3343 matches found
Moderate: nss security update
Network Security Services NSS is a set of libraries designed to support the cross-platform development of security-enabled client and server applications. Security Fixes: nss: timing attack against RSA decryption CVE-2023-5388 For more details about the security issues, including the impact, a CV...
ALSA-2024:0108 Moderate: nss security update
Network Security Services NSS is a set of libraries designed to support the cross-platform development of security-enabled client and server applications. Security Fixes: nss: timing attack against RSA decryption CVE-2023-5388 For more details about the security issues, including the impact, a CV...
Moderate: Red Hat Security Advisory: nss security update
An update for nss is now available for Red Hat Enterprise Linux 8.8 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
January 9, 2024—KB5034171 (Monthly Rollup)
None None...
PT-2024-1896 · Linux +3 · Linux Kernel +3
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.6.0-mainline-maybe-dirty 1 Description: The issue is related to a use-after-free vulnerability in the class register function. The lock class key is still registered and can be found in lock keys hash hlist...
AZL-35675 CVE-2023-6693 affecting package qemu for versions less than 6.2.0-21
A stack based buffer overflow was found in the virtio-net device of QEMU. This issue occurs when flushing TX in the virtionetflushtx function if guest features VIRTIONETFHASHREPORT, VIRTIOFVERSION1 and VIRTIONETFMRGRXBUF are enabled. This could allow a malicious user to overwrite local variables...
Memory corruption
Memory corruption while running VK synchronization with KASAN enabled...
CVE-2023-33094 Use After Free in Linux Graphics
Memory corruption while running VK synchronization with KASAN enabled...
CVE-2023-33094
CVE-2023-33094 is a memory corruption issue occurring during VK synchronization with KASAN enabled in Qualcomm-related components (Display). The NVD entry lists a local attack vector with low privileges required and no user interaction, with a high impact on confidentiality, integrity, and availa...
CVE-2023-33094 Use After Free in Linux Graphics
Memory corruption while running VK synchronization with KASAN enabled...
PT-2024-12403 · Unknown · Linux Graphics
Name of the Vulnerable Software and Affected Versions: Linux Graphics affected versions not specified Description: The issue is related to memory corruption that occurs while running VK synchronization with KASAN enabled. This problem is also described as a Use-After-Free UAF in Linux Graphics. N...
[SECURITY] Fedora 39 Update: nss-3.95.0-1.fc39
Network Security Services NSS is a set of libraries designed to support cross-platform development of security-enabled client and server applications. Applications built with NSS can support SSL v2 and v3, TLS, PKCS 5, PKCS 7, PKCS 11, PKCS 12, S/MIME, X.509 v3 certificates, and other security...
What is the parameter doppler under show system parameter
What does the doppler parameter mean ? show system parameter | grep -i doppler Doppler: ENABLED...
3,500 Arrested in Global Operation HAECHI-IV Targeting Financial Criminals
A six-month-long international police operation codenamed HAECHI-IV has resulted in the arrests of nearly 3,500 individuals and seizures worth $300 million across 34 countries. The exercise, which took place from July through December 2023, took aim at various types of financial crimes such as...
CVE-2023-6680
An improper certificate validation issue in Smartcard authentication in GitLab EE affecting all versions from 11.6 prior to 16.4.4, 16.5 prior to 16.5.4, and 16.6 prior to 16.6.2 allows an attacker to authenticate as another user given their public key if they use Smartcard authentication...
UBUNTU-CVE-2023-6680
An improper certificate validation issue in Smartcard authentication in GitLab EE affecting all versions from 11.6 prior to 16.4.4, 16.5 prior to 16.5.4, and 16.6 prior to 16.6.2 allows an attacker to authenticate as another user given their public key if they use Smartcard authentication...
CVE-2023-47261
Dokmee ECM 7.4.6 allows remote code execution because the response to a GettingStarted/SaveSQLConnectionAsync //gettingstarted request contains a connection string for privileged SQL Server database access, and xpcmdshell can be enabled...
User session fails to launch session Received an invalid packet during its ?? handshake phase
In System Event log on the VDA a TDICA event 1019 appears. "The Citrix TDICA Transport Driver connection from xxx.xxx.xxx.xxx: to port 443received an invalid packet during its ?? handshake phase" There is however no issue launching the session and no disconnection takes place. In this scenario th...
