SUSE SLES15: libQt5Quick3D5 / libQt5Quick3DAssetImport5 / libqt5-qtquick3d-devel / etc (SUSE-SU-2024:3078-1)

The remote SUSE Linux SLES15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:3078-1 advisory. - CVE-2024-40724: Fixed heap-based buffer overflow in the PLY importer class in assimp bsc1228199 Other fixes: - Fix progressive...

SUSE-SU-2024:3078-1 Security update for libqt5-qtquick3d

This update for libqt5-qtquick3d fixes the following issues: - CVE-2024-40724: Fixed heap-based buffer overflow in the PLY importer class in assimp bsc1228199 Other fixes: - Fix progressive anti-aliasing, which doesn't work if any object in the scene used a PrincipledMaterial - Skip processing...

PT-2024-31561 · Oracle +1 · Mysql Server +1

Name of the Vulnerable Software and Affected Versions: HedgeDoc versions prior to 1.10.0 Description: HedgeDoc is an open source, real-time, collaborative, markdown notes application. When using HedgeDoc with MySQL or MariaDB, it is possible to create notes with an alias matching the ID of existi...

SUSE SLES15 Security Update : libqt5-qtquick3d (SUSE-SU-2024:2985-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2024:2985-1 advisory. - CVE-2024-40724: Fixed a heap-based buffer overflow in the PLY importer class bsc1228199 - Fixed progressive anti-aliasing, which doesn't work if any...

SUSE-SU-2024:2985-1 Security update for libqt5-qtquick3d

This update for libqt5-qtquick3d fixes the following issues: - CVE-2024-40724: Fixed a heap-based buffer overflow in the PLY importer class bsc1228199 - Fixed progressive anti-aliasing, which doesn't work if any object in the scene used a PrincipledMaterial - Fixed a crash when a custom...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that originates in the drm/amd/display module in dmlcoremodeprogramming, where &modelib-p.Watermark and &locals-Watermark ar...

UBUNTU-CVE-2024-35917

In the Linux kernel, the following vulnerability has been resolved: s390/bpf: Fix bpfplt pointer arithmetic Kui-Feng Lee reported a crash on s390x triggered by the dummystops/dummyinitptrarg test 1: 0x2 bpfstructopstestrun+0x156/0x250 sysbpf+0xa1a/0xd00 s390xsysbpf+0x44/0x50 dosyscall+0x244/0x300...

The vulnerability in the upload_firmware.cgi function of D-Link DIR-823G router software allows a hacker to induce a service failure.

The vulnerability of the uploadfirmware.cgi function in D-Link DIR-823G router microprogramming software is related to pointer aliasing errors. Exploiting this vulnerability can allow a malicious actor to cause service failure remotely...

The vulnerability of the SAML components in Ivanti Connect Secure and Ivanti Policy Secure network access control tools allows a perpetrator to trigger a service failure.

The vulnerability of the SAML components in Ivanti Connect Secure and Ivanti Policy Secure network access control tools is related to pointer aliasing errors. Exploiting this vulnerability could allow a malicious actor to trigger service failure remotely...

The vulnerability of the IPSec components of Ivanti Connect Secure and Ivanti Policy Secure network access control tools allows a hacker to trigger a service failure.

The vulnerability of the IPSec components of Ivanti Connect Secure and Ivanti Policy Secure network access control tools is related to pointer aliasing errors. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...

The vulnerability of the IEEE 1609.2 plugin-based network traffic analyzer Wireshark allows a hacker to induce a service failure.

The vulnerability of the IEEE 1609.2 plugin-based network traffic analyzer Wireshark involves pointer aliasing errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the ACEManager component in the ALEOS operating system of Sierra Wireless’ wireless routers—MP70, RV50x, RV55, LX40, LX60 ES450, GX450—allows a hacker to cause service interruptions.

The vulnerability of the ACEManager component in the ALEOS operating system of Sierra Wireless’ wireless routers—MP70, RV50x, RV55, LX40, LX60 ES450, GX450—is related to pointer aliasing errors. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the Mutt mail client, related to errors in pointer aliasing, allows a hacker to trigger a service failure.

The vulnerability of the Mutt mail client is related to errors in pointer manipulation when processing message headers. Exploiting this vulnerability can allow an attacker to cause a service failure...

krb5 -- Double-free in KDC TGS processing

The MIT krb5 Team reports: When issuing a ticket for a TGS renew or validate request, copy only the server field from the outer part of the header ticket to the new ticket. Copying the whole structure causes the encpart pointer to be aliased to the header ticket until krb5encrypttktpart is called...

The vulnerability of the ezxml_internal_dtd function in the XML document syntax analysis library ezXML allows a attacker to cause a service failure.

The vulnerability of the ezxmlinternaldtd function in the XML document syntax analysis library ezXML is related to pointer aliasing errors. Exploiting this vulnerability allows an attacker to trigger a service failure using a specially created XML file...

The vulnerability of the functions ezxml_str2utf8 and ezxmlParseStr in the ezxml.c component of the ezXML library for XML document syntax analysis allows a attacker to cause a service failure.

The vulnerability of the ezxmlstr2utf8 and ezxmlParseStr functions in the ezxml.c component of the ezXML XML syntax analysis library is related to pointer aliasing errors. Exploiting this vulnerability allows an attacker to trigger a service failure using a specially created XML file...

Node.js: Renaming/aliasing relative symbolic links potentially redirects them to supposedly inaccessible locations

Vulnerability description not provided...

Spring Data JPA introduces query parser!

The Problem One of Spring Data JPA’s handy features is letting you plugin in custom JPA queries through its @Query annotation. This allows some flexiblity because you are still able to offer sort parameters to the consumers of your app. Check out the example below: interface SampleRepository...

The vulnerability of the BIG-IP Access Policy Manager’s access control and remote authentication mechanism lies in errors during pointer assignment, allowing attackers to trigger an octath in the service.

The vulnerability of the BIG-IP Access Policy Manager’s access control and remote authentication mechanisms is related to pointer aliasing errors. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

SUSE CVE-2010-4698

Stack-based buffer overflow in the GD extension in PHP before 5.2.15 and 5.3.x before 5.3.4 allows context-dependent attackers to cause a denial of service application crash via a large number of anti-aliasing steps in an argument to the imagepstext function...