9844 matches found
CVE-2024-38264 Microsoft Virtual Hard Disk (VHDX) Denial of Service Vulnerability
...
CVE-2024-50386
Account users in Apache CloudStack by default are allowed to register templates to be downloaded directly to the primary storage for deploying instances. Due to missing validation checks for KVM-compatible templates in CloudStack 4.0.0 through 4.18.2.4 and 4.19.0.0 through 4.19.1.2, an attacker...
CVE-2024-50386 Apache CloudStack: Directly downloaded templates can be used to abuse KVM-based infrastructure
Account users in Apache CloudStack by default are allowed to register templates to be downloaded directly to the primary storage for deploying instances. Due to missing validation checks for KVM-compatible templates in CloudStack 4.0.0 through 4.18.2.4 and 4.19.0.0 through 4.19.1.2, an attacker...
CVE-2024-50386 Apache CloudStack: Directly downloaded templates can be used to abuse KVM-based infrastructure
Account users in Apache CloudStack by default are allowed to register templates to be downloaded directly to the primary storage for deploying instances. Due to missing validation checks for KVM-compatible templates in CloudStack 4.0.0 through 4.18.2.4 and 4.19.0.0 through 4.19.1.2, an attacker...
kernel: nbd: fix uaf in nbd_open
In the Linux kernel, the following vulnerability has been resolved: nbd: fix uaf in nbdopen Commit 4af5f2e03013 "nbd: use blkmqallocdisk and blkcleanupdisk" cleans up disk by blkcleanupdisk and it won't set disk-privatedata as NULL as before. UAF may be triggered in nbdopen if someone tries to op...
emacs: LaTeX preview is enabled by default for e-mail attachments
A flaw was found in Emacs. When Emacs is used as an email client, a preview of a crafted LaTeX document attached to an email can exhaust the disk space or the inodes allocated for the partition where the /tmp directory is located. This issue possibly results in a denial of service...
Moderate: Red Hat Security Advisory: jose security update
An update for jose is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...
Microsoft Virtual Hard Disk (VHDX) Denial of Service Vulnerability
...
November 12, 2024âKB5046616 (OS Build 20348.2849)
November 12, 2024âKB5046616 OS Build 20348.2849 Applies To Windows Server 2022 Note For information about Windows update terminology, see the article about the types of Windows updates and the monthly quality update types. For an overview of Windows Server 2022, see its update history page. Note...
PT-2024-8086
Name of the Vulnerable Software and Affected Versions: Windows Hyper-V Shared Virtual Disk affected versions not specified Description: The issue is related to the Windows Hyper-V Shared Virtual Disk and involves the dereferencing of an untrusted pointer. This can allow an attacker to elevate the...
CVE-2024-38264: Sensitive Data Storage in Improperly Locked Memory
Microsoft Virtual Hard Disk VHDX Denial of Service Vulnerability...
PT-2024-8079
Name of the Vulnerable Software and Affected Versions: Microsoft Virtual Hard Disk VHDX affected versions not specified Description: The issue is related to the use of insecure mechanisms for handling authentication data in the operating system's memory, which can lead to a denial-of-service...
Microsoft Hyper-V security vulnerabilities
Microsoft Windows Hyper-V is a virtualization technology developed by Microsoft for creating and managing virtual machines on the Windows operating system, of which the Shared Virtual Disk is one. An elevation of privilege vulnerability exists in Microsoft Windows Hyper-V Shared Virtual Disk, whi...
FreeBSD security vulnerabilities
FreeBSD is a set of Unix-like operating systems from the FreeBSD Foundation. A security vulnerability exists in FreeBSD that stems from the vulnerability of the hda driver to buffer over-reading, which allows an attacker to perform a denial-of-service DoS attack against the host computer and read...
CVE-2024-43624: Untrusted Pointer Dereference
Windows Hyper-V Shared Virtual Disk Elevation of Privilege Vulnerability...
Moderate: jose security update
Jose is a C-language implementation of the Javascript Object Signing and Encryption standards. The jose package is a dependency of the clevis and tang packages, together providing Network Bound Disk Encryption NBDE in AlmaLinux. Security Fixes: jose: resource exhaustion CVE-2024-28176 jose: Denia...
scsi: sd: Fix off-by-one error in sd_read_block_characteristics()
...
AZL-53616 CVE-2024-50189 affecting package kernel for versions less than 5.15.173.1-1
In the Linux kernel, the following vulnerability has been resolved: HID: amdsfh: Switch to device-managed dmamalloccoherent Using the device-managed version allows to simplify clean-up in probe error path. Additionally, this device-managed ensures proper cleanup, which helps to resolve memory...
CVE-2024-50189
CVE-2024-50189 affects the Linux kernel HID driver for amd_sfh and is resolved by switching to device-managed dmam_alloc_coherent. The change simplifies cleanup in probe() and error paths and provides stronger cleanup guarantees, which the documents say helps to prevent memory errors, page faults...
CVE-2024-50189 HID: amd_sfh: Switch to device-managed dmam_alloc_coherent()
In the Linux kernel, the following vulnerability has been resolved: HID: amdsfh: Switch to device-managed dmamalloccoherent Using the device-managed version allows to simplify clean-up in probe error path. Additionally, this device-managed ensures proper cleanup, which helps to resolve memory...