AZL-54966 CVE-2024-26647 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix late derefrence 'dsc' check in 'linksetdscppspacket' In linksetdscppspacket, 'struct displaystreamcompressor dsc' was dereferenced in a DCLOGGERINITdsc-ctx-logger; before the 'dsc' NULL pointer check. Fixes t...

CVE-2024-26647

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix late derefrence 'dsc' check in 'linksetdscppspacket' In linksetdscppspacket, 'struct displaystreamcompressor dsc' was dereferenced in a DCLOGGERINITdsc-ctx-logger; before the 'dsc' NULL pointer check. Fixes t...

UBUNTU-CVE-2024-26647

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix late derefrence 'dsc' check in 'linksetdscppspacket' In linksetdscppspacket, 'struct displaystreamcompressor dsc' was dereferenced in a DCLOGGERINITdsc-ctx-logger; before the 'dsc' NULL pointer check. Fixes t...

PT-2024-21476

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.3.9-arch1-1 Description The Linux kernel has a vulnerability in the drm/amd/display module, specifically in the function drm dp atomic find time slots. This vulnerability is caused by a NULL pointer dereference...

CVE-2023-31006

IBM Security Access Manager Container IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.0.0 through 10.0.6.1 is vulnerable to a denial of service attacks on the DSC server. IBM X-Force ID: 254776...

CVE-2023-31006 IBM Security Access Manager Container denial of service

IBM Security Access Manager Container IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.0.0 through 10.0.6.1 is vulnerable to a denial of service attacks on the DSC server. IBM X-Force ID: 254776...

CVE-2023-31006

Summary: CVE-2023-31006 affects IBM Security Verify Access (ISVA) Docker and Appliance 10.0.0.0–10.0.6.1, where the DSC server can be overwhelmed, causing a denial of service. The issue is documented across IBM and Red Hat advisories and furthers that affected products include the ISVA Docker ima...

MAL-2024-929 Malicious code in dsc-fetcher (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e99f436691aa5bed12da2fbf3273db2a6fc1989887f12d5b3602a74b4d2a0ae4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dsc-fetcher (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e99f436691aa5bed12da2fbf3273db2a6fc1989887f12d5b3602a74b4d2a0ae4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2024-3390

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a late dereference check of the dsc variable in the link set dsc pps packet function. This function is part of the drm/amd/display module in the Linux kernel. T...

Malicious code in dsc-sb-v13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 458ac7c5e063d5187da81c884536706b770ade8c1f17c45f6c49c5b600370261 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-44219

A local privilege escalation vulnerability in SonicWall Directory Services Connector Windows MSI client 4.1.21 and earlier versions allows a local low-privileged user to gain system privileges through running the recovery feature...

Cisco Catalyst SD-WAN Manager Web UI HTML Injection (cisco-sa-vmanage-html-3ZKh8d6x)

According to its self-reported version, Cisco SD-WAN Viptela Software is affected by a vulnerability. - A vulnerability in the web-based management interface of Cisco Catalyst SD-WAN Manager, formerly Cisco SD- WAN vManage, could allow an authenticated, remote attacker to inject HTML content. Thi...

Turla Exploits Ukraine’s Defense Sector with DeliveryCheck Backdoor

Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary DeliveryCheck, a .NET-based backdoor, targets Ukraines defense sector, attributed to Russian actor Turla; it aims to exfiltrate Signal app data. Notably, it breaches Microsoft Exchange servers using...

flusskreuzfahrten-guenstiger.de Cross Site Scripting vulnerability OBB-3451977

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

SUSE CVE-2012-2241

scripts/dget.pl in devscripts before 2.12.3 allows remote attackers to delete arbitrary files via a crafted 1 .dsc or 2 .changes file, probably related to a NULL byte in a filename...

SUSE CVE-2015-0840

The dpkg-source command in Debian dpkg before 1.16.16 and 1.17.x before 1.17.25 allows remote attackers to bypass signature verification via a crafted Debian source control file .dsc...

SUSE CVE-2019-14811

A flaw was found in, ghostscript versions prior to 9.50, in the .pdfhookDSCCreator procedure where it did not properly secure its privileged calls, enabling scripts to bypass -dSAFER restrictions. A specially crafted PostScript file could disable security protection and then have access to the fi...

PT-2022-11680 · Unknown · Dns-Stats Hedgehog

Name of the Vulnerable Software and Affected Versions: dns-stats hedgehog affected versions not specified Description: A vulnerability was found in dns-stats hedgehog, which has been rated as problematic. The issue affects the function DSCIOManager::dsc import input from source of the file...

Hedgehog SQL注入漏洞

Hedgehog is an open source dns-stats visualization tool for DNS statistics. Hedgehog has a SQL injection vulnerability , the vulnerability stems from a problem in the function DSCIOManager::dscimportinputfromsource in file src/DSCIOManager.cpp, which can lead to sql injection...