6100 matches found
CVE-2024-46748
In the Linux kernel, the following vulnerability has been resolved: cachefiles: Set the max subreq size for cache writes to MAXRWCOUNT Set the maximum size of a subrequest that writes to cachefiles to be MAXRWCOUNT so that we don't overrun the maximum write we can make to the backing filesystem...
Linux Kernel Security Vulnerabilities
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a contention between direct IO writes and fsync when the same fd is used...
Linux Kernel Security Vulnerabilities
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from allowing out-of-bounds writes...
NGINX Agent demon config_dirs Write File
The vulnerability of the configdirs function in the NGINX Agent demon and the NGINX Instance Manager platform relates to the ability to load arbitrary files beyond the expected directory path. Exploiting this vulnerability allows a malicious actor to write or rewrite arbitrary files remotely...
PT-2024-7629 · Sophos · Sophos Intercept X
Name of the Vulnerable Software and Affected Versions: Sophos Intercept X for Windows with Central Device Encryption versions 2024.2.0 and earlier Description: A local privilege escalation vulnerability in Sophos Intercept X for Windows with Central Device Encryption allows writing of arbitrary...
Adobe After Effects buffer error vulnerability
Adobe After Effects is a suite of visual effects and motion graphics production software from the American company Audobee Adobe. The software is mainly used for 2D and 3D compositing, animation and visual effects production. A buffer error vulnerability exists in Adobe After Effects, which stems...
Wibu-Systems WibuKey security vulnerability
Wibu-Systems WibuKey is a digital rights management DRM system from Wibu-Systems, Germany. A security vulnerability exists in Wibu-Systems WibuKey versions prior to 6.70, which arises from a boundary check that allows specially crafted packets to result in arbitrary address writes, and thus kerne...
CVE-2024-45593
CVE-2024-45593 affects the Nix package manager. A bug in Nix 2.24 prior to 2.24.6 lets a substituter or malicious user craft a NAR that, when unpacked by Nix, writes to arbitrary filesystem locations accessible to the Nix process, with root privileges when using the Nix daemon. Multiple connected...
CVE-2024-42416
The ctlreportsupportedopcodes function did not sufficiently validate a field provided by userspace, allowing an arbitrary write to a limited amount of kernel help memory. Malicious software running in a guest VM that exposes virtioscsi can exploit the vulnerabilities to achieve code execution on...
FreeBSD security vulnerabilities
FreeBSD is a set of Unix-like operating systems from the FreeBSD Foundation. A security vulnerability exists in FreeBSD that stems from the ctlreportsupportedopcodes function not adequately validating user-space-supplied fields, allowing arbitrary writes to a limited amount of kernel helper memor...
PT-2024-32197
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.52 Description A use-after-free bug was found in the Linux kernel's nilfs2 file system. The bug occurs when data recovery is performed using partial logs created by dsync writes, but an error occurs before...
Out-Of-Bounds Writes
TensorFlow is vulnerable to out-of-bounds writes. The vulnerability is due to the improper handling of negative elements in the segment ids tensor, allowing negative values that result in out-of-bounds memory writes during the segment sum operation...
CVE-2024-43885
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
CVE-2024-43885
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
PT-2024-30742
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a double inode unlock for direct IO sync writes in the btrfs file system. When a direct IO sync write is performed at btrfs sync file, and inode logging needs to ...
PT-2024-40128 · Unknown · Unzip-Stream
Name of the Vulnerable Software and Affected Versions: unzip-stream versions prior to 0.3.2 Description: The issue allows malicious zip files to write to unauthorized paths when using the Extract method of unzip-stream. A researcher from Google, Justin Taft, discovered this issue. Recommendations...
SUSE CVE-2024-43854
In the Linux kernel, the following vulnerability has been resolved: block: initialize integrity buffer to zero before writing it to media Metadata added by biointegrityprep is using plain kmalloc, which leads to random kernel memory being written media. For PI metadata this is limited to the app...
CVE-2024-43854
In the Linux kernel, the following vulnerability has been resolved: block: initialize integrity buffer to zero before writing it to media Metadata added by biointegrityprep is using plain kmalloc, which leads to random kernel memory being written media. For PI metadata this is limited to the app...