SUSE CVE-2024-41038

In the Linux kernel, the following vulnerability has been resolved: firmware: csdsp: Prevent buffer overrun when processing V2 alg headers Check that all fields of a V2 algorithm header fit into the available firmware data buffer. The wmfw V2 format introduced variable-length strings in the...

DEBIAN-CVE-2024-41038

In the Linux kernel, the following vulnerability has been resolved: firmware: csdsp: Prevent buffer overrun when processing V2 alg headers Check that all fields of a V2 algorithm header fit into the available firmware data buffer. The wmfw V2 format introduced variable-length strings in the...

UBUNTU-CVE-2024-41038

In the Linux kernel, the following vulnerability has been resolved: firmware: csdsp: Prevent buffer overrun when processing V2 alg headers Check that all fields of a V2 algorithm header fit into the available firmware data buffer. The wmfw V2 format introduced variable-length strings in the...

org.bouncycastle: Importing an EC certificate with crafted F2m parameters may lead to Denial of Service

A vulnerability was found in Bouncy Castle. An issue was discovered in ECCurve.java and ECCurve.cs in Bouncy Castle Java BC Java. Importing an EC certificate with crafted F2m parameters can lead to excessive CPU consumption during the evaluation of the curve parameters...

SUSE CVE-2024-39491

In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: cs35l56: Fix lifetime of csdsp instance The csdsp instance is initialized in the driver probe so it should be freed in the driver remove. Also fix a missing call to csdspremove in the error path of cs35l56hdacommonprob...

cs.budspencerofficial.com Cross Site Scripting vulnerability OBB-3942368

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2024-29235

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to insufficient input validation in the cs dsp coeff parse alg and cs dsp coeff parse coeff functions in the Linux kernel's cs dsp component. This can lead to a deni...

PT-2024-7370

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the cs dsp load function in the Linux kernel, which is associated with a memory write beyond the allocated buffer. If a block header is longer than the amount o...

PT-2024-7367

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the validation of payload length in the cs dsp module of the Linux kernel. Specifically, the check for the length of a block payload was being done near the end...

PT-2024-7518

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a buffer overflow vulnerability in the Linux kernel, specifically in the cs dsp function. The vulnerability occurs when the firmware file buffer is not large enou...

PT-2024-29219

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a buffer overrun when processing V2 algorithm headers in the Linux kernel's firmware, specifically in the cs dsp module. The wmfw V2 format introduces...

Yokogawa Electric Security Breach

Yokogawa Electric is a server of Yokogawa Electric Yokogawa, a Japanese company. A security vulnerability exists in the Yokogawa Electric product. An attacker could exploit the vulnerability to execute arbitrary programs with the privileges of a system account. The following products and versions...

The vulnerability of the server logs for Centum Cams in distributed control systems CENTUM CS 3000 and CENTUM VP allows a intruder to execute arbitrary code.

The vulnerability of the server logs of Centum Cams for distributed control systems CENTUM CS 3000 and CENTUM VP relates to access control errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code with SYSTEM privileges by replacing the legitimate DLL file with a...

cs.scoregroup.com Cross Site Scripting vulnerability OBB-3929336

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Metasploit Wrap-Up 05/17/2024

LDAP Authentication Improvements This week, in Metasploit v6.4.9, the team has added multiple improvements for LDAP related attacks. Two improvements relating to authentication is the new support for Signing and Channel Binding. Microsoft has been making changes to harden the communications to...

PT-2024-9230

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the incorrect handling of errors in the cs35l56 component of the Linux kernel. This can lead to a denial of service. The problem arises from the initialization ...

PT-2024-27974

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the ALSA controls in the Linux kernel, specifically with the hda/cs dsp ctl module. The original implementation did not properly remove the ALSA controls when the...

kernel: Linux kernel: Denial of Service via integer overflow in radeon_cs_parser_init

A flaw was found in the Linux kernel's drm/radeon component. A local attacker with low privileges could exploit an integer overflow vulnerability in the radeoncsparserinit function. This flaw causes a size variable to become zero, leading to the referencing of uninitialized memory. This can resul...

CVE-2024-4063

A vulnerability was found in EZVIZ CS-C6-21WFR-8 5.2.7 Build 170628. It has been classified as problematic. This affects an unknown part of the component Davinci Application. The manipulation leads to improper certificate validation. It is possible to initiate the attack remotely. The complexity ...

CVE-2024-4063 EZVIZ CS-C6-21WFR-8 Davinci Application certificate validation

A vulnerability was found in EZVIZ CS-C6-21WFR-8 5.2.7 Build 170628. It has been classified as problematic. This affects an unknown part of the component Davinci Application. The manipulation leads to improper certificate validation. It is possible to initiate the attack remotely. The complexity ...