7518 matches found
CVE-2023-4458
CVE-2023-4458 affects the Linux kernel ksmbd module, specifically in the parsing of extended attributes. The flaw stems from insufficient validation of user-supplied data, allowing an out-of-bounds read (read past the end of an allocated buffer) and enabling information disclosure on affected sys...
New RustyAttr Malware Targets macOS Through Extended Attribute Abuse
Threat actors have been found leveraging a new technique that abuses extended attributes for macOS files to smuggle a new malware called RustyAttr. The Singaporean cybersecurity company has attributed the novel activity with moderate confidence to the infamous North Korea-linked Lazarus Group,...
The vulnerability in web browsers Firefox ESR, Firefox, and the email client Thunderbird relates to deficiencies in access control, allowing attackers to compromise data integrity.
The vulnerabilities of Firefox ESR, Firefox, and the email client Thunderbird are related to deficiencies in access control. Exploiting these vulnerabilities can allow a malicious actor to compromise data integrity remotely...
The vulnerability of the Intel Unite Client Extended Display Plugin for conference communication lies in the improper use of standard resolutions, allowing attackers to exploit this to increase their privileges.
The vulnerability of the Intel Unite Client Extended Display Plugin communication software is related to the improper use of standard resolutions. Exploiting this vulnerability can allow attackers to gain increased privileges...
firefox: thunderbird: Memory safety bugs fixed in Firefox 132, Thunderbird 132, Firefox ESR 128.4, and Thunderbird 128.4
A flaw was found in Mozilla. The Mozilla Foundation's Security Advisory describes the following issue: Memory safety bugs present in Firefox 131, Firefox ESR 128.3, and Thunderbird 128.3. Some of these bugs showed evidence of memory corruption, and we presume that with enough effort, some of thes...
kernel: NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
A flaw was found in the Linux kernel. A system error can be reliably replicated with specific filesystem settings, allowing an attacker to cause a denial of service...
kernel: ext4: regenerate buddy after block freeing failed if under fc replay
A flaw was found in the Linux kernel's ext4 filesystem related to the fast commit replay process. During this process, blocks that are already marked as free can be incorrectly marked as free again, leading to the corruption of the buddy bitmap, which is used to track free and allocated blocks...
kernel: ext4: fix corruption during on-line resize
A vulnerability was found in the ext4 filesystem in the Linux kernel during on-line resizing operations. When an ext4 filesystem is resized while mounted, it could lead to data corruption...
kernel: ext4: fix memory leaks in ext4_fname_{setup_filename,prepare_lookup}
A memory leak flaw was found in the Linux kernel's ext4 filesystem in the filename casefolding error paths. A local user can trigger this issue by performing directory operations on ext4 filesystems with casefolding enabled when filename setup or lookup operations fail, causing the cryptobuf.name...
November 12, 2024—KB5046682 (Monthly Rollup)
None None...
ext4: fix timer use-after-free on failed mount
...
jfs: Fix uninit-value access of new_ea in ea_buffer
...
Description of version 2 of the security update for Microsoft Exchange Server 2019 and 2016: November 27, 2024 (KB5049233)
None None...
ocfs2: reserve space for inline xattr before attaching reflink tree
...
ext4: fix i_data_sem unlock order in ext4_ind_migrate()
...
Description of the security update for Microsoft Exchange Server 2019 and 2016: November 12, 2024 (KB5044062)
None None...
The vulnerability of Mozilla Firefox, Firefox ESR, and the email client Thunderbird relates to the execution of operations outside the buffer in memory, allowing an attacker to cause a service failure.
The vulnerability in Mozilla Firefox, Firefox ESR, and the email client Thunderbird relates to the execution of operations beyond the buffer in memory during JIT-compilation. Exploiting this vulnerability can allow an attacker to cause service interruptions...
The vulnerability of Mozilla Firefox, Firefox ESR, and the email client Thunderbird relates to the execution of operations beyond the buffer in memory, which allows an attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of Mozilla Firefox, Firefox ESR, and the email client Thunderbird relates to the issue of operations occurring outside of the buffer in memory during object cloning. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibili...