11777 matches found
CVE-2024-38562 wifi: nl80211: Avoid address calculations via out of bounds array indexing
In the Linux kernel, the following vulnerability has been resolved: wifi: nl80211: Avoid address calculations via out of bounds array indexing Before request-channels can be used, request-nchannels must be set. Additionally, address calculations for memory after the "channels" array need to be...
CVE-2024-38562
CVE-2024-38562 affects the Linux kernel wifi nl80211 implementation. The vulnerability arises from improper address calculations after memory allocation for the channels array: before using request->channels[], request->n_channels must be set, and address computations for memory after the c...
Linux kernel security vulnerabilities
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from address computation via out-of-bounds array indexing...
Linux kernel security vulnerabilities
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a security issue in speakup sizeof and ARRAYSIZE...
CVE-2024-38443
CVE-2024-38443 affects The Algorithms – C, specifically the binary_insertion_sort.c implementation across the e5dad3f release, where a segmentation fault occurs due to deep recursion. The impact is noted for common use cases like sorting an array of ~50 elements, implying potential stack overflow...
CVE-2024-38443
C/sorting/binaryinsertionsort.c in The Algorithms - C through e5dad3f has a segmentation fault for deep recursion, which may affect common use cases such as sorting an array of 50 elements...
openSUSE Security Advisory (SUSE-SU-2024:1980-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Updated poppler packages fix security vulnerability
Out-of-bounds array write. CVE-2024-4141...
CVE-2021-47308
In the Linux kernel, the following vulnerability has been resolved: scsi: libfc: Fix array index out of bound exception Fix array index out of bound exception in fcrportprliresp...
Important: postgresql
Issue Overview: While modifying certain SQL array values, missing overflow checks let authenticated database users write arbitrary bytes to a memory area that facilitates arbitrary code execution. Missing overflow checks also let authenticated database users read a wide area of server memory. The...
Oracle Linux 9 : libreoffice (ELSA-2024-3835)
The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-3835 advisory. - Fix CVE-2023-6185 escape url passed to gstreamer - Fix CVE-2023-6186 check link target protocols - Resolves: rhbz2210193 CVE-2023-0950 Array Index...
SUSE-SU-2024:1980-1 Security update for poppler
This update for poppler fixes the following issues: - CVE-2024-4141: Fixed out-of-bounds array write bsc1223375...
SUSE SLED15 / SLES15 Security Update : poppler (SUSE-SU-2024:1967-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2024:1967-1 advisory. - CVE-2024-4141: Fixed out-of-bounds array write bsc1223375. Tenable has extracted the preceding description block...
SUSE-SU-2024:1967-1 Security update for poppler
This update for poppler fixes the following issues: - CVE-2024-4141: Fixed out-of-bounds array write bsc1223375...
AZL-42439 CVE-2024-5585 affecting package php for versions less than 8.3.8-1
In PHP versions 8.1. before 8.1.29, 8.2. before 8.2.20, 8.3. before 8.3.8, the fix for CVE-2024-1874 does not work if the command name includes trailing spaces. Original issue: when using procopen command with array syntax, due to insufficient escaping, if the arguments of the executed command ar...
SUSE CVE-2024-26758
In the Linux kernel, the following vulnerability has been resolved: md: Don't ignore suspended array in mdcheckrecovery mddevsuspend never stop syncthread, hence it doesn't make sense to ignore suspended array in mdcheckrecovery, which might cause syncthread can't be unregistered. After commit...
CVE-2024-36732
An issue in OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of Service DoS when an empty array is processed with oneflow.tensordot...
CVE-2024-36743
An issue in OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of Service DoS when an empty array is processed with oneflow.dot...
