Lucene search
+L

14666 matches found

CNNVD
CNNVD
•added 2024/07/08 12:00 a.m.•25 views

undici Security breach

undici is an HTTP/1.1 client. A security vulnerability exists in undici version 6.14.0 through versions prior to 6.19.2, which stems from the response.arrayBuffer function potentially containing portions of memory from a Node.js process...

2CVSS6.7AI score0.00467EPSS
SaveExploits0References6
SUSE CVE
SUSE CVE
•added 2024/07/06 2:58 a.m.•13 views

SUSE CVE-2024-39482

In the Linux kernel, the following vulnerability has been resolved: bcache: fix variable length array abuse in btreeiter btreeiter is used in two ways: either allocated on the stack with a fixed size MAXBSETS, or from a mempool with a dynamic size based on the specific cache set. Previously, the...

6.5AI score0.00238EPSS
SaveExploits0References13
RedhatCVE
RedhatCVE
•added 2024/07/05 8:49 p.m.•34 views

CVE-2024-39482

In the Linux kernel, the following vulnerability has been resolved: bcache: fix variable length array abuse in btreeiter btreeiter is used in two ways: either allocated on the stack with a fixed size MAXBSETS, or from a mempool with a dynamic size based on the specific cache set. Previously, the...

5.5CVSS6.8AI score0.00238EPSS
SaveExploits0References4
osv_debian
osv_debian
•added 2024/07/05 7:15 a.m.•17 views

DEBIAN-CVE-2024-39482

In the Linux kernel, the following vulnerability has been resolved: bcache: fix variable length array abuse in btreeiter btreeiter is used in two ways: either allocated on the stack with a fixed size MAXBSETS, or from a mempool with a dynamic size based on the specific cache set. Previously, the...

5.5CVSS5.7AI score0.00238EPSS
SaveExploits0References1
osv_azl
osv_azl
•added 2024/07/05 7:15 a.m.•25 views

AZL-43264 CVE-2024-39482 affecting package kernel for versions less than 5.15.162.2-1

In the Linux kernel, the following vulnerability has been resolved: bcache: fix variable length array abuse in btreeiter btreeiter is used in two ways: either allocated on the stack with a fixed size MAXBSETS, or from a mempool with a dynamic size based on the specific cache set. Previously, the...

5.5CVSS6.3AI score0.00238EPSS
SaveExploits0References1
NVD
NVD
•added 2024/07/05 7:15 a.m.•31 views

CVE-2024-39482

In the Linux kernel, the following vulnerability has been resolved: bcache: fix variable length array abuse in btreeiter btreeiter is used in two ways: either allocated on the stack with a fixed size MAXBSETS, or from a mempool with a dynamic size based on the specific cache set. Previously, the...

7.8CVSS0.00238EPSS
SaveExploits0References9
osv_ubuntu
osv_ubuntu
•added 2024/07/05 7:15 a.m.•15 views

UBUNTU-CVE-2024-39482

In the Linux kernel, the following vulnerability has been resolved: bcache: fix variable length array abuse in btreeiter btreeiter is used in two ways: either allocated on the stack with a fixed size MAXBSETS, or from a mempool with a dynamic size based on the specific cache set. Previously, the...

7.8CVSS6.2AI score0.00238EPSS
SaveExploits0References21
UbuntuCve
UbuntuCve
•added 2024/07/05 7:15 a.m.•35 views

CVE-2024-39482

In the Linux kernel, the following vulnerability has been resolved: bcache: fix variable length array abuse in btreeiter btreeiter is used in two ways: either allocated on the stack with a fixed size MAXBSETS, or from a mempool with a dynamic size based on the specific cache set. Previously, the...

7.8CVSS6.4AI score0.00238EPSS
SaveExploits0References20
CVE
CVE
•added 2024/07/05 6:55 a.m.•171 views

CVE-2024-39482

CVE-2024-39482 (Linux kernel) : The vulnerability affects the bcache subsystem, specifically the btree_iter code path. The bug arises from a fixed-length array inside the btree_iter structure that is indexed out-of-bounds when iterators are created with dynamic size, triggering UBSAN complaints. ...

