CVE-2024-50250

In the Linux kernel, the following vulnerability has been resolved: fsdax: daxunshareiter needs to copy entire blocks The code that copies data from srcmap to iomap in daxunshareiter is very very broken, which bfoster's recent fsx changes have exposed. If the pos and len passed to daxfileunshare...

CVE-2024-50250

The CVE-2024-50250 issue affects the Linux kernel fsdax code: dax_unshare_iter copies data from srcmap to iomap and previously did not align copy_pos/copy_len to a page boundary, allowing misalignment when iter->pos and length are not page-aligned. The bug can cause data corruption (when iter-...

CVE-2024-50250 fsdax: dax_unshare_iter needs to copy entire blocks

In the Linux kernel, the following vulnerability has been resolved: fsdax: daxunshareiter needs to copy entire blocks The code that copies data from srcmap to iomap in daxunshareiter is very very broken, which bfoster's recent fsx changes have exposed. If the pos and len passed to daxfileunshare...

CVE-2024-50250 fsdax: dax_unshare_iter needs to copy entire blocks

In the Linux kernel, the following vulnerability has been resolved: fsdax: daxunshareiter needs to copy entire blocks The code that copies data from srcmap to iomap in daxunshareiter is very very broken, which bfoster's recent fsx changes have exposed. If the pos and len passed to daxfileunshare...

Exploit for Cross-site Scripting in Salesagility Suitecrm

CVE-2024-50335: Authenticated XSS in "Publish Key" Field Allow...

WebRTC Data Compromise

The vulnerability of WebRTC implementations in Google Chrome and Microsoft Edge relates to the use of memory after deallocation. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of data through a specially crafted HTML page...

Frame Iterator Component Firefox Loop Unreachable Exit Condition

The vulnerability of the Frame Iterator component in the Firefox web browser is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability could allow an attacker to compromise data integrity...

Firefox Buffer Overflow DoS

The vulnerability in the Firefox web browser is related to writing beyond the buffer limit. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service interruptions...

Firefox Screenshot Data Compromise

The vulnerability in the Firefox web browser’s screenshot creation function is related to an incorrect limitation on the visible layers of the user interface. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of data...

DOMPurify Prototype Manipulation

The vulnerability of the JavaScript library for secure cleaning and protection of HTML code, DOMPurify, is related to uncontrolled changes to object prototype attributes. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and integrity of the protected...

bzip2: bzip2: Data integrity error when decompressing (with data integrity tests fail).

A data integrity error was found in the bzip2 User-space package functionality when decompressing. This issue occurs when a user decompresses a particular kind of .bz2 files. A local user could get unexpected results or corrupted data as result of decompressing these files...

f2fs Heap Buffer Overflow DoS

The vulnerability of the f2fsdoshutdown function in the fs/f2fs/file.c file of the f2fs file system in the Linux operating system is related to the reallocation of previously released memory due to competitive access to resources race condition. Exploiting this vulnerability could allow an attack...

Linux xenvif_flush_hash Heap Buffer Overflow DoS

The vulnerability of the xenvifflushhash function in the drivers/net/xen-netback/hash.c module of the Linux kernel is related to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of th...

Linux l2cap_sock_recv_cb Buffer Overflow DoS

The vulnerability of the l2capsockrecvcb function in the net/bluetooth/l2capsock.c module of the Linux kernel is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Linux scmi_optee_chan_free Heap Buffer Overflow DoS

The vulnerability of the scmiopteechanfree function in the drivers/firmware/armscmi/optee.c file of the Linux kernel is related to the repeated release of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

ext4 Heap Buffer Overflow DoS

The vulnerability of the ext4fillsuper function in the fs/ext4/super.c file of the Linux kernel’s file system relates to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

Linux x86_android_tablet_probe Heap Buffer Overflow DoS

The vulnerability of the x86androidtabletprobe function in the Linux kernel’s drivers/platform/x86/x86-android-tablets/core.c file is related to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

Hisilicon Hip08 Kernel Heap Buffer Overflow DoS

The vulnerability of the hnsrocev2exit function in the drivers/infiniband/hw/hns/hnsrocehwv2.c file of the Hisilicon Hip08 kernel in the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the...

PT-2024-7787 · Veeam · Veeam Backup Enterprise Manager

Name of the Vulnerable Software and Affected Versions: Veeam Backup Enterprise Manager affected versions not specified Description: A vulnerability in Veeam Backup Enterprise Manager has been identified, which allows attackers to perform authentication bypass. Attackers must be able to perform a...

Linux switchtec_ntbremove() Data Compromise

The vulnerability of the switchtecntbremove function in the drivers/ntb/hw/mscc/ntb hw switchtec.c file of the Linux kernel is related to the reutilization of previously freed memory due to competitive access to resources race condition. Exploiting this vulnerability could allow an attacker to...