DEBIAN-CVE-2024-10977

Client use of server error message in PostgreSQL allows a server not trusted under current SSL or GSS settings to furnish arbitrary non-NUL bytes to the libpq application. For example, a man-in-the-middle attacker could send a long error message that a human or screen-scraper user of psql mistake...

DEBIAN-CVE-2024-10976

Incomplete tracking in PostgreSQL of tables with row security allows a reused query to view or change different rows from those intended. CVE-2023-2455 and CVE-2016-2193 fixed most interaction between row security and user ID changes. They missed cases where a subquery, WITH query, security invok...

Linux crypto kernel Privilege Escalation

The vulnerability of the Linux operating system’s crypto kernel component is related to errors that occur after the release of the vulnerability. Exploiting this vulnerability can allow an attacker to gain elevated privileges within the system...

Adobe Bridge Pointer Aliasing DoS

The vulnerability of the Adobe Bridge file manager is related to pointer naming errors. Exploiting this vulnerability can allow an attacker to trigger a service failure using a specially created file...

NVIDIA Container Toolkit Data Compromise

The vulnerability of the software for creating and running NVIDIA Container Toolkit containers, as well as the NVIDIA GPU Operator resource management software, is related to errors in processing symbolic links. Exploiting this vulnerability can allow an attacker to compromise data integrity...

s390/zcrypt Kernel Privilege Escalation

The vulnerability of the s390/zcrypt components in Linux operating systems is related to errors that occur after liberation. Exploiting this vulnerability can allow an attacker to gain elevated privileges within the system...

Microsoft Exchange Server Spear Phishing

The vulnerability of Microsoft Exchange Server servers is related to errors in information representation by the user interface. Exploiting this vulnerability can allow attackers to carry out spear-phishing attacks...

Red Database PhysHdr Class Constructor Heap Buffer Overflow

The vulnerability of the PhysHdr class constructor in the CryptoManager.cpp module of the database management system “Red Database” is related to the fact that in some cases, when switching the database to incremental backup mode, the connection to this database would fail. Exploiting this...

Mageia: Security Advisory (MGASA-2024-0364)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ROS-20241112-07

Eclipse Mosquitto message broker vulnerability is related to a heap buffer overflow when executing a onsubscribe callback. Exploitation of the vulnerability could allow an attacker acting remotely to gain access to sensitive information The Eclipse Mosquitto message broker vulnerability is relate...

Linux kernel vmxnet3 DoS

The vulnerability of the vmxnet3 component of the Linux operating system’s kernel is related to resource management errors in the vmxnet3processxdp function. Exploiting this vulnerability can allow an attacker to cause a service failure...

dwc3-am62 Kernel DoS

The vulnerability of the dwc3-am62 component in the Linux operating system is related to resource management errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

kernel: ALSA: scarlett2: Add missing error checks to *_ctl_get()

In the Linux kernel, the following vulnerability has been resolved: ALSA: scarlett2: Add missing error checks to ctlget The Linux kernel CVE team has assigned CVE-2023-52680 to this issue. Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024051750-CVE-2023-52680-1f4a@gregkh/T...

kernel: net: asix: add proper error handling of usb read errors

In the Linux kernel, the following vulnerability has been resolved: net: asix: add proper error handling of usb read errors Syzbot once again hit uninit value in asix driver. The problem still the same -- asixreadcmd reads less bytes, than was requested by caller. Since all read requests are...

SAP NetWeaver 安全漏洞

SAP NetWeaver is a set of integrated service-oriented application platforms from SAP, Germany. The platform provides a development and runtime environment for SAP applications. A security vulnerability exists in SAP NetWeaver version 1.1. The vulnerability stems from the fact that when a software...

Mozilla Firefox Thunderbird DoS

The vulnerability of the application programming interfaces of Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to errors during resource release. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

SUSE CVE-2024-50191

In the Linux kernel, the following vulnerability has been resolved: ext4: don't set SBRDONLY after filesystem errors When the filesystem is mounted with errors=remount-ro, we were setting SBRDONLY flag to stop all filesystem modifications. We knew this misses proper locking sb-sumount and does no...

SUSE CVE-2024-50202

In the Linux kernel, the following vulnerability has been resolved: nilfs2: propagate directory read errors from nilfsfindentry Syzbot reported that a task hang occurs in vcsopen during a fuzzing test for nilfs2. The root cause of this problem is that in nilfsfindentry, which searches for directo...

AZL-53241 CVE-2024-50202 affecting package kernel for versions less than 5.15.173.1-1

In the Linux kernel, the following vulnerability has been resolved: nilfs2: propagate directory read errors from nilfsfindentry Syzbot reported that a task hang occurs in vcsopen during a fuzzing test for nilfs2. The root cause of this problem is that in nilfsfindentry, which searches for directo...

AZL-53286 CVE-2024-50202 affecting package kernel for versions less than 6.6.64.2-1

In the Linux kernel, the following vulnerability has been resolved: nilfs2: propagate directory read errors from nilfsfindentry Syzbot reported that a task hang occurs in vcsopen during a fuzzing test for nilfs2. The root cause of this problem is that in nilfsfindentry, which searches for directo...