UBUNTU-CVE-2024-53148

In the Linux kernel, the following vulnerability has been resolved: comedi: Flush partial mappings in error case If some remappfnrange calls succeeded before one failed, we still have buffer pages mapped into the userspace page tables when we drop the buffer reference with comedibufmapputbm. The...

Mailbox Insecurity

It turns out that all cluster mailboxes in the Denver area have the same master key. So if someone robs a postal carrier, they can open any mailbox. I get that a single master key makes the whole system easier, but it's very fragile security...

The vulnerability of the formSetPortMapping function in the Tenda G3 wireless access point’s microprogramming software allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the formSetPortMapping function in the Tenda G3 wireless access point’s microprogramming software lies in the fact that the operation exceeds the buffer boundaries in memory when processing parameters such as pPortMapIndex, pLanIP, pProtocl, and pWanid. Exploiting this...

Medium: avahi

Issue Overview: avahi: Avahi Wide-Area DNS Uses Constant Source Port CVE-2024-52615 avahi: Avahi Wide-Area DNS Predictable Transaction IDs CVE-2024-52616 Affected Packages: avahi Note: This advisory is applicable to Amazon Linux 2 AL2 Core repository. Visit this FAQ section for the difference...

The vulnerability of the Wireless Wide Area Network Service (WwanSvc) in Microsoft Windows operating systems allows a hacker to increase their privileges.

The vulnerability of the Wireless Wide Area Network Service WwanSvc in Microsoft Windows operating systems is related to operations that go beyond the buffer limits in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the Wireless Wide Area Network Service (WwanSvc) in Microsoft Windows operating systems allows a hacker to increase their privileges.

The vulnerability of the Wireless Wide Area Network Service WwanSvc in Microsoft Windows operating systems is related to operations that go beyond the buffer limits in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...

net: wwan: fix global oob in wwan_rtnl_policy

...

CVE-2024-49111

Wireless Wide Area Network Service WwanSvc Elevation of Privilege Vulnerability...

CVE-2024-49111

Wireless Wide Area Network Service WwanSvc Elevation of Privilege Vulnerability...

CVE-2024-49109

Wireless Wide Area Network Service WwanSvc Elevation of Privilege Vulnerability...

CVE-2024-49103

Windows Wireless Wide Area Network Service WwanSvc Information Disclosure Vulnerability...

CVE-2024-49103

Windows Wireless Wide Area Network Service WwanSvc Information Disclosure Vulnerability...

CVE-2024-49098

Windows Wireless Wide Area Network Service WwanSvc Information Disclosure Vulnerability...

CVE-2024-49101

Wireless Wide Area Network Service WwanSvc Elevation of Privilege Vulnerability...

CVE-2024-49101

Wireless Wide Area Network Service WwanSvc Elevation of Privilege Vulnerability...

CVE-2024-49094

Wireless Wide Area Network Service WwanSvc Elevation of Privilege Vulnerability...

CVE-2024-49094

Wireless Wide Area Network Service WwanSvc Elevation of Privilege Vulnerability...

CVE-2024-49081

Wireless Wide Area Network Service WwanSvc Elevation of Privilege Vulnerability...

CVE-2024-49081

Wireless Wide Area Network Service WwanSvc Elevation of Privilege Vulnerability...

Medium: avahi

Issue Overview: avahi: Avahi Wide-Area DNS Uses Constant Source Port CVE-2024-52615 avahi: Avahi Wide-Area DNS Predictable Transaction IDs CVE-2024-52616 Affected Packages: avahi Issue Correction: Run dnf update avahi --releasever 2023.6.20241212 or dnf update --advisory ALAS2023-2024-771...