9162 matches found
UBUNTU-CVE-2024-53126
In the Linux kernel, the following vulnerability has been resolved: vdpa: solidrun: Fix UB bug with devres In psnetopenpfbar and snetopenvfbar a string later passed to pcimiomapregions is placed on the stack. Neither pcimiomapregions nor the functions it calls copy that string. Should the string...
CVE-2024-53126
In CVE-2024-53126, the Linux kernel fixes a UB bug in vdpa/solidrun code where a string placed on the stack in psnet_open_pf_bar() and snet_open_vf_bar() could be used after the stack frame disappeared. The string is not copied by pcim_iomap_regions() or its callees, leading to undefined behavior...
CVE-2024-53126 vdpa: solidrun: Fix UB bug with devres
In the Linux kernel, the following vulnerability has been resolved: vdpa: solidrun: Fix UB bug with devres In psnetopenpfbar and snetopenvfbar a string later passed to pcimiomapregions is placed on the stack. Neither pcimiomapregions nor the functions it calls copy that string. Should the string...
kernel: drm/radeon: fix UBSAN warning in kv_dpm.c
A vulnerability was found in the Linux kernel's DRM/Radeon driver, specifically in the sumovidmappingentry within the kvdpm.c file. Insufficient bounds checking can lead to memory corruption...
CVE-2024-51210
The open-source collaborative editor Firepad (versions 1.5.11 and earlier ) is vulnerable to Sensitive Information Exposure due to improper access controls. A remote attacker with knowledge of a pad ID can retrieve the current text of a document along with all content previously pasted into it. W...
Citrix Workspace App for Windows restarts after .NET upgrade
Citrix Workspace App Restart Issue: Mitigating .NET Runtime Upgrade Impact If the user endpoint updates the .NET Desktop Runtime, any .NET Core-based app running at the time of the update might exhibit inconsistent behavior. To mitigate this issue, Citrix Workspace App restarts itself. Behavior o...
CVE-2024-53126: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: vdpa: solidrun: Fix UB bug with devres In psnetopenpfbar and snetopenvfbar a string later passed to pcimiomapregions is placed on the stack. Neither pcimiomapregions nor the functions it calls copy that string. Should the string...
Linux Kernel Security Vulnerabilities
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an undefined behavior issue in the vdpa driver due to strings being allocated on the stack, as these strings...
PT-2024-36972
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.74 Description The issue occurs in the cmd to func function when the call pkg-nd reserved2 array is accessed without verifying that call pkg points to a buffer that is appropriately sized as a struct nd cmd...
Security update for bpftool
This update for bpftool fixes the following issues: CVE-2024-49987: Fixed undefined behavior in qsortNULL, 0, ... bsc1232258 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the comman...
SUSE-SU-2024:4157-1 Security update for bpftool
This update for bpftool fixes the following issues: - CVE-2024-49987: Fixed undefined behavior in qsortNULL, 0, ... bsc1232258...
Gafgyt Malware Broadens Its Scope in Recent Attacks
Our researchers identified threat actors exploiting misconfigured Docker servers to spread the Gafgyt malware. This threat traditionally targets IoT devices; this new tactic signals a change in its behavior...
Citrix NetScaler Access Control Unauthorized Access
The vulnerability of the Citrix NetScaler Application Delivery Controller previously Citrix ADC and the Citrix NetScaler Gateway previously Citrix Gateway access control system is related to the violation of expected behavior. Exploiting this vulnerability can allow an attacker, operating remotel...
PT-2024-25096 · Qualcomm · Snapdragon +56
Name of the Vulnerable Software and Affected Versions: Software affected versions not specified Description: The issue occurs due to memory corruption when multiple threads attempt to unregister the CVP buffer simultaneously. This can lead to unpredictable behavior and potential security risks...
FFmpeg security vulnerabilities
FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A security vulnerability exists in FFmpeg version n6.1.1, which can be exploited by attackers to cause undefined behavior or a crash during decoding...
CVE-2024-35369: Integer Overflow or Wraparound
In FFmpeg version n6.1.1, specifically within the avcodec/speexdec.c module, a potential security vulnerability exists due to insufficient validation of certain parameters when parsing Speex codec extradata. This vulnerability could lead to integer overflow conditions, potentially resulting in...
MAL-2024-11024 Malicious code in uid2-publisher (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 07aebc5dbf3b61ba90b2d709f5b43ce5a08f773e0eff9ec55029e2c0ea5c027e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2018-11922
Wrong configuration in Touch Pal application can collect user behavior data without awareness by the user...
