9648 matches found
PT-2025-3584
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.12.8 Description The issue is related to a transaction atomicity bug when enabling simple quotas in the Linux kernel. Specifically, when enabling quotas, the BTRFS QGROUP STATUS FLAG SIMPLE MODE flag is set, bu...
CVE-2024-7139 Denial of Service in Silicon Labs RS9116 Bluetooth SDK
Due to an unchecked buffer length, a specially crafted L2CAP packet can cause a buffer overflow. This buffer overflow triggers an assert, which results in a temporary denial of service. If a watchdog timer is not enabled, a hard reset is required to recover the device...
CVE-2024-7138: Reachable Assertion
An assert may be triggered, causing a temporary denial of service when a peer device sends a specially crafted malformed L2CAP packet. If a watchdog timer is not enabled, a hard reset is required to recover the device...
Reachable assertion in avahi_rdata_parse
...
Reachable assertion in dbus_set_host_name
...
Reachable assertion in avahi_escape_label
...
Reachable assertion in avahi_alternative_host_name
...
Reachable assertion in avahi_dns_packet_append_record
...
PT-2024-13004 · Miniorange · Miniorange Saml Sp Single Sign On
Name of the Vulnerable Software and Affected Versions: miniOrange SAML SP Single Sign On versions prior to 5.0.4 Description: The issue affects the miniOrange SAML SP Single Sign On plugin, allowing for broken access control due to missing authorization. This enables exploitation of incorrectly...
Security update for qemu
This update for qemu fixes the following issues: CVE-2024-7409: Fixed denial of service via improper synchronization in QEMU NBD Server during socket closure bsc1229007 CVE-2024-8354: Fixed assertion failure in usbepget in usb bsc1230834 CVE-2024-8612: Fixed information leak in virtio devices...
SUSE-SU-2024:4304-1 Security update for qemu
This update for qemu fixes the following issues: - CVE-2024-7409: Fixed denial of service via improper synchronization in QEMU NBD Server during socket closure bsc1229007 - CVE-2024-8354: Fixed assertion failure in usbepget in usb bsc1230834 - CVE-2024-8612: Fixed information leak in virtio devic...
Reachable assertion failure in function display_debug_names allows attackers to cause a denial of service.
...
gRPC: Reachable Assertion
A flaw was found in the gRPC library. Affected versions of this package are vulnerable to a reachable assertion, causing the abort function to be called and resulting in a denial of service...
CVE-2024-20139: Reachable Assertion
In Bluetooth firmware, there is a possible firmware asssert due to improper handling of exceptional conditions. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09001270; Issue ID: MSV-1600...
MediaTek Chipsets Security Vulnerabilities
MediaTek Chipsets are a variety of chips from China's MediaTek Corporation MediaTek. A security vulnerability exists in MediaTek Chipsets, which stems from Bluetooth firmware mishandling of exceptions, which may result in firmware assertion...
Fedora 40 : php (2024-e0d390d35b)
The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-e0d390d35b advisory. PHP version 8.3.14 21 Nov 2024 CLI: Fixed bug GH-16373 Shebang is not skipped for router script in cli-server started through shebang. ilutov Fixed...
Reachable Assertion
libsndfile.so is vulnerable to Reachable Assertion. The vulnerability is due to improper handling of certain inputs or conditions in the mpegl3encoderclose function, which allows an attacker to craft specific inputs that trigger the assertion failure, potentially causing the application to crash...
CVE-2024-53429
Open62541 v1.4.6 is has an assertion failure in fuzzbinarydecode, which leads to a crash...