PT-2024-3553

Name of the Vulnerable Software and Affected Versions FortiOS versions prior to 7.0.0 Description The issue is related to a double free vulnerability, which may allow a privileged attacker to execute unauthorized code or commands. This can be achieved via crafted HTTP or HTTPS requests...

Huawei HarmonyOS 安全漏洞

Huawei EMUI and Huawei HarmonyOS are both products of Huawei, a mobile operating system based on Android, and Huawei HarmonyOS, a distributed operating system developed by Huawei for the whole scenario, aiming at realizing intelligent interconnection and resource sharing among people, devices, an...

F5 Networks BIG-IP : libxml2 vulnerability (K000139594)

The version of F5 Networks BIG-IP installed on the remote host is prior to 17.1.2.2 / 17.5.0. It is, therefore, affected by a vulnerability as referenced in the K000139594 advisory. An issue was discovered in libxml2 before 2.10.3. Certain invalid XML entity definitions can corrupt a hash table...

Black Basta Ransomware Strikes 500+ Entities Across North America, Europe, and Australia

The Black Basta ransomware-as-a-service RaaS operation has targeted more than 500 private industry and critical infrastructure entities in North America, Europe, and Australia since its emergence in April 2022. In a joint advisory published by the Cybersecurity and Infrastructure Security Agency...

Oracle Linux 7 : Unbreakable Enterprise kernel (ELSA-2024-12378)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-12378 advisory. - netfilter: nftables: reject QUEUE/DROP verdict parameters Florian Westphal Orabug: 36466544 CVE-2024-1086 Tenable has extracted the preceding description blo...

OESA-2024-1569 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: tun: avoid double free in tunfreenetdev Avoid double free in tunfreenetdev by moving the dev-tstats and tun-security allocs to a new ndoinit routine tunnetinit...

CVE-2023-52384

Double-free vulnerability in the RSMC module Impact: Successful exploitation of this vulnerability will affect availability...

CVE-2023-52384

CVE-2023-52384 describes a double-free vulnerability in the RSMC module. The metadata and related sources indicate the impact is on availability, with a potential local attack vector (attack vector: LOCAL; complexity: LOW; privileges: LOW; UI: NONE; scope: UNCHANGED). Public entries reference Hua...

CVE-2023-52384

Double-free vulnerability in the RSMC module Impact: Successful exploitation of this vulnerability will affect availability...

CVE-2023-52383

The CVE-2023-52383 entry describes a double-free vulnerability in Huawei’s HarmonyOS/EMUI RSMC module that affects availability. Connected sources identify affected software as Huawei HarmonyOS/EMUI, with vulnerable component being the RSMC module. Mitigation guidance from PT-2024-14573 indicates...

CVE-2023-52383

Double-free vulnerability in the RSMC module Impact: Successful exploitation of this vulnerability will affect availability...

CVE-2023-52383

Double-free vulnerability in the RSMC module Impact: Successful exploitation of this vulnerability will affect availability...

RHEL 5 : quagga (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - quagga: VPNv4 NLRI parser memcpys to stack on unchecked length CVE-2016-2342 - quagga: Double free...

RHEL 7 : icu (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - icu: Double free in i18n/zonemeta.cpp CVE-2017-14952 - The ulocacceptLanguageFromHTTP function in...

RHEL 5 : nasm (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - nasm: double-free vulnerability in pptokline asm/preproc.c CVE-2020-24978 - In Netwide Assembler NASM...

RHEL 6 : libvpx (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - libvpx: Double free in ParseContentEncodingEntry in mkvparser.cc CVE-2019-2126 - libvpx: Heap buffer...

RHEL 6 : icu (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - icu: Double free in i18n/zonemeta.cpp CVE-2017-14952 - The ulocacceptLanguageFromHTTP function in...

RHEL 6 : fontconfig (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - fontconfig: Possible double free due to insufficiently validated cache files CVE-2016-5384 Note that Nessus has not...

PT-2024-14573 · Huawei · Harmonyos/Emui

Name of the Vulnerable Software and Affected Versions: Huawei HarmonyOS/EMUI versions 3.0.0 through 4.0.0 Description: The issue is a double-free vulnerability in the RSMC module. Successful exploitation of this vulnerability will affect availability, potentially leading to system compromise...

RHEL 6 : openldap (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - openldap: OpenLDAP SQL injection CVE-2022-29155 - servers/slapd/back-mdb/search.c in OpenLDAP through...