Important: openexr security update

OpenEXR is an open-source high-dynamic-range floating-point image file format for high-quality image processing and storage. This document presents a brief overview of OpenEXR and explains concepts that are specific to this format. This package containes the binaries for OpenEXR. Security Fixes:...

CVE-2024-36507

A untrusted search path in Fortinet FortiClientWindows versions 7.4.0, versions 7.2.4 through 7.2.0, versions 7.0.12 through 7.0.0 allows an attacker to run arbitrary code via DLL hijacking and social engineering...

Moderate: Red Hat Security Advisory: python3.9 security update

An update for python3.9 is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

kernel: drm/amdgpu: change vm->task_info handling

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: change vm-taskinfo handling This patch changes the handling and lifecycle of vm-taskinfo object. The major changes are: - vm-taskinfo is a dynamically allocated ptr now, and its uasge is reference counted. - introduci...

PT-2024-8581 · Microsoft · Sql Server Native Client

Name of the Vulnerable Software and Affected Versions: SQL Server Native Client affected versions not specified Description: The issue is related to a buffer overflow in dynamic memory within the Microsoft SQL Server Native Client component. This can allow a remote attacker to execute arbitrary...

PT-2024-8715 · Siemens · Solid Edge

Name of the Vulnerable Software and Affected Versions: Solid Edge SE2024 versions prior to V224.0 Update 9 Description: A DLL hijacking issue has been identified, which could allow an attacker to execute arbitrary code by placing a crafted DLL file on the system. The vulnerability is related to a...

Siemens Solid Edge 代码问题漏洞

Solid Edge is a portfolio of software tools that address a variety of product development processes: 3D design, simulation, manufacturing and design management. Siemens Solid Edge suffers from a DLL hijacking vulnerability that can be exploited by attackers to execute arbitrary code by placing a...

PT-2024-8555 · Microsoft · Sql Server Native Client

Name of the Vulnerable Software and Affected Versions: SQL Server Native Client affected versions not specified Description: The issue is related to a buffer overflow in dynamic memory within the Microsoft SQL Server Native Client component. This can be exploited by a remote attacker to execute...

PT-2024-8561 · Microsoft · Sql Server Native Client

Name of the Vulnerable Software and Affected Versions: SQL Server Native Client affected versions not specified Description: The issue is related to a buffer overflow in dynamic memory within the Microsoft SQL Server Native Client component. This can allow a remote attacker to execute arbitrary...

PT-2024-8516 · Microsoft · Sql Server Native Client

Name of the Vulnerable Software and Affected Versions: Microsoft SQL Server Native Client affected versions not specified Description: The vulnerability in the Microsoft SQL Server Native Client component is related to a buffer overflow in dynamic memory. Exploitation of this issue may allow a...

Moderate: python3.9 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

ALSA-2024:9188 Low: bpftrace security update

BPFtrace is a high-level tracing language for Linux enhanced Berkeley Packet Filter eBPF available in recent Linux kernels 4.x. BPFtrace uses LLVM as a backend to compile scripts to BPF-bytecode and makes use of BCC for interacting with the Linux BPF system, as well as existing Linux tracing...

PT-2024-8557 · Microsoft · Sql Server Native Client

Name of the Vulnerable Software and Affected Versions: Microsoft SQL Server Native Client affected versions not specified Description: The issue is related to a buffer overflow in dynamic memory within the Native Client component of Microsoft SQL Server. This could allow a remote attacker to...

Moderate: python3.11 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

Moderate: python3.11 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

The vulnerability of the ODXSW_DLL.dll library in the AutoCAD simulation, design, and drafting software allows a perpetrator to execute arbitrary code.

The vulnerability of the ODXSWDLL.dll library, which is used in AutoCAD software for simulation, design, and drafting, arises due to an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely, using a...

The vulnerability of the opennurbs.dll library, a software component used for modeling, designing, and drafting in AutoCAD, allows attackers to execute arbitrary code or cause the application to crash.

The vulnerability of the opennurbs.dll library, which is used in AutoCAD software for modeling, designing, and drafting, arises due to a buffer overflow in the dynamic memory. Exploiting this vulnerability can allow an attacker to cause the application to terminate abnormally or execute arbitrary...

SUSE CVE-2024-50254

In the Linux kernel, the following vulnerability has been resolved: bpf: Free dynamically allocated bits in bpfiterbitsdestroy bpfiterbitsdestroy uses "kit-nrbits kmemleakalloc+0x4b/0x80 kmallocnodenoprof+0x480/0x5c0 alloc.isra.0+0x89/0xb0 allocbulk+0x2af/0x720 prefillmemcache+0x7f/0xb0...

UBUNTU-CVE-2024-50254

In the Linux kernel, the following vulnerability has been resolved: bpf: Free dynamically allocated bits in bpfiterbitsdestroy bpfiterbitsdestroy uses "kit-nrbits kmemleakalloc+0x4b/0x80 kmallocnodenoprof+0x480/0x5c0 alloc.isra.0+0x89/0xb0 allocbulk+0x2af/0x720 prefillmemcache+0x7f/0xb0...

CVE-2024-50254 bpf: Free dynamically allocated bits in bpf_iter_bits_destroy()

In the Linux kernel, the following vulnerability has been resolved: bpf: Free dynamically allocated bits in bpfiterbitsdestroy bpfiterbitsdestroy uses "kit-nrbits kmemleakalloc+0x4b/0x80 kmallocnodenoprof+0x480/0x5c0 alloc.isra.0+0x89/0xb0 allocbulk+0x2af/0x720 prefillmemcache+0x7f/0xb0...