Security update for the Linux Kernel (Live Patch 27 for SLE 15 SP4)

This update for the Linux Kernel 5.14.21-15040024122 fixes several issues. The following security issues were fixed: CVE-2024-36904: tcp: Use refcountincnotzero in tcptwskunique bsc1225733. CVE-2024-43861: Fix memory leak for not ip packets bsc1229553. CVE-2021-47598: schcake: do not call...

SUSE-SU-2024:4275-1 Security update for the Linux Kernel (Live Patch 27 for SLE 15 SP4)

This update for the Linux Kernel 5.14.21-15040024122 fixes several issues. The following security issues were fixed: - CVE-2024-36904: tcp: Use refcountincnotzero in tcptwskunique bsc1225733. - CVE-2024-43861: Fix memory leak for not ip packets bsc1229553. - CVE-2021-47598: schcake: do not call...

Security update for the Linux Kernel (Live Patch 29 for SLE 15 SP4)

This update for the Linux Kernel 5.14.21-15040024128 fixes several issues. The following security issue was fixed: CVE-2024-43861: Fix memory leak for not ip packets bsc1229553. Fix intermittent nfs mount failures, may be due to SUNRPC over UDP. bsc1231353 Patch Instructions: To install this SUSE...

SUSE-SU-2024:4268-1 Security update for the Linux Kernel (Live Patch 29 for SLE 15 SP4)

This update for the Linux Kernel 5.14.21-15040024128 fixes several issues. The following security issue was fixed: - CVE-2024-43861: Fix memory leak for not ip packets bsc1229553. - Fix intermittent nfs mount failures, may be due to SUNRPC over UDP. bsc1231353...

SUSE-SU-2024:4266-1 Security update for the Linux Kernel (Live Patch 24 for SLE 15 SP4)

This update for the Linux Kernel 5.14.21-15040024111 fixes several issues. The following security issues were fixed: - CVE-2024-36904: tcp: Use refcountincnotzero in tcptwskunique bsc1225733. - CVE-2024-43861: Fix memory leak for not ip packets bsc1229553. - CVE-2024-35905: Fixed int overflow for...

SUSE-SU-2024:4262-1 Security update for the Linux Kernel (Live Patch 28 for SLE 15 SP4)

This update for the Linux Kernel 5.14.21-15040024125 fixes several issues. The following security issues were fixed: - CVE-2024-43861: Fix memory leak for not ip packets bsc1229553. - CVE-2021-47598: schcake: do not call cakedestroy from cakeinit bsc1227471. - CVE-2024-40954: net: do not leave a...

SUSE-SU-2024:4236-1 Security update for the Linux Kernel (Live Patch 26 for SLE 15 SP4)

This update for the Linux Kernel 5.14.21-15040024119 fixes several issues. The following security issues were fixed: - CVE-2024-36904: tcp: Use refcountincnotzero in tcptwskunique bsc1225733. - CVE-2024-43861: Fix memory leak for not ip packets bsc1229553. - CVE-2024-35905: Fixed int overflow for...

The vulnerability of cloud-based software for creating and using Nextcloud Server and Nextcloud Enterprise Server lies in the lack of security measures for website structures, allowing attackers to trigger service failures.

The vulnerability of cloud-based software for creating and using Nextcloud Server and Nextcloud Enterprise Server is related to the lack of protective measures for the website structure. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability of the OpenDMARC authentication and email analysis software lies in the handling of the NULL pointer, which allows a perpetrator to trigger a service failure.

The vulnerability of the OpenDMARC authentication and email analysis software relates to the use of the NULL pointer. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Vulnerability of TCP components of Linux operating system’s kernel, allowing attackers to cause service failures

The vulnerability of TCP components in Linux operating systems is related to the operation of data out of the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...

The vulnerabilities of the s390/qeth component of Linux operating system kernels, which allow a hacker to trigger a service failure

The vulnerability of the s390/qeth component of Linux operating system kernels is related to resource management errors. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the Ethernet connection extension module of Mitsubishi Electric India GC-ENET-COM, related to the improper operation of the signal processor, allows a perpetrator to trigger a service failure.

The vulnerability of the Mitsubishi Electric India GC-ENET-COM Ethernet connection device is related to improper operation of the signal processor. Exploiting this vulnerability allows attackers to send specially crafted packets and trigger service failures...

The vulnerability of the deployment and model management software for deep learning in the Intel Distribution of OpenVINO Model Server lies in insufficient validation of input data, allowing attackers to trigger service failures.

The vulnerability of the deployment and model management software for deep learning in the Intel Distribution of OpenVINO Model Server is related to insufficient testing of input data. Exploiting this vulnerability can allow attackers to cause service failures...

The vulnerability of DRM/AMD components in Linux operating systems allows a hacker to trigger a service failure.

The vulnerability of DRM/AMDKFD components in Linux kernel relates to read misses beyond the boundary. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of DRM/AMD components in Linux operating systems allows a hacker to trigger a service failure.

The vulnerability of DRM/AMDKFD components in Linux kernel relates to read misses beyond the boundary. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the ldap_escape() function in the PHP programming language allows a hacker to trigger a service failure.

The vulnerability of the ldapescape function in the PHP programming language is related to the escape operation going beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

Fedora 40 : php (2024-e0d390d35b)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-e0d390d35b advisory. PHP version 8.3.14 21 Nov 2024 CLI: Fixed bug GH-16373 Shebang is not skipped for router script in cli-server started through shebang. ilutov Fixed...

WordPress Restaurant & Cafe Addon for Elementor Plugin <= 1.5.9 is vulnerable to Broken Access Control

Software Restaurant & Cafe Addon for Elementor Type Plugin Vulnerable versions = 1.5.9 Fixed in 1.6.0 OWASP Top 10 A7: Identification and Authentication Failures Classification Broken Access Control CVE CVE-2024-10780 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID...

PT-2024-35658

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability has been resolved in the Linux kernel. The issue is related to the net/l2tp module, specifically in the l2tp exit net function. The problem occurs when the IDR ID Resolve...

The vulnerabilities of Linux operating system’s x86/tdx kernel components allow attackers to cause service failures.

The vulnerability of x86/tdx components of the Linux operating system’s kernel is related to the operation of transferring data beyond the buffer in the memory area within the SYMFUNCEND function. Exploiting this vulnerability can allow an attacker to gain access to confidential information...