openSUSE: Security Advisory for frr (SUSE-SU-2024:3524-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security update for frr

This update for frr fixes the following issue: Arithmetic overflow when parsing attribute of update packet due to regression introduced by the fix for CVE-2017-15865. bsc1230866 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or...

SUSE-SU-2024:3524-1 Security update for frr

This update for frr fixes the following issue: - Arithmetic overflow when parsing attribute of update packet due to regression introduced by the fix for CVE-2017-15865. bsc1230866...

The vulnerability of the block_dirty_buffer component in the NILFS file system of Linux operating systems allows a attacker to trigger a service failure.

The vulnerability of the blockdirtybuffer component in the NILFS file system of Linux operating systems is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

kernel: crypto: bcm - Fix pointer arithmetic

In the Linux kernel, the following vulnerability has been resolved: crypto: bcm - Fix pointer arithmetic In spu2dumpomd value of ptr is increased by ciphkeylen instead of hashivlen which could lead to going beyond the buffer boundaries. Fix this bug by changing ciphkeylen to hashivlen. Found by...

The vulnerability of the image_load_jpeg() function in the image.cxx component of the HTMLDOC document conversion tool involves pointer arithmetic errors. This allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the imageloadjpeg function in the image.cxx component of the HTMLDOC conversion tool is related to pointer dereferencing errors. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures...

The vulnerability of the H5T__complete_copy() function in the H5T.c file of the HDF5 library allows a hacker to induce a service failure.

The vulnerability of the H5Tcompletecopy function in the H5T.c file of the HDF5 library is related to the invocation of an arithmetic exception. Exploiting this vulnerability may allow a remote attacker to trigger a service failure...

Vulnerabilities of the functions fc_lport_ptp_setup(), fc_rport_create() in the Linux operating system, related to pointer arithmetic errors, allowing attackers to trigger service denial.

The vulnerabilities of the functions fclportptpsetup, fcrportcreate in the Linux operating system are related to pointer arithmetic errors. Exploiting these vulnerabilities can allow attackers to cause service failures...

The vulnerability of the drivers/clk/mediatek/clk-mt7629.c component of the Linux operating system’s kernel, related to pointer arithmetic errors, allows attackers to cause a service failure.

The vulnerability of the drivers/clk/mediatek/clk-mt7629.c component of the Linux operating system’s kernel is related to pointer arithmetic errors. Exploiting this vulnerability allows an attacker to cause a system failure...

The vulnerability of the DRM/amdgpu cores in the Linux operating system, related to pointer swapping errors, allows a violator to trigger a service failure.

The vulnerability of the DRM/amdgpu cores in the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the Linux operating system’s kernel, related to pointer arithmetic errors, allows a hacker to trigger a service failure.

The vulnerability of the Linux operating system’s kernel is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the Linux operating system’s kernel, related to pointer arithmetic errors, allows a hacker to trigger a service failure.

The vulnerability of the Linux operating system’s kernel is related to pointer arithmetic errors. Exploiting this vulnerability allows an attacker to cause a service failure...

The vulnerability of the opal_powercap_init() function in the arch/powerpc/platforms/powernv/opal-powercap.c file of the Linux kernel, related to pointer arithmetic errors, allows a malicious actor to cause a service failure.

The vulnerability of the opalpowercapinit function in the arch/powerpc/platforms/powernv/opal-powercap.c file of the Linux kernel is related to pointer arithmetic errors. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability of the ALSA component of the Linux operating system’s kernel, related to pointer arithmetic errors, allows attackers to trigger a service failure.

The vulnerability of the ALSA component in Linux operating systems is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the drivers/gpu/drm/bridge/ite-it66121.c kernel component in the Linux operating system, related to pointer arithmetic errors, allows an attacker to cause a service failure.

The vulnerability of the driver/gpu/drm/bridge/ite-it66121.c kernel component in the Linux operating system is related to pointer dereferencing errors. Exploiting this vulnerability allows an attacker to cause a service failure...

Vulnerability of the amdgpu_vm_bo_update function in the drivers/gpu/drm/amd/amdgpu/amdgpu_vm.c file of the Linux kernel, related to pointer dereferencing errors, allowing attackers to cause service failures

The vulnerability of the amdgpuvmboupdate function in the drivers/gpu/drm/amd/amdgpu/amdgpuvm.c file of the Linux kernel is related to pointer arithmetic errors. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

ROS-20240912-01

A vulnerability in the H5Olayoutencode function in the H5Olayout.c file of the HDF5 library is related to an overflow of the buffer overflow in the heap. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of denial of service A vulnerability in the...

s390/bpf: Fix bpf_plt pointer arithmetic

...

The vulnerability of the Network Address Translation (NAT) technology implementation in Windows operating systems allows a hacker to induce a service failure.

The vulnerability of the Network Address Translation NAT technology in Windows operating systems is related to pointer arithmetic errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions from a remote location...

ALSA-2024:5306 Moderate: orc security update

Orc is a library and set of tools for compiling and executing very simple programs that operate on arrays of data. The "language" is a generic assembly language that represents many of the features available in SIMD architectures, including saturated addition and subtraction, and many arithmetic...