SUSE CVE-2024-26919

In the Linux kernel, the following vulnerability has been resolved: usb: ulpi: Fix debugfs directory leak The ULPI per-device debugfs root is named after the ulpi device's parent, but ulpiunregisterinterface tries to remove a debugfs directory named after the ulpi device itself. This results in t...

FreeRDP RDP DoS

The vulnerability of the RDP client FreeRDP is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Oracle MySQL Connector/Python DoS

The vulnerability of the Connector/Python driver for MySQL Connectors in the Oracle MySQL database management system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

libssh: Missing checks for return values for digests

A flaw was found in the libssh implements abstract layer for message digest MD operations implemented by different supported crypto backends. The return values from these were not properly checked, which could cause low-memory situations failures, NULL dereferences, crashes, or usage of the...

kernel: ASoC: codecs: wcd-mbhc-v2: fix resource leaks on component remove

A resource leak was found in the WCD MBHC v2 audio codec driver in the Linux kernel. MBHC resources are not properly released on component probe failure or removal, causing interrupt request failures and preventing successful reprobing of the codec component. This leads to sound card initializati...

SUSE-SU-2024:1451-1 Security update for java-1_8_0-openjdk

This update for java-180-openjdk fixes the following issues: - CVE-2024-21011: Fixed denial of service due to long Exception message logging JDK-8319851,bsc1222979 - CVE-2024-21068: Fixed integer overflow in C1 compiler address generation JDK-8322122,bsc1222983 - CVE-2024-21085: Fixed Pack200...

SUSE-SU-2024:1450-1 Security update for java-1_8_0-openjdk

This update for java-180-openjdk fixes the following issues: - CVE-2024-21011: Fixed denial of service due to long Exception message logging JDK-8319851,bsc1222979 - CVE-2024-21068: Fixed integer overflow in C1 compiler address generation JDK-8322122,bsc1222983 - CVE-2024-21085: Fixed Pack200...

Autofill Function Confidential Information DoS

The vulnerability of the Autofill function in Microsoft Edge and Google Chrome browsers is related to improperly implemented security checks for standard elements. Exploiting this vulnerability can allow a malicious actor to gain access to confidential information or cause service failures...

WordPress XStore Core Plugin <= 5.3.8 is vulnerable to Privilege Escalation

Software XStore Core Type Plugin Vulnerable versions = 5.3.8 Fixed in 5.3.9 OWASP Top 10 A7: Identification and Authentication Failures Classification Privilege Escalation CVE CVE-2024-33552 Patch priority High CVSS severity High 9.8 Developer Claim ownership PSID d1199dede4c1 Credits Rafie...

Libvirt Heap Buffer Overflow DoS

The vulnerability of the udevConnectListAllInterfaces function in the virtualization management library Libvirt is related to the use of a null pointer dereferencing. Exploiting this vulnerability could allow an attacker to cause service failures remotely...

WordPress Frontend Admin by DynamiApps Plugin <= 3.19.4 is vulnerable to Privilege Escalation

Software Frontend Admin by DynamiApps Type Plugin Vulnerable versions = 3.19.4 Fixed in 3.19.5 OWASP Top 10 A7: Identification and Authentication Failures Classification Privilege Escalation CVE CVE-2024-3729 Patch priority High CVSS severity High 9.8 Developer Claim ownership PSID 4ebfbce29f56...

Xorg-server Heap Buffer Overflow DoS

The vulnerability of the ProcXIGetSelectedEvents function in the X Window System Xorg-server lies in the possibility of data being written outside of the buffer. Exploiting this vulnerability could allow an attacker to access confidential data, compromise its integrity, and even cause service...

quic-go Resource Leak DoS

The vulnerability of the QUIC protocol implementation in the quic-go library written in the Go programming language is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Parasolid 3D Geometric Modeling Tool DoS

The vulnerability of Parasolid’s 3D geometric modeling tool is related to the unlimited distribution of resources. Exploiting this vulnerability can allow attackers to cause service failures by using specially created XT files...

WLInfoRailService DoS

The vulnerability of the WLInfoRailService component in the Avalanche mobile device management system is related to integer overflow during the processing of field lengths. Exploiting this vulnerability could allow an attacker to cause service failures...

EulerOS Virtualization 2.10.0 : libssh (EulerOS-SA-2024-1528)

According to the versions of the libssh package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attacker...

JetBrains Toolbox Resource Consumption DoS

The vulnerability of the JetBrains Toolbox suite of tools is related to an uncontrolled consumption of resources. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause service failures using SVG images...

PAN-OS DoS

The vulnerability of the PAN-OS operating system is related to the handling of the zero pointer. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures using specially created data...

Juniper Networks Forwarding Information Base Telemetry DoS

The vulnerability of the Forwarding Information Base Telemetry fibtd of Juniper Networks’ Junos OS and Junos OS Evolved operating systems is related to insufficient checking of exceptional states. Exploiting this vulnerability can allow a malicious actor to cause service failures...

Avalanche mobile device management DoS

The vulnerability of the Avalanche mobile device management web component is related to an incorrect restriction on the path name to the restricted catalog. Exploiting this vulnerability could allow a malicious actor to cause service failures...