CVE-2024-42934: Missing Authorization

OpenIPMI before 2.0.36 has an out-of-bounds array access for authentication type in the ipmisim simulator, resulting in denial of service or with very low probability authentication bypass or code execution...

CVE-2024-42934

Versions of OpenIPMI prior to 2.0.36 are vulnerable to an out-of-bounds array access (described as a buffer overflow in some sources) within the ipmi_sim simulator . This issue stems from a missing check on the authorization type for incoming LAN messages. Successful exploitation can lead to a de...

PT-2024-7182

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to an out-of-bounds array access in the Linux kernel's hns3 network driver. Specifically, when querying the SSU register information, the loop iterates tnl num times...

kernel: scsi: qla2xxx: Fix off by one in qla_edif_app_getstats()

A vulnerability was found in the Linux kernel's qla2xxx SCSI driver, specifically in the qlaedifappgetstats function, where an off-by-one error in array access could lead to memory corruption. This issue affects the appreply-elem array, where an incorrect comparison allowed out-of-bounds access...

CVE-2024-42148 bnx2x: Fix multiple UBSAN array-index-out-of-bounds

In the Linux kernel, the following vulnerability has been resolved: bnx2x: Fix multiple UBSAN array-index-out-of-bounds Fix UBSAN warnings that occur when using a system with 32 physical cpu cores or more, or when the user defines a number of Ethernet queues greater than or equal to FPSBMAXE1x...

SUSE CVE-2024-6606

Clipboard code failed to check the index on an array access. This could have led to an out-of-bounds read. This vulnerability affects Firefox 128 and Thunderbird 128...

PT-2024-33772

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.6.58 Description: The issue is related to an array out-of-bounds access in the SoC stats of the wifi: ath11k module. The ath11k soc dp stats::hal reo error array is defined with a maximum size of DP REO DST RI...

CVE-2024-6606

Clipboard code failed to check the index on an array access. This could have led to an out-of-bounds read. This vulnerability affects Firefox 128 and Thunderbird 128...

CVE-2024-6606

Clipboard code failed to check the index on an array access. This could have lead to an out-of-bounds read. This vulnerability affects Firefox 128 and Thunderbird 128...

CVE-2024-6606 Out-of-bounds read in clipboard component

Clipboard code failed to check the index on an array access. This could have led to an out-of-bounds read. This vulnerability affects Firefox 128 and Thunderbird 128...

CVE-2024-6606

A vulnerability in the clipboard code of Firefox and Thunderbird allows for an out-of-bounds read because the software fails to verify the index during an array access. This flaw affects versions of Firefox and Thunderbird older than 128 . No specific exploit information or remediation details ar...

CVE-2024-6606: Out-of-bounds Read

Clipboard code failed to check the index on an array access. This could have led to an out-of-bounds read. This vulnerability affects Firefox 128 and Thunderbird 128...

CVE-2024-39462

In the Linux kernel, the following vulnerability has been resolved: clk: bcm: dvp: Assign -num before accessing -hws Commit f316cdff8d67 "clk: Annotate struct clkhwonecelldata with countedby" annotated the hws member of 'struct clkhwonecelldata' with countedby, which informs the bounds sanitizer...

USN-6813-1 openjdk-21 vulnerabilities

It was discovered that the Hotspot component of OpenJDK 21 incorrectly handled certain exceptions with specially crafted long messages. An attacker could possibly use this issue to cause a denial of service. CVE-2024-21011 It was discovered that OpenJDK 21 incorrectly performed reverse DNS query...

CVE-2024-36921: Improper Validation of Array Index

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: guard against invalid STA ID on removal Guard against invalid station IDs in iwlmvmmldrmstaid as that would result in out-of-bounds array accesses. This prevents issues should the driver get into a bad state...

CVE-2023-52793

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2024-35905: Improper Validation of Array Index

In the Linux kernel, the following vulnerability has been resolved: bpf: Protect against int overflow for stack access size This patch re-introduces protection against the size of access to stack memory being negative; the access size can appear negative as a result of overflowing its signed int...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that originates from an array access out-of-bounds in the checkstackrangeinitialized function...

CVE-2024-35813

In the Linux kernel, the following vulnerability has been resolved: mmc: core: Avoid negative index with array access Commit 4d0c8d0aef63 "mmc: core: Use mrq.sbc in close-ended ffu" assigns previdata = idatasi - 1, but doesn't check that the iterator i is greater than zero. Let's fix this by addi...

DEBIAN-CVE-2024-35813

In the Linux kernel, the following vulnerability has been resolved: mmc: core: Avoid negative index with array access Commit 4d0c8d0aef63 "mmc: core: Use mrq.sbc in close-ended ffu" assigns previdata = idatasi - 1, but doesn't check that the iterator i is greater than zero. Let's fix this by addi...