7.8CVSS7.1AI score0.00238EPSS
SaveExploits0References9Affected Software1
Vulnrichment
Vulnrichment
•added 2024/07/05 6:55 a.m.•58 views

CVE-2024-39482 bcache: fix variable length array abuse in btree_iter

In the Linux kernel, the following vulnerability has been resolved: bcache: fix variable length array abuse in btreeiter btreeiter is used in two ways: either allocated on the stack with a fixed size MAXBSETS, or from a mempool with a dynamic size based on the specific cache set. Previously, the...

7.8CVSS6.9AI score0.00238EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2024/07/05 6:55 a.m.•55 views

CVE-2024-39482 bcache: fix variable length array abuse in btree_iter

In the Linux kernel, the following vulnerability has been resolved: bcache: fix variable length array abuse in btreeiter btreeiter is used in two ways: either allocated on the stack with a fixed size MAXBSETS, or from a mempool with a dynamic size based on the specific cache set. Previously, the...

7.8CVSS0.00238EPSS
SaveExploits0References6
BDU FSTEC
BDU FSTEC
•added 2024/07/05 12:00 a.m.•21 views

libavcodec/cbs_h266_syntax_template.c Code Execution

The vulnerability in the libavcodec/cbsh266syntaxtemplate.c file of the multimedia library FFmpeg is related to unvalidated array indexing. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

10CVSS5.9AI score0.01113EPSS
SaveExploits0References8Affected Software3
CNNVD
CNNVD
•added 2024/07/05 12:00 a.m.•13 views

Linux kernel security vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the indexing of arrays beyond the bounds of dynamically sized iterators, leading to UBSAN complaints...

5.5CVSS6.6AI score0.00238EPSS
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/07/05 12:00 a.m.•7 views

CVE-2024-39482: Allocation of Resources Without Limits or Throttling

In the Linux kernel, the following vulnerability has been resolved: bcache: fix variable length array abuse in btreeiter btreeiter is used in two ways: either allocated on the stack with a fixed size MAXBSETS, or from a mempool with a dynamic size based on the specific cache set. Previously, the...

7.8CVSS6.1AI score0.00238EPSS
SaveExploits0References14
osv_cve
osv_cve
•added 2024/07/03 1:21 a.m.•7 views

CVE-2024-32673

Improper Validation of Array Index vulnerability in Samsung Open Source Walrus Webassembly runtime engine allows a segmentation fault issue. This issue affects Walrus: before 72c7230f32a0b791355bbdfc78669701024b0956...

6.7CVSS5.9AI score0.00158EPSS
SaveExploits0References4
Mend
Mend
•added 2024/07/03 1:21 a.m.•9 views

CVE-2024-32673

Improper Validation of Array Index vulnerability in Samsung Open Source Walrus Webassembly runtime engine allows a segmentation fault issue. This issue affects Walrus: before 72c7230f32a0b791355bbdfc78669701024b0956...

6.7CVSS0.00158EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/07/03 12:00 a.m.•20 views

PT-2024-24758 · Samsung · Walrus

Name of the Vulnerable Software and Affected Versions: Walrus versions before 72c7230f32a0b791355bbdfc78669701024b0956 Description: The issue is related to an Improper Validation of Array Index in the Samsung Open Source Walrus Webassembly runtime engine, which can cause a segmentation fault...

6.7CVSS7AI score0.00158EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/07/03 12:00 a.m.•8 views

CVE-2024-32673: Improper Validation of Array Index

Improper Validation of Array Index vulnerability in Samsung Open Source Walrus Webassembly runtime engine allows a segmentation fault issue. This issue affects Walrus: before 72c7230f32a0b791355bbdfc78669701024b0956...

6.7CVSS5.8AI score0.00158EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/07/03 12:00 a.m.•16 views

SAMSUNG WALRUS Security Vulnerability

SAMSUNG WALRUS is a project of the South Korean company Samsung SAMSUNG. It aims to provide a lightweight WebAssembly runtime engine. A security vulnerability exists in SAMSUNG WALRUS that stems from improper array index validation leading to a segmentation error...

6.7CVSS6.7AI score0.00158EPSS
SaveExploits0References2
Microsoft CVE
Microsoft CVE
•added 2024/06/30 2:00 p.m.•21 views

Command injection via array-ish $command parameter of proc_open() (bypass CVE-2024-1874 fix)

...

9.4CVSS7AI score0.32568EPSS
SaveExploits3
Rows per page
Query Builder