DEBIAN-CVE-2024-22097

A double-free vulnerability exists in the BrainVision Header Parsing functionality of The Biosig Project libbiosig Master Branch ab0ee111 and 2.5.0. A specially crafted .vdhr file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2024-22097

A double-free vulnerability exists in the BrainVision Header Parsing functionality of The Biosig Project libbiosig Master Branch ab0ee111 and 2.5.0. A specially crafted .vdhr file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability...

Integer overflow

An integer overflow vulnerability exists in the sopenFAMOSread functionality of The Biosig Project libbiosig 2.5.0 and Master Branch ab0ee111. A specially crafted .famos file can lead to an out-of-bounds write which in turn can lead to arbitrary code execution. An attacker can provide a malicious...

PT-2024-2159 · Libbiosig +1 · Libbiosig +1

Name of the Vulnerable Software and Affected Versions: libbiosig versions 2.5.0 and Master Branch ab0ee111 Description: A double-free vulnerability exists in the BrainVision ASCII Header Parsing functionality of libbiosig. This issue is related to an error in memory deallocation. Exploitation of...

PT-2024-19797 · Libbiosig +1 · Libbiosig +1

Name of the Vulnerable Software and Affected Versions: libbiosig versions 2.5.0 through Master Branch ab0ee111 Description: An out-of-bounds write vulnerability exists in the BrainVisionMarker Parsing functionality. A specially crafted .vmrk file can lead to arbitrary code execution. An attacker...

PT-2024-19069 · Biosig +1 · Libbiosig +1

Name of the Vulnerable Software and Affected Versions: The Biosig Project libbiosig version 2.5.0 The Biosig Project libbiosig Master Branch ab0ee111 Description: An integer overflow vulnerability exists in the sopen FAMOS read functionality. A specially crafted .famos file can lead to an...

PT-2024-19204 · Biosig +1 · Libbiosig +1

Name of the Vulnerable Software and Affected Versions: The Biosig Project libbiosig versions 2.5.0 and Master Branch ab0ee111 Description: A double-free vulnerability exists in the BrainVision Header Parsing functionality. This can be triggered by a specially crafted .vdhr file, potentially leadi...

SUSE: Security Advisory (SUSE-SU-2024:0518-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Improper Access Control

gitlab:sid is vulnerable to Improper Access Control. The vulnerability is due to improper access control which allows a maintainer to change the name of a protected branch that bypasses the security policy added to block MR...

Updated mbedtls packages fix security vulnerabilities

This update brings the mbedtls packages from 2.28.3 to the latest 2.28.7 release in the LTS branch, fixing a number of bugs as well the following security vulnerabilities: - Buffer overread in TLS stream cipher suites. - Timing side channel in private key RSA operations. - Buffer overflow in...

CVE-2024-1482

An incorrect authorization vulnerability was identified in GitHub Enterprise Server that allowed an attacker to create new branches in public repositories and run arbitrary GitHub Actions workflows with permissions from the GITHUBTOKEN. To exploit this vulnerability, an attacker would need access...

Authorization

An incorrect authorization vulnerability was identified in GitHub Enterprise Server that allowed an attacker to create new branches in public repositories and run arbitrary GitHub Actions workflows with permissions from the GITHUBTOKEN. To exploit this vulnerability, an attacker would need access...

CVE-2023-48229 Out-of-bounds write in the radio driver for Contiki-NG nRF platforms

Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices. An out-of-bounds write exists in the driver for IEEE 802.15.4 radios on nRF platforms in the Contiki-NG operating system. The problem is triggered when parsing radio frames in the readframe function in...

GitHub Enterprise Server Security Vulnerability

GitHub Enterprise Server is a U.S. GitHub open source application. It provides a platform for setting up one's GitHub instance as a virtual appliance, thus providing a scalable, easy-to-manage platform. A security vulnerability exists in GitHub Enterprise Server that stems from the presence of an...

PT-2024-4030 · Github · Github Enterprise Server

Name of the Vulnerable Software and Affected Versions: GitHub Enterprise Server versions 3.8 through 3.11.4 GitHub Enterprise Server versions prior to 3.9.10 GitHub Enterprise Server versions prior to 3.10.7 GitHub Enterprise Server versions prior to 3.11.5 Description: The issue is related to an...

Oracle Linux 7 : Unbreakable Enterprise kernel (ELSA-2024-12150)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-12150 advisory. - sched/rt: picknextrtentity: check listentry Pietro Borrello Orabug: 35181559 CVE-2023-1077 - net/sched: schhfsc: Ensure inner classes have fsc curve...

SUSE: Security Advisory (SUSE-SU-2024:0444-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2023-6564 Incorrect Authorization in GitLab

An issue has been discovered in GitLab EE Premium and Ultimate affecting versions 16.4.3, 16.5.3, and 16.6.1. In projects using subgroups to define who can push and/or merge to protected branches, there may have been instances in which subgroup members with the Developer role were able to push or...

PT-2024-12300 · Episerver · Pi Server

Name of the Vulnerable Software and Affected Versions: API Server versions prior to the patched versions, including master, release/v2.8, release/v2.8.s3, release/v2.7, release/v2.7.s3, and release/v2.6, with specific commits: 4fd7d82, 69b3c2b, a3b9e37, 4e102cf, 97a10a3, and 4df268e. Description:...

CVE-2023-6840

An issue has been discovered in GitLab EE affecting all versions from 16.4 prior to 16.6.7, 16.7 prior to 16.7.5, and 16.8 prior to 16.8.2 which allows a maintainer to change the name of a protected branch that bypasses the security policy added to block MR...