Lucene search
+L

652 matches found

OSV
OSV
added 2024/12/27 3:15 p.m.1 views

DEBIAN-CVE-2024-56639

In the Linux kernel, the following vulnerability has been resolved: net: hsr: must allocate more bytes for RedBox support Blamed commit forgot to change hsrinitskb to allocate larger skb for RedBox case. Indeed, sendhsrsupervisionframe will add two additional components struct hsrsuptlv and struc...

5.5CVSS5.6AI score0.00186EPSS
SaveExploits0References1
NVD
NVD
added 2024/12/27 3:15 p.m.10 views

CVE-2024-56572

In the Linux kernel, the following vulnerability has been resolved: media: platform: allegro-dvt: Fix possible memory leak in allocatebuffersinternal The buffer in the loop should be released under the exception path, otherwise there may be a memory leak here. To mitigate this, free the buffer wh...

5.5CVSS0.00235EPSS
SaveExploits0References8
OSV
OSV
added 2024/12/27 3:15 p.m.3 views

DEBIAN-CVE-2024-56572

In the Linux kernel, the following vulnerability has been resolved: media: platform: allegro-dvt: Fix possible memory leak in allocatebuffersinternal The buffer in the loop should be released under the exception path, otherwise there may be a memory leak here. To mitigate this, free the buffer wh...

5.5CVSS5.9AI score0.00235EPSS
SaveExploits0References1
OSV
OSV
added 2024/12/27 2:23 p.m.8 views

CVE-2024-56572 media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()

In the Linux kernel, the following vulnerability has been resolved: media: platform: allegro-dvt: Fix possible memory leak in allocatebuffersinternal The buffer in the loop should be released under the exception path, otherwise there may be a memory leak here. To mitigate this, free the buffer wh...

3.3CVSS6.2AI score
SaveExploits0References11
CVE
CVE
added 2024/12/27 2:23 p.m.165 views

CVE-2024-56572

CVE-2024-56572 : In the Linux kernel, the media: platform: allegro-dvt path fixes a memory-leak in allocate_buffers_internal(). The buffer allocated in the loop may leak if not released on the exception path; the fix ensures the buffer is freed when allegro_alloc_buffer fails. This addresses a lo...

5.5CVSS6.7AI score0.00235EPSS
SaveExploits0References8Affected Software1
NVD
NVD
added 2024/12/27 2:15 p.m.17 views

CVE-2024-53213

In the Linux kernel, the following vulnerability has been resolved: net: usb: lan78xx: Fix double free issue with interrupt buffer allocation In lan78xxprobe, the buffer buf was being freed twice: once implicitly through usbfreeurbdev-urbintr with the URBFREEBUFFER flag and again explicitly by...

7.8CVSS0.00233EPSS
SaveExploits0References8
OSV
OSV
added 2024/12/27 2:15 p.m.2 views

DEBIAN-CVE-2024-53213

In the Linux kernel, the following vulnerability has been resolved: net: usb: lan78xx: Fix double free issue with interrupt buffer allocation In lan78xxprobe, the buffer buf was being freed twice: once implicitly through usbfreeurbdev-urbintr with the URBFREEBUFFER flag and again explicitly by...

7.8CVSS5.9AI score0.00233EPSS
SaveExploits0References1
OSV
OSV
added 2024/12/27 2:15 p.m.12 views

UBUNTU-CVE-2024-53213

In the Linux kernel, the following vulnerability has been resolved: net: usb: lan78xx: Fix double free issue with interrupt buffer allocation In lan78xxprobe, the buffer buf was being freed twice: once implicitly through usbfreeurbdev-urbintr with the URBFREEBUFFER flag and again explicitly by...

7.8CVSS6.6AI score0.00233EPSS
SaveExploits0References20
Cvelist
Cvelist
added 2024/12/27 1:49 p.m.33 views

CVE-2024-53213 net: usb: lan78xx: Fix double free issue with interrupt buffer allocation

In the Linux kernel, the following vulnerability has been resolved: net: usb: lan78xx: Fix double free issue with interrupt buffer allocation In lan78xxprobe, the buffer buf was being freed twice: once implicitly through usbfreeurbdev-urbintr with the URBFREEBUFFER flag and again explicitly by...

