Debian dla-3774 : gross - security update

The remote Debian 10 host has a package installed that is affected by a vulnerability as referenced in the dla-3774 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3774-1 [email protected] https://www.debian.org/lts/security/...

MGASA-2024-0085 Updated libreswan packages fix security vulnerabilities

The updated package fixes security vulnerabilities: pluto in Libreswan before 4.11 allows a denial of service responder SPI mishandling and daemon crash via unauthenticated IKEv1 Aggressive Mode packets. CVE-2023-30570 An issue was discovered in Libreswan before 4.12. When an IKEv2 Child SA REKEY...

Updated libreswan packages fix security vulnerabilities

The updated package fixes security vulnerabilities: pluto in Libreswan before 4.11 allows a denial of service responder SPI mishandling and daemon crash via unauthenticated IKEv1 Aggressive Mode packets. CVE-2023-30570 An issue was discovered in Libreswan before 4.12. When an IKEv2 Child SA REKEY...

[SECURITY] Fedora 40 Update: xen-4.18.1-1.fc40

This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...

[SECURITY] Fedora 40 Update: iwd-2.16-1.fc40

The daemon and utilities for controlling and configuring the Wi-Fi network hardware...

The vulnerability of the p2putil.c component in the iNet Wireless daemon allows a hacker to induce a service failure.

The vulnerability of the p2putil.c component in iNet Wireless allows for initialization errors to occur. Exploiting this vulnerability could enable a remote attacker to cause service interruptions...

DEBIAN-CVE-2024-2494

A flaw was found in the RPC library APIs of libvirt. The RPC server deserialization code allocates memory for arrays before the non-negative length check is performed by the C API entry points. Passing a negative length to the gnew0 function results in a crash due to the negative length being...

CVE-2024-2494

A flaw was found in the RPC library APIs of libvirt. The RPC server deserialization code allocates memory for arrays before the non-negative length check is performed by the C API entry points. Passing a negative length to the gnew0 function results in a crash due to the negative length being...

USN-6705-1 linux-aws, linux-aws-5.15 vulnerabilities

It was discovered that the DesignWare USB3 for Qualcomm SoCs driver in the Linux kernel did not properly handle certain error conditions during device registration. A local attacker could possibly use this to cause a denial of service system crash. CVE-2023-22995 It was discovered that the NVIDIA...

UBUNTU-CVE-2024-2494

A flaw was found in the RPC library APIs of libvirt. The RPC server deserialization code allocates memory for arrays before the non-negative length check is performed by the C API entry points. Passing a negative length to the gnew0 function results in a crash due to the negative length being...

AZL-36893 CVE-2024-2496 affecting package libvirt for versions less than 7.10.0-8

A NULL pointer dereference flaw was found in the udevConnectListAllInterfaces function in libvirt. This issue can occur when detaching a host interface while at the same time collecting the list of interfaces via virConnectListAllInterfaces API. This flaw could be used to perform a denial of...

UBUNTU-CVE-2024-2496

A NULL pointer dereference flaw was found in the udevConnectListAllInterfaces function in libvirt. This issue can occur when detaching a host interface while at the same time collecting the list of interfaces via virConnectListAllInterfaces API. This flaw could be used to perform a denial of...

CVE-2024-2496 Libvirt: null pointer dereference in udevconnectlistallinterfaces()

A NULL pointer dereference flaw was found in the udevConnectListAllInterfaces function in libvirt. This issue can occur when detaching a host interface while at the same time collecting the list of interfaces via virConnectListAllInterfaces API. This flaw could be used to perform a denial of...

CVE-2023-52159

A stack-based buffer overflow vulnerability in gross 0.9.3 through 1.x before 1.0.4 allows remote attackers to trigger a denial of service grossd daemon crash or potentially execute arbitrary code in grossd via crafted SMTP transaction parameters that cause an incorrect strncat for a log entry...

Red Hat libvirt Code Issue Vulnerability

Red Hat libvirt is a Linux API for implementing Linux virtualization features from Red Hat, Inc. that supports a variety of Hypervisors, including Xen and KVM, as well as QEMU and a number of virtual products for other operating systems. A code issue vulnerability exists in Red Hat libvirt that...

Uncontrolled Resource Consumption

avahi is vulnerable to the Uncontrolled Resource Consumption. avahi library is vulnerable to a flaw that allows an unprivileged user to trigger a dbus call, leading to a crash of the avahi daemon...

SUSE CVE-2024-2496

A NULL pointer dereference flaw was found in the udevConnectListAllInterfaces function in libvirt. This issue can occur when detaching a host interface while at the same time collecting the list of interfaces via virConnectListAllInterfaces API. This flaw could be used to perform a denial of...

[SECURITY] Fedora 39 Update: iwd-2.16-1.fc39

The daemon and utilities for controlling and configuring the Wi-Fi network hardware...

PT-2024-3061 · Libvirt +8 · Libvirt +8

Name of the Vulnerable Software and Affected Versions: libvirt affected versions not specified Description: The issue is related to a NULL pointer dereference flaw in the udevConnectListAllInterfaces function in libvirt. This flaw can occur when detaching a host interface while collecting the lis...

Off-by-one Error

libvirt.so is vulnerable to Off-by-one Error. The vulnerability is due to a miscalculation in the udevListInterfacesByStatus function when the number of interfaces exceeds the size of the names array. This issue can be exploited by sending specially crafted data to the libvirt daemon, enabling an...