14887 matches found
PT-2024-33993
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.11.0-rc4+ Description: The issue is related to the Linux kernel's BPF Berkeley Packet Filter functionality, specifically with the repetition of BTF BPF Type Format fields for arrays of nested structs. The...
Linux Kernel Input Validation Vulnerability
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from inaccuracies in defining the AMDGPUDMUBNOTIFICATIONMAX value, which could lead to out-of-bounds access to...
CVE-2024-42934
OpenIPMI before 2.0.36 has an out-of-bounds array access for authentication type in the ipmisim simulator, resulting in denial of service or with very low probability authentication bypass or code execution...
CVE-2024-42934: Missing Authorization
OpenIPMI before 2.0.36 has an out-of-bounds array access for authentication type in the ipmisim simulator, resulting in denial of service or with very low probability authentication bypass or code execution...
SUSE-SU-2024:3547-1 Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-48911: kabi: add nfqueuegetrefs for kabi compliance. bsc1229633. - CVE-2022-48923: btrfs: prevent copying too big compressed lzo segment bsc1229662 -...
RUSTSEC-2024-0377 Heap Buffer overflow using c_chars_to_str function
The heap-buffer-overflow is triggered in the strlen function when handling the ccharstostr function in the dbn crate. This vulnerability occurs because the CStr::fromptr function in Rust assumes that the provided C string is null-terminated. However, there is no guarantee that the input chars arr...
CLSA-2024-1728297376 kernel: Fix of 13 CVEs
btrfs: fix use-after-free after failure to create a snapshot CVE-2022-48733 - hwmon: nct6775-core Fix underflows seen when writing limit attributes CVE-2024-46757 - wifi: mac80211: Avoid address calculations via out of bounds array indexing CVE-2024-41071 - netfilter: conntrack: dccp: copy entire...
CVE-2024-36474
An integer overflow vulnerability exists in the Compound Document Binary File format parser of the GNOME Project G Structured File Library libgsf version v1.14.52. A specially crafted file can result in an integer overflow when processing the directory from the file that allows for an out-of-boun...
CVE-2024-36474
An integer overflow vulnerability exists in the Compound Document Binary File format parser of the GNOME Project G Structured File Library libgsf version v1.14.52. A specially crafted file can result in an integer overflow when processing the directory from the file that allows for an out-of-boun...
CVE-2024-36474
Summary: CVE-2024-36474 affects the GNOME libgsf library (G Structured File Library), specifically the Compound Document Binary File format parser in version 1.14.52. A crafted file can trigger an integer overflow while processing the directory, allowing an out-of-bounds access and potentially ar...
CLSA-2024-1727816710 Fix of 60 CVEs
CVE-url: https://ubuntu.com/security/CVE-2024-26752 - l2tp: pass correct message length to ip6appenddata CVE-url: https://ubuntu.com/security/CVE-2023-52527 - ipv4, ipv6: Fix handling of transhdrlen in ip,6appenddata CVE-url: https://ubuntu.com/security/CVE-2024-43882 - exec: Fix ToCToU between...
kernel: wifi: mac80211: Avoid address calculations via out of bounds array indexing
No description is available for this CVE...
Important: Red Hat Security Advisory: kpatch-patch-5_14_0-284_52_1 and kpatch-patch-5_14_0-284_79_1 security update
An update for kpatch-patch-5140-284521 and kpatch-patch-5140-284791 is now available for Red Hat Enterprise Linux 9.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which give...
kernel: wifi: mac80211: Avoid address calculations via out of bounds array indexing
No description is available for this CVE...
Important: Red Hat Security Advisory: kpatch-patch-4_18_0-553 and kpatch-patch-4_18_0-553_16_1 security update
An update for kpatch-patch-4180-553 and kpatch-patch-4180-553161 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating,...
kernel: wifi: mac80211: Avoid address calculations via out of bounds array indexing
No description is available for this CVE...
Important: Red Hat Security Advisory: kpatch-patch-4_18_0-372_118_1 and kpatch-patch-4_18_0-372_91_1 security update
An update for kpatch-patch-4180-3721181 and kpatch-patch-4180-372911 is now available for Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score,...
kernel: wifi: mac80211: Avoid address calculations via out of bounds array indexing
No description is available for this CVE...
Important: Red Hat Security Advisory: kpatch-patch-4_18_0-477_43_1 and kpatch-patch-4_18_0-477_67_1 security update
An update for kpatch-patch-4180-477431 and kpatch-patch-4180-477671 is now available for Red Hat Enterprise Linux 8.8 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which give...