0.00233EPSS
SaveExploits0References7
IBM Security Bulletins
IBM Security Bulletins
added 2024/11/21 7:31 a.m.28 views

Security Bulletin: Vulnerability in jetty-http affects IBM Integrated Analytics System[CVE-2023-36478]

Summary The jetty-http package is used by IBM Integrated Analytics System. IBM Integrated Anayltics System has addresed the applicable CVE CVE-2023-36478. Vulnerability Details CVEID:CVE-2023-36478 DESCRIPTION: Eclipse Jetty is vulnerable to a denial of service, caused by an integer overflow and...

7.5CVSS7AI score0.03754EPSS
SaveExploits1Affected Software1
RedHat Linux
RedHat Linux
added 2024/11/12 9:11 a.m.9 views

kernel: tpm_tis_spi: Account for SPI header when allocating TPM SPI xfer buffer

In the Linux kernel, the following vulnerability has been resolved: tpmtisspi: Account for SPI header when allocating TPM SPI xfer buffer The TPM SPI transfer mechanism uses MAXSPIFRAMESIZE for computing the maximum transfer length and the size of the transfer buffer. As such, it does not account...

7.8CVSS6.4AI score0.0022EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2024/10/30 1:41 a.m.4 views

kernel: xfs: fix log recovery buffer allocation for the legacy h_size fixup

A security vulnerability has been discovered in the Linux kernel's XFS file system implementation, specifically within the xloglogrechblks function. This flaw arises from an inadequate log recovery buffer allocation during the processing of legacy header size adjustments. The vulnerability can be...

7.3CVSS7.3AI score0.00229EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2024/10/16 12:28 a.m.4 views

kernel: xfs: fix log recovery buffer allocation for the legacy h_size fixup

A security vulnerability has been discovered in the Linux kernel's XFS file system implementation, specifically within the xloglogrechblks function. This flaw arises from an inadequate log recovery buffer allocation during the processing of legacy header size adjustments. The vulnerability can be...

7.3CVSS7.3AI score0.00229EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2024/10/16 12:28 a.m.38 views

Moderate: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 9.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

9.1CVSS6.9AI score0.00546EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
added 2024/10/16 12:12 a.m.34 views

Moderate: Red Hat Security Advisory: kernel-rt security update

An update for kernel-rt is now available for Red Hat Enterprise Linux 9.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...

9.1CVSS7.1AI score0.00546EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
added 2024/10/16 12:12 a.m.4 views

kernel: xfs: fix log recovery buffer allocation for the legacy h_size fixup

A security vulnerability has been discovered in the Linux kernel's XFS file system implementation, specifically within the xloglogrechblks function. This flaw arises from an inadequate log recovery buffer allocation during the processing of legacy header size adjustments. The vulnerability can be...

7.3CVSS7.3AI score0.00229EPSS
SaveExploits0References5
IBM Security Bulletins
IBM Security Bulletins
added 2024/09/25 7:3 p.m.32 views

Security Bulletin: Vulnerability in Eclipse Jetty affects IBM watsonx.data

Summary Eclipse Jetty is vulnerable to a denial of service, caused by an integer overflow and buffer allocation in MetaDataBuilder.checkSize. By sending a specially crafted request, a remote attacker could exploit this vulnerability to cause a denial of service condition. This can affect...

7.5CVSS8.3AI score0.03754EPSS
SaveExploits1Affected Software1
Microsoft CVE
Microsoft CVE
added 2024/09/11 7:0 a.m.8 views

xfs: fix log recovery buffer allocation for the legacy h_size fixup

...

7.3CVSS6.7AI score0.00229EPSS
SaveExploits0
OSV
OSV
added 2024/09/05 4:15 a.m.8 views

CVE-2024-45287

A malicious value of size in a structure of packed libnv can cause an integer overflow, leading to the allocation of a smaller buffer than required for the parsed data...

7.5CVSS6AI score0.00511EPSS
SaveExploits0References2
NVD
NVD
added 2024/09/05 4:15 a.m.26 views

CVE-2024-45287

A malicious value of size in a structure of packed libnv can cause an integer overflow, leading to the allocation of a smaller buffer than required for the parsed data...

9.1CVSS0.00511EPSS
SaveExploits0References2
Rows per page
Query Builder