MAL-2024-1372 Malicious code in @ozon-ob-foundation/event-bus (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c5d1a30ed3380955e93d6ee25ac05fd6a61c06bc20d670f0fd01e6a4565c82e4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CentOS 9 : glib2-2.68.4-15.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the glib2-2.68.4-15.el9 build changelog. - An issue was discovered in GNOME GLib before 2.78.5, and 2.79.x and 2.80.x before 2.80.1. When a GDBus- based client subscribes to signals from a...

UBUNTU-CVE-2024-35883

In the Linux kernel, the following vulnerability has been resolved: spi: mchp-pci1xxx: Fix a possible null pointer dereference in pci1xxxspiprobe In function pci1xxxxspiprobe, there is a potential null pointer that may be caused by a failed memory allocation by the function devmkzalloc. Hence, a...

DEBIAN-CVE-2024-35822

In the Linux kernel, the following vulnerability has been resolved: usb: udc: remove warning when queue disabled ep It is possible trigger below warning message from mass storage function, WARNING: CPU: 6 PID: 3839 at drivers/usb/gadget/udc/core.c:294 usbepqueue+0x7c/0x104 pc :...

DEBIAN-CVE-2024-35811

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: Fix use-after-free bug in brcmfcfg80211detach This is the candidate patch of CVE-2023-47233 : https://nvd.nist.gov/vuln/detail/CVE-2023-47233 In brcm80211 driver,it starts with the following invoking chain to star...

DEBIAN-CVE-2024-35785

In the Linux kernel, the following vulnerability has been resolved: tee: optee: Fix kernel panic caused by incorrect error handling The error path while failing to register devices on the TEE bus has a bug leading to kernel panic as follows: 15.398930 Unable to handle kernel paging request at...

UBUNTU-CVE-2024-35785

In the Linux kernel, the following vulnerability has been resolved: tee: optee: Fix kernel panic caused by incorrect error handling The error path while failing to register devices on the TEE bus has a bug leading to kernel panic as follows: 15.398930 Unable to handle kernel paging request at...

CVE-2024-35785

In the Linux kernel, the following vulnerability has been resolved: tee: optee: Fix kernel panic caused by incorrect error handling The error path while failing to register devices on the TEE bus has a bug leading to kernel panic as follows: 15.398930 Unable to handle kernel paging request at...

UBUNTU-CVE-2024-35790

In the Linux kernel, the following vulnerability has been resolved: usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group The DisplayPort driver's sysfs nodes may be present to the userspace before typecaltmodesetdrvdata completes in dpaltmodeprobe. This...

CVE-2024-35785 tee: optee: Fix kernel panic caused by incorrect error handling

In the Linux kernel, the following vulnerability has been resolved: tee: optee: Fix kernel panic caused by incorrect error handling The error path while failing to register devices on the TEE bus has a bug leading to kernel panic as follows: 15.398930 Unable to handle kernel paging request at...

CVE-2024-35785 tee: optee: Fix kernel panic caused by incorrect error handling

In the Linux kernel, the following vulnerability has been resolved: tee: optee: Fix kernel panic caused by incorrect error handling The error path while failing to register devices on the TEE bus has a bug leading to kernel panic as follows: 15.398930 Unable to handle kernel paging request at...

DEBIAN-CVE-2024-27405

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs It is observed sometimes when tethering is used over NCM with Windows 11 as host, at some instances, the gadgetgiveback has one byte appended at the end of a prop...

PT-2024-29258

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue occurs when the mcp251xfd start xmit function fails, causing the driver to stop processing messages and the interrupt routine to run indefinitely. This can happen when multiple...

Spoofing Attack

GNOME GLib is vulnerable to spoofing Attack. The vulnerability is due to inadequate validation of the source of D-Bus signals in GDBus-based clients, allowing spoofed signals from other users on a shared system to be accepted as legitimate...

CVE-2024-4760

A voltage glitch during the startup of EEFC NVM controllers on Microchip SAM E70/S70/V70/V71, SAM G55, SAM 4C/4S/4N/4E, and SAM 3S/3N/3U microcontrollers allows access to the memory bus via the debug interface even if the security bit is set...

CVE-2024-4760

The CVE-2024-4760 issue relates to a voltage glitch during the startup of EEFC NVM controllers on Microchip SAM E70/S70/V70/V71, SAM G55, SAM 4C/4S/4N/4E, and SAM 3S/3N/3U microcontrollers that allows access to the memory bus via the debug interface even when the security bit is set. Technical de...

CVE-2024-4760 Voltage glitch during startup of the EEFC NVM controller can bypass the security bit

A voltage glitch during the startup of EEFC NVM controllers on Microchip SAM E70/S70/V70/V71, SAM G55, SAM 4C/4S/4N/4E, and SAM 3S/3N/3U microcontrollers allows access to the memory bus via the debug interface even if the security bit is set...

Fedora 39 : mingw-glib2 (2024-be032e564d)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-be032e564d advisory. Update glib2 to fix CVE-2024-34397. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Ness...

Microchip SAM 安全漏洞

Microchip SAM is a family of microprocessors and microcontrollers from Microchip Technology USA. A security vulnerability exists in the Microchip SAM family of products, which arises from a voltage spike during controller startup that allows access to the memory bus through the debug interface...

Fedora 40 : mingw-glib2 (2024-2ce1c754f7)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-2ce1c754f7 advisory. Update glib2 to fix CVE-2024-34397. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Ness...