CVE-2024-28835

A flaw has been discovered in GnuTLS where an application crash can be induced when attempting to verify a specially crafted .pem bundle using the "certtool --verify-chain" command...

EulerOS Virtualization 2.11.0 : glibc (EulerOS-SA-2024-1426)

According to the versions of the glibc packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in glibc. In an extremely rare situation, the getaddrinfo function may access memory that has been freed, resulti...

EulerOS Virtualization 2.9.0 : libtiff (EulerOS-SA-2024-1471)

According to the versions of the libtiff package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An issue was found in the tiffcp utility distributed by the libtiff package where a crafted TIFF file on processing may cause a...

MGASA-2024-0076 Updated qpdf packages fix security vulnerability

Heap Buffer Overflow vulnerability in qpdf 11.9.0 allows attackers to crash the application via the std::sharedcount function at /bits/sharedptrbase.h. CVE-2024-24246...

CVE-2024-28286

In mz-automation libiec61850 v1.4.0, a NULL Pointer Dereference was detected in the mmsServerhandleFileCloseRequest.c function of src/mms/isomms/server/mmsfileservice.c. The vulnerability manifests as SEGV and causes the application to crash...

CVE-2024-28286

In mz-automation libiec61850 v1.4.0, a NULL Pointer Dereference was detected in the mmsServerhandleFileCloseRequest.c function of src/mms/isomms/server/mmsfileservice.c. The vulnerability manifests as SEGV and causes the application to crash...

PT-2024-7570 · Unknown · Libiec61850

Name of the Vulnerable Software and Affected Versions: libiec61850 version 1.4.0 Description: A NULL Pointer Dereference issue was detected in the mmsServer handleFileCloseRequest.c function of src/mms/iso mms/server/mms file service.c, which can cause the application to crash due to a SEGV. The...

CVE-2024-28286

Summary: CVE-2024-28286 affects mz-automation’s libiec61850 v1.4.0. A NULL pointer dereference is triggered in mmsServer_handleFileCloseRequest.c (src/mms/iso_mms/server/mms_file_service.c), leading to a SEGV and application crash. Multiple sources (NVD, Red Hat, OSV, CVE listings, CNNVD, CVE enr...

CVE-2024-28286

In mz-automation libiec61850 v1.4.0, a NULL Pointer Dereference was detected in the mmsServerhandleFileCloseRequest.c function of src/mms/isomms/server/mmsfileservice.c. The vulnerability manifests as SEGV and causes the application to crash...

Advisory ROSA-SA-2024-2376

Software: dav1d 1.3.0 AXIS: ROSA-CHROME packageevrstring: dav1d-1.3.0-1.src.rpm CVE-ID: CVE-2023-32570 BDU-ID: None CVE-Crit: MEDIUM CVE-DESC.: VideoLAN dav1d has a threadtask.c race condition that could cause an application crash associated with dav1ddecodeframeexit. CVE-STATUS: Fixed CVE-REV: T...

GHSA-6V85-WR92-Q4P7 Denial of Service (DoS) Vulnerability Due to Unsafe Array Modification in Multi-threaded Environment

Summary An attacker can exploit a critical flaw in the application to initiate a Denial of Service DoS attack, rendering the application inoperable and affecting all users. The issue arises from unsafe manipulation of an array in a multi-threaded environment. Details The vulnerability is rooted i...

Denial of Service (DoS) Vulnerability Due to Unsafe Array Modification in Multi-threaded Environment

Summary An attacker can exploit a critical flaw in the application to initiate a Denial of Service DoS attack, rendering the application inoperable and affecting all users. The issue arises from unsafe manipulation of an array in a multi-threaded environment. Details The vulnerability is rooted i...

CVE-2024-2446

Mattermost versions 8.1.x before 8.1.10, 9.2.x before 9.2.6, 9.3.x before 9.3.2, and 9.4.x before 9.4.3 fail to limit the number of @-mentions processed per message, allowing an authenticated attacker to crash the client applications of other users via large, crafted messages...

CVE-2024-2446

Mattermost versions 8.1.x before 8.1.10, 9.2.x before 9.2.6, 9.3.x before 9.3.2, and 9.4.x before 9.4.3 fail to limit the number of @-mentions processed per message, allowing an authenticated attacker to crash the client applications of other users via large, crafted messages...

CVE-2024-24975

Mattermost Mobile: CVE-2024-24975 affects Mattermost Mobile before 2.13.0. The issue is uncontrolled resource consumption caused by the syntax highlighter not limiting the size of code blocks, which can crash the mobile app. Affected component is the syntax highlighter in Mattermost Mobile; root ...

Mattermost Mobile Uncontrolled Resource Consumption Vulnerability

Mattermost Mobile is a team collaboration and communication tool that supports cross-platform use. Mattermost Mobile suffers from an uncontrolled resource consumption vulnerability that can be exploited by an attacker to crash the mobile application by sending very large chunks of code...

Denial Of Service (DOS)

libmicrohttpd.so is vulnerable to Denial of service attack. The vulnerability is due to an out-of-bounds memory read flaw in the MHDhttpunescape function within libmicrohttpd. This could potentially lead to information disclosure or enable a remote attacker to cause an application crash...

Denial Of Service

libmad.so is vulnerable to Denial Of Service. The vulnerability is due to the madlayerIII function in layer3.c when processing a crafted audio file, resulting in a heap-based buffer overflow and possible application crash...

Out-of-bounds Read

libraw.so is vulnerable to an out-of-bounds read. The vulnerability is due to the kodak65000loadraw function within dcraw.c and dcrawcommon.cpp using unchecked index to access the curve array, potentially leading to accessing memory outside the array's valid range. This issue could allow an...

EulerOS Virtualization 2.10.0 : glibc (EulerOS-SA-2024-1378)

According to the versions of the glibc packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in glibc. In an extremely rare situation, the getaddrinfo function may access memory that has been freed, resulti...