SUSE-SU-2025:0019-1 Security update for sysstat

This update for sysstat fixes the following issues: - CVE-2023-33204: Fixed a multiplication integer overflow in checkoverflow in common.c bsc1211507 - CVE-2022-39377: Fixed arithmetic overflow in allocatestructures bsc1205224...

SUSE SLES12 Security Update : sysstat (SUSE-SU-2025:0012-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:0012-1 advisory. - CVE-2023-33204: Fixed a multiplication integer overflow in checkoverflow in common.c bsc1211507 - CVE-2022-39377: Fixed arithmetic overflow i...

Security update for sysstat

This update for sysstat fixes the following issues: CVE-2023-33204: Fixed a multiplication integer overflow in checkoverflow in common.c bsc1211507 CVE-2022-39377: Fixed arithmetic overflow in allocatestructures bsc1205224 Patch Instructions: To install this SUSE update use the SUSE recommended...

SUSE-SU-2025:0012-1 Security update for sysstat

This update for sysstat fixes the following issues: - CVE-2023-33204: Fixed a multiplication integer overflow in checkoverflow in common.c bsc1211507 - CVE-2022-39377: Fixed arithmetic overflow in allocatestructures bsc1205224...

CVE-2024-56702

In the Linux kernel, the following vulnerability has been resolved: bpf: Mark rawtp arguments with PTRMAYBENULL Arguments to a raw tracepoint are tagged as trusted, which carries the semantics that the pointer will be non-NULL. However, in certain cases, a raw tracepoint argument may end up being...

CVE-2024-51540

Dell ECS, versions prior to 3.8.1.3 contains an arithmetic overflow vulnerability exists in retention period handling of ECS. An authenticated user with bucket or object-level access and the necessary privileges could potentially exploit this vulnerability to bypass retention policies and delete...

CVE-2024-51540

CVE-2024-51540 affects Dell ECS (Elastic Cloud Storage). The vulnerability is an arithmetic overflow in the retention period handling logic, impacting ECS versions prior to 3.8.1.3. An authenticated user with bucket/object-level privileges could potentially bypass retention policies and delete ob...

CVE-2024-51540

Dell ECS, versions prior to 3.8.1.3 contains an arithmetic overflow vulnerability exists in retention period handling of ECS. An authenticated user with bucket or object-level access and the necessary privileges could potentially exploit this vulnerability to bypass retention policies and delete...

CVE-2024-51540

Dell ECS, versions prior to 3.8.1.3 contains an arithmetic overflow vulnerability exists in retention period handling of ECS. An authenticated user with bucket or object-level access and the necessary privileges could potentially exploit this vulnerability to bypass retention policies and delete...

The vulnerabilities of the functions mtk_topckgen_init(), mtk_infrasys_init_early(), and mtk_infrasys_init() of the clk-mt6797 component in Linux operating systems allow a hacker to cause a service failure.

The vulnerabilities of the functions mtktopckgeninit, mtkinfrasysinitearly, and mtkinfrasysinit of the clk-mt6797 kernel component in Linux operating systems are related to pointer arithmetic errors. Exploiting these vulnerabilities can allow attackers to cause system failures...

The vulnerability of the functions clk_mt6765_apmixed_probe(), clk_mt6765_top_probe(), and clk_mt6765_ifr_probe() of the clk-mt6765 component in Linux operating systems allows a hacker to cause system failures.

The vulnerability of the functions clkmt6765apmixedprobe, clkmt6765topprobe, and clkmt6765ifrprobe of the clk-mt6765 component in Linux operating systems is related to a pointer arithmetic error. Exploiting this vulnerability can allow an attacker to cause a system failure...

kernel: local privileges escalation in kernel/bpf/verifier.c

A flaw was found in the Linux kernel's adjustptrminmaxvals in the kernel/bpf/verifier.c function. In this flaw, a missing sanity check for ORNULL pointer types that perform pointer arithmetic may cause a kernel information leak issue...

The vulnerability of the wx_sw_init() function in the wangxun component of Linux operating systems allows a hacker to cause a service failure.

The vulnerability of the wxswinit function in the wangxun component of Linux operating systems is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of Palo Alto Networks’ operating system PAN-OS, related to pointer arithmetic errors, allows a hacker to trigger a service failure.

The vulnerability of Palo Alto Networks’ operating system PAN-OS relates to pointer arithmetic errors. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

The vulnerability of the Linux operating system’s kernel, related to pointer arithmetic errors, allows a hacker to trigger a service failure.

The vulnerability of the Linux operating system’s kernel is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the kasprintf() function in the arch/powerpc/mm/init-common.c file of the Linux kernel, related to pointer arithmetic errors, allows a malicious actor to trigger a system failure.

The vulnerability of the kasprintf function in the arch/powerpc/mm/init-common.c file of the Linux kernel is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to cause a system failure...

Vulnerability of HTTP server and IP telephony services (Cisco IOS XE operating system’s Telephony Service, allowing attackers to trigger a service failure)

The vulnerability of the HTTP-server and IP-telephony services of the Cisco IOS XE operating system is related to pointer arithmetic errors. Exploiting this vulnerability allows a malicious actor to cause service failures by sending specially crafted HTTP packets...

The vulnerability of the ip_ra_control function in the net/ipv4/ip_sockglue.c component of the Linux operating system, related to pointer dereferencing errors, allows a hacker to trigger a service failure.

The vulnerability of the ipracontrol function in the net/ipv4/ipsockglue.c component of the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the `avpriv_ac3_parse_header` function in the `libavcodec/ac3_parser.c` file of the FFmpeg multimedia library, related to pointer manipulation errors, allows attackers to cause a service failure.

The vulnerability of the avprivac3parseheader function in the libavcodec/ac3parser.c file of the FFmpeg multimedia library is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to cause a service failure by using a specially created AVI file...

The vulnerability of the fs/ntfs3 component in the Linux operating system, related to pointer arithmetic errors, allows a hacker to trigger a service failure.

The vulnerability of the fs/ntfs3 component in the Linux operating system is related to pointer swapping errors. Exploiting this vulnerability can allow an attacker to cause a service failure...