PT-2024-3182

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 3.5.1 Description The issue is related to an out-of-bounds read in FreeRDP, a free implementation of the Remote Desktop Protocol. This occurs when a WCHAR string is read with twice its size and converted to UTF-8, the...

New machines with vTPM have the same thumbprint in vSphere

New machines have the same vTPM thumbprint as the master image in vSphere. This can be seen using PowerCLI and comparing the machines with the following command: Get-VTpm -vm | Get-VTpmCertificate...

CVE-2024-32633 Unsigned compared against 0

An unsigned value can never be negative, so eMMC full disk test will always evaluate the same way...

CVE-2024-3386

An incorrect string comparison vulnerability in Palo Alto Networks PAN-OS software prevents Predefined Decryption Exclusions from functioning as intended. This can cause traffic destined for domains that are not specified in Predefined Decryption Exclusions to be unintentionally excluded from...

CVE-2024-3386

An incorrect string comparison vulnerability in Palo Alto Networks PAN-OS software prevents Predefined Decryption Exclusions from functioning as intended. This can cause traffic destined for domains that are not specified in Predefined Decryption Exclusions to be unintentionally excluded from...

CVE-2024-3386 PAN-OS: Predefined Decryption Exclusions Does Not Work as Intended

An incorrect string comparison vulnerability in Palo Alto Networks PAN-OS software prevents Predefined Decryption Exclusions from functioning as intended. This can cause traffic destined for domains that are not specified in Predefined Decryption Exclusions to be unintentionally excluded from...

CVE-2024-3386

CVE-2024-3386 : In Palo Alto Networks PAN-OS, an incorrect string comparison prevents Predefined Decryption Exclusions from functioning as intended, causing traffic destined for domains not listed in the exclusions to be unintentionally excluded from decryption. The vulnerability affects PAN-OS s...

PAN-OS: Predefined Decryption Exclusions Does Not Work as Intended

An incorrect string comparison vulnerability in Palo Alto Networks PAN-OS software prevents Predefined Decryption Exclusions from functioning as intended. This can cause traffic destined for domains that are not specified in Predefined Decryption Exclusions to be unintentionally excluded from...

Comparing the Benefits of Microsegmentation vs. VLANs

...

NULL Pointer Dereference

JGraphT Core is vulnerable to NULL Pointer Dereference. The vulnerability is caused by a lack of null value validation in the org.jgrapht.alg.util.ToleranceDoubleComparator::compareDouble, Double method, which results in a NullPointerException if an attacker can pass a null value to one of the...

PT-2024-2969

Name of the Vulnerable Software and Affected Versions PAN-OS affected versions not specified Description The issue is related to an incorrect string comparison in the PAN-OS software, which affects the functionality of Predefined Decryption Exclusions. This can lead to unintended exclusion of...

javaparser:parseFuzzer: Security exception in com.github.javaparser.CommentsInserter.insertComments

Project: https://github.com/javaparser/javaparser.git Detailed Report: https://oss-fuzz.com/testcase?key=5562089436413952 Project: javaparser Fuzzing Engine: libFuzzer Fuzz Target: parseFuzzer Job Type: libfuzzerasanjavaparser Platform Id: linux Crash Type: Security exception Crash Address: Crash...

PT-2024-4544

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.6.37 Description: The issue is related to the ASoC component in the Linux kernel, specifically with the MediaTek sound card drivers. The vulnerability arises when a DAI link is present but no real codec is...

CVE-2023-52613

The Linux kernel contains a vulnerability in the loongson2_thermal driver component. The issue stems from an incorrect PTR_ERR() judgment where the kernel fails to correctly identify -ENODEV when thermal-zones are undefined. This leads to a NULL pointer dereference (specifically tz->type being...

CVE-2023-52613 drivers/thermal/loongson2_thermal: Fix incorrect PTR_ERR() judgment

In the Linux kernel, the following vulnerability has been resolved: drivers/thermal/loongson2thermal: Fix incorrect PTRERR judgment PTRERR returns -ENODEV when thermal-zones are undefined, and we need -ENODEV as the right value for comparison. Otherwise, tz-type is NULL when thermal-zones is...

SUSE-SU-2024:0901-1 Security update for python3

This update for python3 fixes the following issues: - CVE-2023-6597: Fixed symlink bug in cleanup of tempfile.TemporaryDirectory bsc1219666. - CVE-2022-48566: Make comparedigest more constant-time bsc1214691...

The vulnerability of the software for network monitoring and control of IT infrastructure on the SolarWinds Platform, due to insufficient comparison, allows a hacker to execute arbitrary commands with privileged privileges.

The vulnerability of the software for network monitoring and control of IT infrastructure on the SolarWinds Platform is related to insufficient comparison. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary commands with privileged privileges...

Fedora: Security Advisory for java-diff-utils (FEDORA-2024-129d8ca6fc)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory for diffoscope (FEDORA-2024-129d8ca6fc)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 40 Update: java-diff-utils-4.12-7.fc40

Diff Utils library is an OpenSource library for performing the comparison / d iff operations between texts or some kind of data: computing diffs, applying patches, genera ting unified diffs or parsing them, generating diff output for easy future displaying lik e side-by-side view and so on...