected states and conditions...

hdf5:h5_extended_fuzzer: Use-of-uninitialized-value in H5FL__blk_gc_list

Project: https://github.com/HDFGroup/hdf5.git Detailed Report: https://oss-fuzz.com/testcase?key=5486819903864832 Project: hdf5 Fuzzing Engine: libFuzzer Fuzz Target: h5extendedfuzzer Job Type: libfuzzermsanhdf5 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

pcapplusplus:FuzzWriterNg: Use-of-uninitialized-value in light_read_record

Detailed Report: https://oss-fuzz.com/testcase?key=6577238347677696 Project: pcapplusplus Fuzzing Engine: libFuzzer Fuzz Target: FuzzWriterNg Job Type: libfuzzermsanpcapplusplus Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: lightreadrecord lightpcapngopenre...

pcapplusplus:FuzzTargetNg: Use-of-uninitialized-value in pcpp::PcapNgFileReaderDevice::getNextPacket

Detailed Report: https://oss-fuzz.com/testcase?key=5207334637862912 Project: pcapplusplus Fuzzing Engine: libFuzzer Fuzz Target: FuzzTargetNg Job Type: libfuzzermsanpcapplusplus Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

OESA-2024-1487 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: uiohvgeneric: Fix another memory leak in error handling paths Memory allocated by 'vmbusallocring' at the beginning of the probe function is never freed in the...