331 matches found
CVE-2024-57927 nfs: Fix oops in nfs_netfs_init_request() when copying to cache
In the Linux kernel, the following vulnerability has been resolved: nfs: Fix oops in nfsnetfsinitrequest when copying to cache When netfslib wants to copy some data that has just been read on behalf of nfs, it creates a new write request and calls nfsnetfsinitrequest to initialise it, but with a...
CVE-2024-57927 nfs: Fix oops in nfs_netfs_init_request() when copying to cache
In the Linux kernel, the following vulnerability has been resolved: nfs: Fix oops in nfsnetfsinitrequest when copying to cache When netfslib wants to copy some data that has just been read on behalf of nfs, it creates a new write request and calls nfsnetfsinitrequest to initialise it, but with a...
Basecamp: Improper Cache Handling Allows Access to Post-Logout Pages
The report detailed how some browsers' bfcache allowed access to post-logout pages...
CVE-2024-53216 nfsd: release svc_expkey/svc_export with rcu_work
In the Linux kernel, the following vulnerability has been resolved: nfsd: release svcexpkey/svcexport with rcuwork The last reference for cachehead can be reduced to zero in cshow and eshowusing rcureadlock and rcureadunlock. Consequently, svcexportput and expkeyput will be invoked, leading to tw...
CVE-2024-53174 SUNRPC: make sure cache entry active before cache_show
In the Linux kernel, the following vulnerability has been resolved: SUNRPC: make sure cache entry active before cacheshow The function cshow was called with protection from RCU. This only ensures that cp will not be freed. Therefore, the reference count for cp can drop to zero, which will trigger...
The vulnerability of the zbx_snmp_cache_handle_engineid() function in the proxy server of the Zabbix monitoring system allows a attacker to cause a service failure.
The vulnerability of the zbxsnmpcachehandleengineid function in the Zabbix monitoring proxy server relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
CVE-2024-40790
The issue was addressed with improved handling of caches. This issue is fixed in visionOS 2. An app may be able to read sensitive data from the GPU memory...
CVE-2024-40790
The issue was addressed with improved handling of caches. This issue is fixed in visionOS 2. An app may be able to read sensitive data from the GPU memory...
CVE-2024-40790
The issue was addressed with improved handling of caches. This issue is fixed in visionOS 2. An app may be able to read sensitive data from the GPU memory...
CVE-2024-40790
The issue was addressed with improved handling of caches. This issue is fixed in visionOS 2. An app may be able to read sensitive data from the GPU memory...
CVE-2024-40790
CVE-2024-40790 affects Apple visionOS 2. The vulnerability stems from cache handling allowing an app to read sensitive data from GPU memory. Apple’s documentation states this is fixed in visionOS 2; remediation is updating to visionOS 2. No exploitation details are provided in the supplied docume...
UBUNTU-CVE-2024-33600
nscd: Null pointer crashes after notfound response If the Name Service Cache Daemon's nscd cache fails to add a not-found netgroup response to the cache, the client request can result in a null pointer dereference. This flaw was introduced in glibc 2.15 when the cache was added to nscd. This...
Improper Cache Handling
gitHub.com/coredns/coredns is vulnerable to Improper Cache Handling. The vulnerability is due to the CD bit disabling validation in the remote server which could allow an attacker to retrieve sensitive information cached erroneously, leading to information disclosure or unauthorized access...
CVE-2024-23220
The issue was addressed with improved handling of caches. This issue is fixed in visionOS 1.1, iOS 17.4 and iPadOS 17.4. An app may be able to fingerprint the user...
Code injection
The issue was addressed with improved handling of caches. This issue is fixed in visionOS 1.1, iOS 17.4 and iPadOS 17.4. An app may be able to fingerprint the user...
CVE-2024-23220
The issue was addressed with improved handling of caches. This issue is fixed in iOS 17.4 and iPadOS 17.4, visionOS 1.1. An app may be able to fingerprint the user...
CVE-2024-23220
The issue was addressed with improved handling of caches. This issue is fixed in iOS 17.4 and iPadOS 17.4, visionOS 1.1. An app may be able to fingerprint the user...
CVE-2024-23220
The CVE-2024-23220 issue affects Apple visionOS, iOS, and iPadOS Safari related to fingerprinting the user due to an issue in cache handling. The vulnerability arises from the Safari component (on Apple Vision Pro platforms) where improper cache handling could allow an app to fingerprint the user...
CVE-2024-23220: Undefined Security Weakness
The issue was addressed with improved handling of caches. This issue is fixed in iOS 17.4 and iPadOS 17.4, visionOS 1.1. An app may be able to fingerprint the user...