Fedora 41 : fluent-bit (2025-b355fdb8e5)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-b355fdb8e5 advisory. Update to 3.2.8 - Closes rhbz2137000 rhbz2340164 rhbz2300673 Tenable has extracted the preceding description block directly from the Fedora security advisory...

Fedora 40 : fluent-bit (2025-b2bdcfedac)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-b2bdcfedac advisory. Update to 3.2.8 - Closes rhbz2137000 rhbz2340164 rhbz2300673 Tenable has extracted the preceding description block directly from the Fedora security advisory...

The vulnerability of the ep93xx_div_recalc_rate() function in the arch/arm/mach-ep93xx/clock.c module of the Linux operating system allows a attacker to compromise the confidentiality and accessibility of the protected information.

The vulnerability of the ep93xxdivrecalcrate function in the arch/arm/mach-ep93xx/clock.c module of the Linux operating system is related to a single-bit offset error. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and accessibility of the protected...

Fedora: Security Advisory (FEDORA-2025-b2bdcfedac)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Azure Linux 3.0 Security Update: fluent-bit (CVE-2024-50608)

The version of fluent-bit installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-50608 advisory. - An issue was discovered in Fluent Bit 3.1.9. When the Prometheus Remote Write input plugin is running an...

Azure Linux 3.0 Security Update: expat / python3 (CVE-2024-45492)

The version of expat / python3 installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-45492 advisory. - An issue was discovered in libexpat before 2.6.3. nextScaffoldPart in xmlparse.c can have an intege...

Azure Linux 3.0 Security Update: fluent-bit (CVE-2024-50609)

The version of fluent-bit installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-50609 advisory. - An issue was discovered in Fluent Bit 3.1.9. When the OpenTelemetry input plugin is running and listenin...

SUSE CVE-2025-2309

A vulnerability has been found in HDF5 1.14.6 and classified as critical. This vulnerability affects the function H5Tbitcopy of the component Type Conversion Logic. The manipulation leads to heap-based buffer overflow. Local access is required to approach this attack. The exploit has been disclos...

The vulnerability of the Fluent Bit logging collection and processing tool, related to the swapping of the zero pointer, allows a malicious actor to trigger a service failure.

The vulnerability of the Fluent Bit logging and processing tool is related to the assignment of the zero pointer. Exploiting this vulnerability can allow a malicious actor to cause a service failure through a specially crafted HTTP request...

onos-lib-go 输入验证错误漏洞

onos-lib-go is an open source library of utilities and convenience programs for developing µONOS components in Go from the µONOS Project. A security vulnerability exists in onos-lib-go version 0.10.28, which stems from an asn1/aper GetBitString that can cause an index out-of-bounds panic when...

CVE-2025-30077

Open Networking Foundation SD-RAN ONOS onos-lib-go 0.10.28 allows an index out-of-range panic in asn1/aper GetBitString via a zero value of numBits...

AZL-58813 CVE-2025-2309 affecting package hdf5 1.14.6-4

A vulnerability has been found in HDF5 1.14.6 and classified as critical. This vulnerability affects the function H5Tbitcopy of the component Type Conversion Logic. The manipulation leads to heap-based buffer overflow. Local access is required to approach this attack. The exploit has been disclos...

AZL-58819 CVE-2025-2309 affecting package hdf5 1.14.6-1

A vulnerability has been found in HDF5 1.14.6 and classified as critical. This vulnerability affects the function H5Tbitcopy of the component Type Conversion Logic. The manipulation leads to heap-based buffer overflow. Local access is required to approach this attack. The exploit has been disclos...

UBUNTU-CVE-2025-2309

A vulnerability has been found in HDF5 1.14.6 and classified as critical. This vulnerability affects the function H5Tbitcopy of the component Type Conversion Logic. The manipulation leads to heap-based buffer overflow. Local access is required to approach this attack. The exploit has been disclos...

ksmbd: fix integer overflows on 32 bit systems

...

filemap: avoid truncating 64-bit offset to 32 bits

...

HDF5 安全漏洞

HDF5 is a library of HDF open source . HDF5 has a buffer overflow vulnerability , the vulnerability stems from the H5Tbitcopy function fails to correctly validate the length of the input data size , an attacker can use this vulnerability to cause a denial of service...

CVE-2024-50608 affecting package fluent-bit for versions less than 3.1.9-3

CVE-2024-50608 affecting package fluent-bit for versions less than 3.1.9-3. A patched version of the package is available...

CVE-2024-50609 affecting package fluent-bit for versions less than 3.1.9-3

CVE-2024-50609 affecting package fluent-bit for versions less than 3.1.9-3. A patched version of the package is available...

firefox: JIT corruption of WASM i32 return values on 64-bit CPUs

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: On 64-bit CPUs, when the JIT compiles WASM i32 return values they can pick up bits from left over memory. This can potentially cause them to be treated as a different type...