CVE-2024-3935 Eclipse Mosquito: Double free vulnerability

In Eclipse Mosquito, versions from 2.0.0 through 2.0.18, if a Mosquitto broker is configured to create an outgoing bridge connection, and that bridge connection has an incoming topic configured that makes use of topic remapping, then if the remote connection sends a crafted PUBLISH packet to the...

CVE-2024-3935

In Eclipse Mosquito, versions from 2.0.0 through 2.0.18, if a Mosquitto broker is configured to create an outgoing bridge connection, and that bridge connection has an incoming topic configured that makes use of topic remapping, then if the remote connection sends a crafted PUBLISH packet to the...

Eclipse Mosquitto 安全漏洞

Eclipse Mosquitto is an open source messaging agent software suite from the Eclipse Foundation. A security vulnerability exists in Eclipse Mosquitto versions 2.0.0 through 2.0.18, which stems from If the Mosquitto agent is set up with an outgoing bridge that remaps incoming topics, it may cause a...

SUSE CVE-2024-50045

In the Linux kernel, the following vulnerability has been resolved: netfilter: brnetfilter: fix panic with metadatadst skb Fix a kernel panic in the brnetfilter module when sending untagged traffic via a VxLAN device. This happens during the check for fragmentation in brnfdevqueuexmit. It is...

AZL-51087 CVE-2024-50059 affecting package kernel for versions less than 6.6.57.1-1

In the Linux kernel, the following vulnerability has been resolved: ntb: ntbhwswitchtec: Fix use after free vulnerability in switchtecntbremove due to race condition In the switchtecntbadd function, it can call switchtecntbinitsndev function, then &sndev-checklinkstatuswork is bound with...

UBUNTU-CVE-2024-50038

In the Linux kernel, the following vulnerability has been resolved: netfilter: xtables: avoid NFPROTOUNSPEC where needed syzbot managed to call xtcluster match via ebtables: WARNING: CPU: 0 PID: 11 at net/netfilter/xtcluster.c:72 xtclustermt+0x196/0x780 .. ebtdotable+0x174b/0x2a40 Module register...

UBUNTU-CVE-2024-50045

In the Linux kernel, the following vulnerability has been resolved: netfilter: brnetfilter: fix panic with metadatadst skb Fix a kernel panic in the brnetfilter module when sending untagged traffic via a VxLAN device. This happens during the check for fragmentation in brnfdevqueuexmit. It is...

CVE-2024-50045 netfilter: br_netfilter: fix panic with metadata_dst skb

In the Linux kernel, the following vulnerability has been resolved: netfilter: brnetfilter: fix panic with metadatadst skb Fix a kernel panic in the brnetfilter module when sending untagged traffic via a VxLAN device. This happens during the check for fragmentation in brnfdevqueuexmit. It is...

CVE-2024-50045

CVE-2024-50045 affects the Linux kernel br_netfilter where a vulnerability in br_nf_dev_queue_xmit can crash when forwarding untagged traffic through a VxLAN bridge port. The root cause is a metadata_dst handling path during fragmentation checks that leads to an invalid skb_dst and a NULL dev, ca...

CVE-2024-50045 netfilter: br_netfilter: fix panic with metadata_dst skb

In the Linux kernel, the following vulnerability has been resolved: netfilter: brnetfilter: fix panic with metadatadst skb Fix a kernel panic in the brnetfilter module when sending untagged traffic via a VxLAN device. This happens during the check for fragmentation in brnfdevqueuexmit. It is...

DEBIAN-CVE-2024-49946

In the Linux kernel, the following vulnerability has been resolved: ppp: do not assume bh is held in pppchannelbridgeinput Networking receive path is usually handled from BH handler. However, some protocols need to acquire the socket lock, and packets might be stored in the socket backlog is the...

Adobe Bridge 9.x < 9.1.0 Vulnerability (APSB19-37)

The version of Adobe Bridge installed on the remote macOS or Mac OS X host is prior to 9.1.0. It is, therefore, affected by a vulnerability as referenced in the apsb19-37 advisory. - Adobe Bridge CC version 9.0.2 and earlier versions have an out of bound read vulnerability. Successful exploitatio...

Adobe Bridge 9.0.2 < 9.0.3 Multiple Vulnerabilities (APSB19-25)

The version of Adobe Bridge installed on the remote macOS or Mac OS X host is prior to 9.0.3. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb19-25 advisory. - Adobe Bridge CC versions 9.0.2 have a heap overflow vulnerability. Successful exploitation could lead to...

Adobe Bridge 6.x < 6.1.1 Multiple Vulnerabilities (APSB15-13)

The version of Adobe Bridge installed on the remote Windows host is prior to 6.1.1. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb15-13 advisory. - Heap-based buffer overflow in Adobe Photoshop CC before 16.0 aka 2015.0.0 and Adobe Bridge CC before 6.11 allows...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an inconsistent lock state issue in the pppchannelbridgeinput function in the ppp subsystem...

Adobe Bridge 10.x < 10.0 Multiple Vulnerabilities (APSB19-53)

The version of Adobe Bridge installed on the remote macOS or Mac OS X host is prior to 10.0. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb19-53 advisory. - Adobe Bridge CC versions 9.1 and earlier have a memory corruption vulnerability. Successful exploitation...

Adobe Bridge 9.x < 9.1.0 Vulnerability (APSB19-37)

The version of Adobe Bridge installed on the remote Windows host is prior to 9.1.0. It is, therefore, affected by a vulnerability as referenced in the apsb19-37 advisory. - Adobe Bridge CC version 9.0.2 and earlier versions have an out of bound read vulnerability. Successful exploitation could le...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a post-release reuse vulnerability in the switchtecntbremove function in the ntb:ntbhwswitchtec subsystem...

Adobe Bridge 6.x < 6.1.1 Multiple Vulnerabilities (APSB15-13)

The version of Adobe Bridge installed on the remote macOS or Mac OS X host is prior to 6.1.1. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb15-13 advisory. - Heap-based buffer overflow in Adobe Photoshop CC before 16.0 aka 2015.0.0 and Adobe Bridge CC before 6.11...

Adobe Bridge 10.x < 10.0 Multiple Vulnerabilities (APSB19-53)

The version of Adobe Bridge installed on the remote Windows host is prior to 10.0. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb19-53 advisory. - Adobe Bridge CC versions 9.1 and earlier have a memory corruption vulnerability. Successful exploitation could lead ...