Huawei EulerOS: Security Advisory for python-zipp (EulerOS-SA-2024-2593)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP11 : python-zipp (EulerOS-SA-2024-2567)

According to the versions of the python-zipp package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A Denial of Service DoS vulnerability exists in the jaraco/zipp library, affecting all versions prior to 3.19.1. The vulnerability is triggere...

CVE-2024-43520 Windows Kernel Denial of Service Vulnerability

...

CVE-2024-38149

CVE-2024-38149 is a Windows BranchCache Denial of Service vulnerability. Documents indicate a network-exploitable issue (CVSS v3.1: 7.5, AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) affecting BranchCache components. Microsoft provides fixes via security updates (KB/MSRC guidance); no explicit root-cause ...

CVE-2024-38149 BranchCache Denial of Service Vulnerability

...

CVE-2024-43506

CVE-2024-43506 refers to a Microsoft Windows BranchCache Denial-of-Service vulnerability. The available OpenVAS/NVD context indicates the issue is a network-exploitable DoS (CVSS 3.1: 7.5) affecting Windows BranchCache, with no user interaction required and no privilege escalation per the given d...

CVE-2024-43506 BranchCache Denial of Service Vulnerability

...

KLA73903 DoS vulnerability in Microsoft Mariner

A remote code execution vulnerability was found in Microsoft Mariner. Malicious users can exploit this vulnerability to execute arbitrary code, cause denial of service. Original advisories CVE-2024-6197 Related products CBL-Mariner-2.0 CVE list CVE-2024-6197 critical Solution Install necessary...

KLA77354 DoS vulnerability in Wireshark

Denial of service vulnerability was found in Wireshark. Malicious users can exploit this vulnerability to cause denial of service. Original advisories wnpa-sec-2024-13 · AppleTalk and RELOAD Framing dissector crashes Exploitation Public exploits exist for this vulnerability. Related products...

FreeBSD : zeek -- potential DoS vulnerability (fe7031d3-3000-4b43-9fa6-52c2b624b8f9)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the fe7031d3-3000-4b43-9fa6-52c2b624b8f9 advisory. Tim Wojtulewicz of Corelight reports: Adding to the POP3 hardening in 7.0.2, the parser now simply...

CVE-2024-45871

Bandisoft BandiView 7.05 is Incorrect Access Control via sub0x232bd8 resulting in denial of service DOS...

CVE-2024-20499

Multiple vulnerabilities in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateway devices could allow an unauthenticated, remote attacker to cause a DoS condition in the AnyConnect service on an affected device. These vulnerabilities are due to insufficie...

CVE-2024-20522

A vulnerability in the web-based management interface of Cisco Small Business RV042, RV042G, RV320, and RV325 Routers could allow an authenticated, Administrator-level, remote attacker to cause an unexpected reload of an affected device, resulting in a denial of service DoS condition. To exploit...

CVE-2024-20522 Cisco Small Business RV042, RV042G, RV320, and RV325 Denial of Service Vulnerabilities

A vulnerability in the web-based management interface of Cisco Small Business RV042, RV042G, RV320, and RV325 Routers could allow an authenticated, Administrator-level, remote attacker to cause an unexpected reload of an affected device, resulting in a denial of service DoS condition. To exploit...

PT-2024-18672 · Cisco · Cisco Meraki Z Series Teleworker Gateway +2

Name of the Vulnerable Software and Affected Versions: Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateway devices affected versions not specified Description: A vulnerability in the Cisco AnyConnect VPN server could allow an unauthenticated, remote attacker to cause a DoS condition for...

GHSA-4JWC-W2HC-78QV Tonic has remotely exploitable denial of service vulnerability

Impact When using tonic::transport::Server there is a remote DoS attack that can cause the server to exit cleanly on accepting a tcp/tls stream. This can be triggered via causing the accept call to error out with errors there were not covered correctly causing the accept loop to exit. More...

ruby:3.3 security update

An update is available for rubygem-pg, module.rubygem-mysql2, rubygem-mysql2, module.rubygem-pg. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Ruby is an...

ruby:3.3 security update

An update is available for ruby, rubygem-abrt, module.rubygem-pg, rubygem-mysql2, module.ruby, rubygem-pg, module.rubygem-abrt, module.rubygem-mysql2. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

[SECURITY] [DLA 3898-1] nghttp2 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3898-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk September 27, 2024 https://wiki.debian.org/LTS -...

CVE-2024-20467

A vulnerability in the implementation of the IPv4 fragmentation reassembly code in Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to improper management of resources during fragment...