CVE-2024-20139: Reachable Assertion

In Bluetooth firmware, there is a possible firmware asssert due to improper handling of exceptional conditions. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09001270; Issue ID: MSV-1600...

Reachable Assertion

libsndfile.so is vulnerable to Reachable Assertion. The vulnerability is due to improper handling of certain inputs or conditions in the mpegl3encoderclose function, which allows an attacker to craft specific inputs that trigger the assertion failure, potentially causing the application to crash...

CVE-2024-53429

Open62541 v1.4.6 is has an assertion failure in fuzzbinarydecode, which leads to a crash...

CVE-2024-53429

Open62541 v1.4.6 is has an assertion failure in fuzzbinarydecode, which leads to a crash...

UBUNTU-CVE-2024-53429

Open62541 v1.4.6 is has an assertion failure in fuzzbinarydecode, which leads to a crash...

CVE-2024-53429

Open62541 v1.4.6 is has an assertion failure in fuzzbinarydecode, which leads to a crash...

CVE-2024-53429

Open62541 v1.4.6 is has an assertion failure in fuzzbinarydecode, which leads to a crash...

Open62541 安全漏洞

Open62541 is an open source implementation of OPC UA OPC Unified Architecture by Open62541 Open Source. A security vulnerability exists in Open62541 version 1.4.6, which stems from an assertion failure in fuzzbinarydecode that causes a crash...

CVE-2024-53429

Open62541 v1.4.6 is has an assertion failure in fuzzbinarydecode, which leads to a crash...

CVE-2024-53429: Reachable Assertion

Open62541 v1.4.6 is has an assertion failure in fuzzbinarydecode, which leads to a crash...

Security Bulletin: AIX is vulnerable to a denial of service due to ISC BIND

Summary Multiple vulnerabilities in ISC BIND could allow a remote attacker to cause a denial of service CVE-2024-0760, CVE-2024-1737, CVE-2024-4076, CVE-2024-1975. AIX uses ISC BIND as part of its DNS functions. Vulnerability Details CVEID:CVE-2024-0760 DESCRIPTION: ISC BIND is vulnerable to a...

CVE-2024-52919

Bitcoin Core before 22.0 has a CAddrMan nIdCount integer overflow and resultant assertion failure and daemon exit via a flood of addr messages...

CVE-2024-52919

Bitcoin Core versions prior to 22.0 are vulnerable to a CAddrMan nIdCount integer overflow caused by a flood of addr messages. This flaw triggers an assertion failure , leading to a daemon exit and a potential remote crash. To remediate, users should update to version 22.0 or later; for version 2...

CVE-2024-52919

Bitcoin Core before 22.0 has a CAddrMan nIdCount integer overflow and resultant assertion failure and daemon exit via a flood of addr messages...

CVE-2024-52919: Integer Overflow or Wraparound

Bitcoin Core before 22.0 has a CAddrMan nIdCount integer overflow and resultant assertion failure and daemon exit via a flood of addr messages...

Fedora 41 : bind / bind-dyndb-ldap (2024-7378be30dd)

The remote Fedora 41 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2024-7378be30dd advisory. Security Fixes - Validating DNS messages containing a lot of DNSSEC signatures could cause excessive CPU load, leading to a denial-of-service...

kernel: drm/i915/gt: Reset queue_priority_hint on parking

A flaw was found in the i915 module in the Linux kernel. Under some conditions, an assertion failure can be triggered and cause a denial of service...

SUSE-SU-2024:3948-1 Security update for qemu

This update for qemu fixes the following issues: - CVE-2024-8354: Fixed assertion failure in usbepget bsc1230834. - CVE-2024-8612: Fixed nformation leak in virtio devices bsc1230915. - CVE-2024-7409: Fixed denial of service via improper synchronization in QEMU NBD Server during socket closure...

SQLite3 generate_series Stack Buffer Underflow

Vulnerability details static int seriesBestIndex sqlite3vtab pVTab, sqlite3indexinfo pIdxInfo int i, j; / Loop over constraints / int idxNum = 0; / The query plan bitmask / ifndef ZEROARGUMENTGENERATESERIES int bStartSeen = 0; / EQ constraint seen on the START column / endif int unusableMask = 0;...

Updated bind packages fix security vulnerabilities

A malicious client can send many DNS messages over TCP, potentially causing the server to become unstable while the attack is in progress. The server may recover after the attack ceases. Use of ACLs will not mitigate the attack. CVE-2024-0760 Resolver caches and authoritative zone databases that...