ROS-20241112-03

Vulnerability of the JWE, JWS, JWT go-jose standards set implementation package for Go programming language is related to incorrect processing of highly compressed input data. Exploitation of the vulnerability could allow An attacker acting remotely to cause a denial of service Vulnerability of...

fontforge: command injection via crafted archives or compressed files

Splinefont in FontForge through 20230101 allows command injection via crafted archives or compressed files...

GHSA-584Q-6J8J-R5PM secp256k1-node allows private key extraction over ECDH

Summary In elliptic-based version, loadUncompressedPublicKey has a check that the public key is on the curve: https://github.com/cryptocoinjs/secp256k1-node/blob/6d3474b81d073cc9c8cc8cfadb580c84f8df5248/lib/elliptic.jsL37-L39 loadCompressedPublicKey is, however, missing that check:...

CVE-2024-47736

In the Linux kernel, the following vulnerability has been resolved: erofs: handle overlapped pclusters out of crafted images properly syzbot reported a task hang issue due to a deadlock case where it is waiting for the folio lock of a cached folio that will be used for cache I/Os. After looking...

UBUNTU-CVE-2024-47736

In the Linux kernel, the following vulnerability has been resolved: erofs: handle overlapped pclusters out of crafted images properly syzbot reported a task hang issue due to a deadlock case where it is waiting for the folio lock of a cached folio that will be used for cache I/Os. After looking...

CVE-2024-47736

CVE-2024-47736 relates to the Linux kernel EROFS handling of overlapped pclusters in crafted images. The issue caused a potential task hang/deadlock while waiting on the folio lock during cache I/O, triggered by fuzzed images with overlapping big pclusters. Root causes described include mis-arran...

CVE-2024-47736 erofs: handle overlapped pclusters out of crafted images properly

In the Linux kernel, the following vulnerability has been resolved: erofs: handle overlapped pclusters out of crafted images properly syzbot reported a task hang issue due to a deadlock case where it is waiting for the folio lock of a cached folio that will be used for cache I/Os. After looking...

PT-2024-33278 · Unknown · Secp256K1-Node

Name of the Vulnerable Software and Affected Versions: secp256k1-node versions prior to 5.0.1 secp256k1-node versions prior to 4.0.4 secp256k1-node versions prior to 3.8.1 Description: The issue affects the elliptic-based version of secp256k1-node, where the loadCompressedPublicKey function is...

OESA-2024-2254 python-aiohttp security update

Async http client/server framework asyncio. Security Fixes: aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. Prior to version 3.10.2, static routes which contain files with compressed variants .gz or .br extension are vulnerable to path traversal outside the root...

CVE-2024-24122

A remote code execution vulnerability exists in the project management component of Wanxing Technology's Yitu software (specifically identified in version 3.2.2 ). The root cause allows an attacker to treat the exp.adpx file as a zip compressed file to construct a special filename. By exploiting ...

CVE-2024-24122: Improper Limitation of a Pathname to a Restricted Directory

A remote code execution vulnerability in the project management of Wanxing Technology's Yitu project which allows an attacker to use the exp.adpx file as a zip compressed file to construct a special file name, which can be used to decompress the project file into the system startup folder, restar...

The vulnerability of the btrfs component of the Linux operating system’s kernel, related to writing beyond the memory boundaries, allows a hacker to trigger a service failure.

The vulnerability of the btrfs component in Linux operating systems relates to the copying of overly large compressed segments. The compressed length may be corrupted, resulting in a much larger amount of memory being allocated for the buffer. Exploiting this vulnerability can allow an attacker t...

The vulnerability of Windows operating systems arises from improper external management of file names or file paths, allowing attackers to gain unauthorized access and modify the contents of compressed folders.

Vulnerabilities of Windows operating systems are related to incorrect external management of file names or file paths. Exploiting these vulnerabilities can allow an attacker, operating remotely, to gain unauthorized access and modify the contents of compressed folders...

btrfs: fix extent map use-after-free when adding pages to compressed bio

...

openSUSE Security Advisory (SUSE-SU-2024:3110-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : python-aiohttp (SUSE-SU-2024:3110-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2024:3110-1 advisory. - CVE-2024-42367: Fixed path traversal outside the root directory when requests involve compressed files ...

SUSE-SU-2024:3110-1 Security update for python-aiohttp

This update for python-aiohttp fixes the following issues: - CVE-2024-42367: Fixed path traversal outside the root directory when requests involve compressed files as symbolic links bsc1229226...

CVE-2024-42059

CVE-2024-42059 affects Zyxel devices including ATP series firmware V5.00–V5.38, USG FLEX series V5.00–V5.38, USG FLEX 50(W) V5.00–V5.38, and USG20(W)-VPN V5.00–V5.38. The issue is a post-authentication command-injection vulnerability in the FTP handling that allows an authenticated administrator ...

CVE-2024-42059

A post-authentication command injection vulnerability in Zyxel ATP series firmware versions from V5.00 through V5.38, USG FLEX series firmware versions from V5.00 through V5.38, USG FLEX 50W series firmware versions from V5.00 through V5.38, and USG20W-VPN series firmware versions from V5.00...

CVE-2022-48923

A flaw was found in the btrfs module in the Linux kernel. A too-big compressed lzo segment can cause an out-of-bounds write when copied due to a missing check of its size, potentially causing a general protection fault and a denial of service...