MAL-2024-8009 Malicious code in tsc-aws-s3 (npm)

The package contains a postinstall script to download and execute an ELF Metasploit reverse shell...

CVE-2024-42381

os/linux/elf.rb in Homebrew brew before 4.2.20 uses ldd to load ELF files obtained from untrusted sources, which allows attackers to achieve code execution via an ELF file with a custom .interp section. NOTE: this code execution would occur during an un-sandboxed binary relocation phase, which...

CVE-2024-42381

os/linux/elf.rb in Homebrew brew before 4.2.20 uses ldd to load ELF files obtained from untrusted sources, which allows attackers to achieve code execution via an ELF file with a custom .interp section. NOTE: this code execution would occur during an un-sandboxed binary relocation phase, which...

CVE-2024-42381

os/linux/elf.rb in Homebrew brew before 4.2.20 uses ldd to load ELF files obtained from untrusted sources, which allows attackers to achieve code execution via an ELF file with a custom .interp section. NOTE: this code execution would occur during an un-sandboxed binary relocation phase, which...

CVE-2024-42381

os/linux/elf.rb in Homebrew brew before 4.2.20 uses ldd to load ELF files obtained from untrusted sources, which allows attackers to achieve code execution via an ELF file with a custom .interp section. NOTE: this code execution would occur during an un-sandboxed binary relocation phase, which...

CVE-2024-42381

In Homebrew, the Linux-specific file os/linux/elf.rb in brew prior to 4.2.20 uses ldd to load ELF files obtained from untrusted sources, enabling code execution via an ELF file with a custom .interp section during an un-sandboxed binary relocation phase. The tested vulnerable version is 237d1e783...

CVE-2024-42381: Inclusion of Web Functionality from an Untrusted Source

os/linux/elf.rb in Homebrew brew before 4.2.20 uses ldd to load ELF files obtained from untrusted sources, which allows attackers to achieve code execution via an ELF file with a custom .interp section. NOTE: this code execution would occur during an un-sandboxed binary relocation phase, which...

CVE-2024-42381

os/linux/elf.rb in Homebrew brew before 4.2.20 uses ldd to load ELF files obtained from untrusted sources, which allows attackers to achieve code execution via an ELF file with a custom .interp section. NOTE: this code execution would occur during an un-sandboxed binary relocation phase, which...

nvdisasm CUDA Toolkit System Failure

The vulnerability of the nvdisasm utility in the NVIDIA CUDA Toolkit for parallel computing on Graphics Processing Units is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow an attacker to cause a system failure using a specially creat...

CVE-2024-21462 Buffer Over-read in TZ Secure OS

Transient DOS while loading the TA ELF file...

CVE-2024-21462 Buffer Over-read in TZ Secure OS

Transient DOS while loading the TA ELF file...

CVE-2024-21462

CVE-2024-21462 describes a Transient DoS issue when loading the TA ELF file in Qualcomm closed‑source components (TZ Secure OS). Public sources assign a Local attacker vector with Low complexity and Low privileges required, potentially causing an availability impact described as HIGH. The CVE is ...

CVE-2024-21462: Buffer Over-read

Transient DOS while loading the TA ELF file...

PT-2024-18885 · Qualcomm · 315 5G Iot Modem Firmware +268

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: A transient Denial of Service DOS occurs while loading the TA ELF file. Recommendations: At the moment, there is no information about a newer version that contains a fix for this issue...

PT-2024-32228

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The ELF loader in the Linux kernel uses the randomize va space sysctl twice, which can change at any moment, potentially leading to unpredictable consequences if two loads see different...

Fedora: Security Advisory for rust-elfcat (FEDORA-2024-40ee18b2e7)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RHEL 6 : gdb (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - gdb: Malformed section in an ELF binary or a core file can cause memory exhaustion CVE-2017-9778 Note that Nessus h...

RHEL 7 : gdb (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - gdb: buffer overflow while opening an ELF for debugging leads to Dos, information dislosure and code...

RHEL 8 : gdb (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - binutils: stack-overflow issue in demangletype in rust-demangle.c. CVE-2021-32256 - An illegal memory...

RHEL 6 : binutils (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - binutils: NULL pointer dereference in bfdelffinallink function CVE-2017-7614 - The srecscan function in...