CVE-2024-51562

The NVMe driver function nvmeopcgetlogpage is vulnerable to a buffer over-read from a guest-controlled value...

CVE-2024-51565 bhyve(8) hda driver buffer over-read

The hda driver is vulnerable to a buffer over-read from a guest-controlled value...

CVE-2024-51565 bhyve(8) hda driver buffer over-read

The hda driver is vulnerable to a buffer over-read from a guest-controlled value...

CVE-2024-51565

The CVE-2024-51565 entry corresponds to a vulnerability in the bhyve hypervisor’s hda driver, described as a buffer over-read triggered by a guest-controlled value. The FreeBSD security advisory confirms this as one of multiple bhyve issues and notes the impact: potential DoS of the bhyve host an...

CVE-2024-51562 bhyve(8) nvme_opc_get_log_page buffer over-read

The NVMe driver function nvmeopcgetlogpage is vulnerable to a buffer over-read from a guest-controlled value...

CVE-2024-51562

Summary (CVE-2024-51562): The bhyve hypervisor/FreeBSD NVMe path is affected by a buffer over-read in the NVMe driver function nvme_opc_get_log_page, triggered by a guest-controlled value. This can enable a DoS against the bhyve host and potential memory access of bhyve-process memory by a malici...

PT-2024-39881 · Ivanti · Ivanti Secure Access Client

Name of the Vulnerable Software and Affected Versions: Ivanti Secure Access Client versions prior to 22.7R4 Description: A buffer over-read issue allows a local unauthenticated attacker to cause a denial of service. Recommendations: For versions prior to 22.7R4, update to version 22.7R4 or later ...

K000148401: libxml2 vulnerability CVE-2024-34459

Security Advisory Description An issue was discovered in xmllint from libxml2 before 2.11.8 and 2.12.x before 2.12.7. Formatting error messages with xmllint --htmlout can result in a buffer over-read in xmlHTMLPrintFileContext in xmllint.c. CVE-2024-34459 Impact There is no impact; F5 products ar...

RHEL 7 : openvswitch (RHSA-2017:2665)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2017:2665 advisory. Open vSwitch provides standard network bridging functions and support for the OpenFlow protocol for remote per-flow control of traffic...

RHEL 6 / 7 : httpd24-httpd (RHSA-2017:2483)

The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2017:2483 advisory. The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. Security Fixes: It was discovered...

RHEL 7 : openvswitch (RHSA-2017:2727)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2017:2727 advisory. Open vSwitch provides standard network bridging functions and support for the OpenFlow protocol for remote per-flow control of traffic...

CVE-2024-38405 Buffer Over-read in WLAN Host

Transient DOS while processing the CU information from RNR IE...

CVE-2024-38405 Buffer Over-read in WLAN Host

Transient DOS while processing the CU information from RNR IE...

CVE-2024-38403 Buffer Over-read in WLAN Firmware

Transient DOS while parsing BTM ML IE when per STA profile is not included...

CVE-2024-38403 Buffer Over-read in WLAN Firmware

Transient DOS while parsing BTM ML IE when per STA profile is not included...

RHEL 6 : mongodb (RHSA-2014:0230)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2014:0230 advisory. MongoDB is a NoSQL database. A buffer over-read flaw was found in the way MongoDB handled BSON data. A database user permitted to insert BSON data in...

PT-2024-34706 · Bhyve +1 · Bhyve +1

Name of the Vulnerable Software and Affected Versions: bhyve hypervisor affected versions not specified Description: The NVMe driver function nvme opc get log page is vulnerable to a buffer over-read from a guest-controlled value. This issue is related to the bhyve hypervisor and affects the NVMe...

Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in Nginx

Summary IBM Watson Discovery for IBM Cloud Pak for Data contains a vulnerable version of Nginx Vulnerability Details CVEID:CVE-2024-7646 DESCRIPTION: Kubernetes ingress-nginx could allow a remote authenticated attacker to execute arbitrary commands on the system, caused by an annotation validatio...

Huawei EulerOS: Security Advisory for libxml2 (EulerOS-SA-2024-2708)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for libxml2 (EulerOS-SA-2024-2755)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...