Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: jfs: fixed a out-of-bounds situation in dbSplit. When dmtbudmin is less than zero, it causes errors in later stages. A check was added to return an error beforehand within dbAllocCtl itself...

User Enumeration

pimcore/admin-ui-classic-bundle is vulnerable to User Enumeration. The vulnerability is due to improper error handling in the "Forgot password" function, which reveals valid account usernames, allows an attacker to identify existing user accounts and use them for further attacks such as brute-for...

Azure Linux 3.0 Security Update: kernel (CVE-2024-47674)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-47674 advisory. - In the Linux kernel, the following vulnerability has been resolved: mm: avoid leaving partial pfn mappings...

Azure Linux 3.0 Security Update: kernel (CVE-2024-41009)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-41009 advisory. - In the Linux kernel, the following vulnerability has been resolved: bpf: Fix overrunning reservations in...

The vulnerability of the nilfsDotdot() function in the nilfs2 file system of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the nilfsDotdot function in the nilfs2 file system of the Linux operating system is related to incorrect error handling. Exploiting this vulnerability can allow an attacker to cause a service failure...

Azure Linux 3.0 Security Update: kernel (CVE-2024-49959)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-49959 advisory. - In the Linux kernel, the following vulnerability has been resolved: jbd2: stop waiting for space when...

Azure Linux 3.0 Security Update: kernel (CVE-2024-46844)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-46844 advisory. - In the Linux kernel, the following vulnerability has been resolved: um: line: always fill errorout in...

Azure Linux 3.0 Security Update: kernel (CVE-2024-50040)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-50040 advisory. - In the Linux kernel, the following vulnerability has been resolved: igb: Do not bring the device up after...

Azure Linux 3.0 Security Update: kernel (CVE-2024-43884)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-43884 advisory. - In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Add error handling to...

ROS-20250210-01

A vulnerability in the spi component of the Linux kernel is related to incorrect error handling in the rockchipspisuspend and rockchipspiresume functions in drivers/spi/spi-rockchip.c. Exploitation of the of the vulnerability could allow an attacker to cause a denial of service A vulnerability in...

Azure Linux 3.0 Security Update: kernel (CVE-2024-46840)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-46840 advisory. - In the Linux kernel, the following vulnerability has been resolved: btrfs: clean up our handling of refs == ...

Azure Linux 3.0 Security Update: kernel (CVE-2024-36481)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-36481 advisory. - In the Linux kernel, the following vulnerability has been resolved: tracing/probes: fix error check in...

CVE-2025-20174

A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause a DoS condition on an affected device. This vulnerability is due to improper error handling when parsing SNMP requests. An attacker could exploit this...

CVE-2025-20169

A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause a DoS condition on an affected device. This vulnerability is due to improper error handling when parsing SNMP requests. An attacker could exploit this...

CVE-2025-20170

A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause a DoS condition on an affected device. This vulnerability is due to improper error handling when parsing SNMP requests. An attacker could exploit this...

CVE-2025-20176

A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause a DoS condition on an affected device. This vulnerability is due to improper error handling when parsing SNMP requests. An attacker could exploit this...

CVE-2025-20175

A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause a DoS condition on an affected device. This vulnerability is due to improper error handling when parsing SNMP requests. An attacker could exploit this...

Cisco IOS Software SNMP DoS (cisco-sa-snmp-dos-sdxnSUcW)

According to its self-reported version, Cisco IOS is affected by multiple vulnerabilities. - A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause a DoS condition on an affected device. This vulnerability is du...

Cisco IOS XE Software SNMP DoS (cisco-sa-snmp-dos-sdxnSUcW)

According to its self-reported version, Cisco IOS-XE Software is affected by multiple vulnerabilities. - A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause a DoS condition on an affected device. This...

MGASA-2025-0040 Updated gstreamer1.0, gstreamer1.0-plugins-base & gstreamer1.0-plugins-good packages fix security vulnerabilities

GStreamer has an OOB-write in isomp4/qtdemux.c. CVE-2024-47537 GStreamer has a stack-buffer overflow in vorbishandleidentificationpacket. CVE-2024-47538 GStreamer has an OOB-write in converttos3341a. CVE-2024-47539 GStreamer uses uninitialized stack memory in Matroska/WebM demuxer. CVE-2024-47540...