9553 matches found
Microsoft Hyper-V security vulnerabilities
Microsoft Windows Hyper-V is a virtualization technology developed by Microsoft for creating and managing virtual machines on the Windows operating system, of which the Shared Virtual Disk is one. An elevation of privilege vulnerability exists in Microsoft Windows Hyper-V Shared Virtual Disk, whi...
PT-2024-8086
Name of the Vulnerable Software and Affected Versions: Windows Hyper-V Shared Virtual Disk affected versions not specified Description: The issue is related to the Windows Hyper-V Shared Virtual Disk and involves the dereferencing of an untrusted pointer. This can allow an attacker to elevate the...
FreeBSD security vulnerabilities
FreeBSD is a set of Unix-like operating systems from the FreeBSD Foundation. A security vulnerability exists in FreeBSD that stems from the vulnerability of the hda driver to buffer over-reading, which allows an attacker to perform a denial-of-service DoS attack against the host computer and read...
CVE-2024-43624: Untrusted Pointer Dereference
Windows Hyper-V Shared Virtual Disk Elevation of Privilege Vulnerability...
CVE-2024-38264: Sensitive Data Storage in Improperly Locked Memory
Microsoft Virtual Hard Disk VHDX Denial of Service Vulnerability...
Moderate: jose security update
Jose is a C-language implementation of the Javascript Object Signing and Encryption standards. The jose package is a dependency of the clevis and tang packages, together providing Network Bound Disk Encryption NBDE in AlmaLinux. Security Fixes: jose: resource exhaustion CVE-2024-28176 jose: Denia...
PT-2024-8079
Name of the Vulnerable Software and Affected Versions: Microsoft Virtual Hard Disk VHDX affected versions not specified Description: The issue is related to the use of insecure mechanisms for handling authentication data in the operating system's memory, which can lead to a denial-of-service...
scsi: sd: Fix off-by-one error in sd_read_block_characteristics()
...
AZL-53616 CVE-2024-50189 affecting package kernel for versions less than 5.15.173.1-1
In the Linux kernel, the following vulnerability has been resolved: HID: amdsfh: Switch to device-managed dmamalloccoherent Using the device-managed version allows to simplify clean-up in probe error path. Additionally, this device-managed ensures proper cleanup, which helps to resolve memory...
CVE-2024-50189 HID: amd_sfh: Switch to device-managed dmam_alloc_coherent()
In the Linux kernel, the following vulnerability has been resolved: HID: amdsfh: Switch to device-managed dmamalloccoherent Using the device-managed version allows to simplify clean-up in probe error path. Additionally, this device-managed ensures proper cleanup, which helps to resolve memory...
CVE-2024-50189 HID: amd_sfh: Switch to device-managed dmam_alloc_coherent()
In the Linux kernel, the following vulnerability has been resolved: HID: amdsfh: Switch to device-managed dmamalloccoherent Using the device-managed version allows to simplify clean-up in probe error path. Additionally, this device-managed ensures proper cleanup, which helps to resolve memory...
CVE-2024-50189
CVE-2024-50189 affects the Linux kernel HID driver for amd_sfh and is resolved by switching to device-managed dmam_alloc_coherent. The change simplifies cleanup in probe() and error paths and provides stronger cleanup guarantees, which the documents say helps to prevent memory errors, page faults...
SUSE CVE-2024-50143
In the Linux kernel, the following vulnerability has been resolved: udf: fix uninit-value use in udfgetfileshortad Check for overflow when computing alen in udfcurrentaext to mitigate later uninit-value use in udfgetfileshortad KMSAN bug1. After applying the patch reproducer did not trigger any...
Insecure Default Initialization of Resource
Overview Affected versions of this package are vulnerable to Insecure Default Initialization of Resource due to the defaultfilesystemdisk configuration. An attacker can access sensitive data by exploiting the default public storage setting. Remediation Upgrade filament/actions to version 3.2.123 ...
CVE-2024-51758
Filament is a collection of full-stack components for accelerated Laravel development. All Filament features that interact with storage use the defaultfilesystemdisk config option. This allows the user to easily swap their storage driver to something production-ready like s3 when deploying their...
CVE-2024-51758 Exported files stored in default (`public`) filesystem if not reconfigured in filament
Filament is a collection of full-stack components for accelerated Laravel development. All Filament features that interact with storage use the defaultfilesystemdisk config option. This allows the user to easily swap their storage driver to something production-ready like s3 when deploying their...
CVE-2024-51758
Filament is a collection of full-stack components for accelerated Laravel development. All Filament features that interact with storage use the "defaultfilesystemdisk" config option. This allows the user to easily swap their storage driver to something production-ready like "s3" when deploying...
CVE-2024-51758 Exported files stored in default (`public`) filesystem if not reconfigured in filament
Filament is a collection of full-stack components for accelerated Laravel development. All Filament features that interact with storage use the defaultfilesystemdisk config option. This allows the user to easily swap their storage driver to something production-ready like s3 when deploying their...
CVE-2024-51758 Exported files stored in default (`public`) filesystem if not reconfigured in filament
Filament is a collection of full-stack components for accelerated Laravel development. All Filament features that interact with storage use the defaultfilesystemdisk config option. This allows the user to easily swap their storage driver to something production-ready like s3 when deploying their...
PT-2024-34022
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue concerns a memory management vulnerability in the Linux kernel, specifically in the HID: amd sfh component. It has been resolved by switching to a device-managed version of...