9663 matches found
kernel: ext4: set goal start correctly in ext4_mb_normalize_request
A flaw was found in the Linux kernel's ext4 filesystem block allocator. In ext4mbnormalizerequest, the goal start was being set incorrectly acfex instead of acgex, and boundary validation was missing. Without proper range checking, an underflow in ar-pright - size could pass an invalid value to...
Important: bind security update
The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols. BIND includes a DNS server named; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server is operating correctly. Security Fixes:...
Moderate: avahi security update
Avahi is an implementation of the DNS Service Discovery and Multicast DNS specifications for Zero Configuration Networking. It facilitates service discovery on a local network. Avahi and Avahi-aware applications allow you to plug your computer into a network and, with no configuration, view other...
RHEL 9 : avahi (RHSA-2024:2433)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:2433 advisory. Avahi is an implementation of the DNS Service Discovery and Multicast DNS specifications for Zero Configuration Networking. It facilitates...
ALSA-2024:2433 Moderate: avahi security update
Avahi is an implementation of the DNS Service Discovery and Multicast DNS specifications for Zero Configuration Networking. It facilitates service discovery on a local network. Avahi and Avahi-aware applications allow you to plug your computer into a network and, with no configuration, view other...
ALSA-2024:2551 Important: bind security update
The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols. BIND includes a DNS server named; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server is operating correctly. Security Fixes:...
Fedora 40 : bind / bind-dyndb-ldap (2023-687525fcca)
The remote Fedora 40 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2023-687525fcca advisory. BIND 9.18.19 Security Fixes - Previously, sending a specially crafted message over the control channel could cause the packet- parsing code to run o...
RHEL 7 : openvswitch (RHSA-2019:0053)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:0053 advisory. Open vSwitch provides standard network bridging functions and support for the OpenFlow protocol for remote per-flow control of traffic...
RHEL 7 : openvswitch (RHSA-2019:0081)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:0081 advisory. Open vSwitch provides standard network bridging functions and support for the OpenFlow protocol for remote per-flow control of traffic...
CVE-2024-33255
Jerryscript commit cefd391 was discovered to contain an Assertion Failure via ECMASTRINGISREFEQUALSTOONE stringp in ecmafreestringlist...
UBUNTU-CVE-2024-33255
Jerryscript commit cefd391 was discovered to contain an Assertion Failure via ECMASTRINGISREFEQUALSTOONE stringp in ecmafreestringlist...
CVE-2024-33255
Jerryscript commit cefd391 was discovered to contain an Assertion Failure via ECMASTRINGISREFEQUALSTOONE stringp in ecmafreestringlist...
CVE-2024-33255
Jerryscript commit cefd391 was discovered to contain an Assertion Failure via ECMASTRINGISREFEQUALSTOONE stringp in ecmafreestringlist...
CVE-2024-33255
The Jerryscript JavaScript engine (specifically commit cfd391 ) contains an Assertion Failure vulnerability. The root cause is located in ecma_free_string_list via ECMA_STRING_IS_REF_EQUALS_TO_ONE (string_p). This vulnerability can result in high availability impact. While some sources indicate t...
PT-2024-25176 · Quickjs +2 · Quickjs +2
Name of the Vulnerable Software and Affected Versions: QuickJS version 3b45d15 Description: The issue is related to an Assertion Failure via JS FreeRuntimeJSRuntime at quickjs.c. Recommendations: For QuickJS version 3b45d15, consider avoiding the use of JS FreeRuntimeJSRuntime until a patch is...
CVE-2024-33263
QuickJS commit 3b45d15 was discovered to contain an Assertion Failure via JSFreeRuntimeJSRuntime at quickjs.c...
CVE-2024-33263
The QuickJS JavaScript engine is affected by an Assertion Failure in commit 3b45d15 via the function JS_FreeRuntime(JSRuntime *) at quickjs.c. This vulnerability can be triggered by a failing test, potentially leading to a denial of service (DoS) . The issue has been identified in various Linux d...
CVE-2024-33255: Reachable Assertion
Jerryscript commit cefd391 was discovered to contain an Assertion Failure via ECMASTRINGISREFEQUALSTOONE stringp in ecmafreestringlist...
