JetBrains Toolbox Resource Consumption DoS

The vulnerability of the JetBrains Toolbox suite of tools is related to an uncontrolled consumption of resources. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause service failures using SVG images...

WLInfoRailService DoS

The vulnerability of the WLInfoRailService component in the Avalanche mobile device management system is related to integer overflow during the processing of field lengths. Exploiting this vulnerability could allow an attacker to cause service failures...

EulerOS Virtualization 2.10.0 : libssh (EulerOS-SA-2024-1528)

According to the versions of the libssh package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attacker...

SAP NetWeaver AS ABAP DoS

The vulnerability of SAP NetWeaver AS ABAP and SAP ABAP Platform integration software platforms is related to uncontrolled resource consumption. Exploiting this vulnerability can allow attackers to cause service failures remotely...

RHEL 8 / 9 : java-1.8.0-openjdk (RHSA-2024:1818)

The remote Redhat Enterprise Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:1818 advisory. The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit. Security...

UBUNTU-CVE-2024-26823

In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v3-its: Restore quirk probing for ACPI-based systems While refactoring the way the ITSs are probed, the handling of quirks applicable to ACPI-based platforms was lost. As a result, systems such as HIP07 lose their GIC...

The US Government Has a Microsoft Problem

Microsoft has stumbled through a series of major cybersecurity failures over the past few years. Experts say the US government’s reliance on its systems means the company continues to get a free pass...

Siemens RPC Maintenance Failure

The vulnerability of the RPC Remote Procedure Call protocol implementation in Siemens SIMATIC PCS 7, OpenPCS 7, and SCADA systems like SIMATIC WinCC is related to errors in pointer assignment. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...

HP UEFI Privilege Escalation

The vulnerability of HP workstation BIOS microprogramming software is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to enhance their privileges, execute arbitrary code, or cause service failures...

Zoom Video Conferencing DoS

The vulnerability of Zoom video conferencing software is related to insufficient verification of input data. Exploiting this vulnerability allows a malicious actor to cause service failures...

US Cyber Safety Review Board on the 2023 Microsoft Exchange Hack

The US Cyber Safety Review Board released a report on the summer 2023 hack of Microsoft Exchange by China. It was a serious attack by the Chinese government that accessed the emails of senior US government officials. From the executive summary: The Board finds that this intrusion was preventable...

lib/kadm5/kadm_rpc_xdr.c Kerberos DoS

The vulnerability of the file lib/kadm5/kadmrpcxdr.c, which implements the Kerberos network protocol, is related to the exposure of an uninitialized pointer. Exploiting this vulnerability could allow a malicious actor to cause service failures...

jq Heap Buffer Overflow DoS

The vulnerability of the JQ programming language lies in buffer overflow attacks. Exploiting this vulnerability can allow attackers to cause system failures...

Identity Thief Lived as a Different Man for 33 Years

Plus: Microsoft scolded for a “cascade” of security failures, AI-generated lawyers send fake legal threats, a data broker quietly lobbies against US privacy legislation, and more...

h2 library Resource Exhaustion

The vulnerability of the h2 library in the Rust programming language in the Tokio environment is related to unlimited resource distribution. Exploiting this vulnerability can allow a remote attacker to cause service failures...

CVE-2024-26813 vfio/platform: Create persistent IRQ handlers

In the Linux kernel, the following vulnerability has been resolved: vfio/platform: Create persistent IRQ handlers The vfio-platform SETIRQS ioctl currently allows loopback triggering of an interrupt before a signaling eventfd has been configured by the user, which thereby allows a NULL pointer...

Cisco IOS XR Secure Copy FTP DoS

The vulnerability of the Secure Copy Protocol and FTP SFTP implementations in the Cisco IOS XR operating system is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to cause service failures...

Cisco IOS XE DoS

The vulnerability of the AUX function in Cisco IOS XE operating systems is related to errors in processing incoming traffic. Exploiting this vulnerability can allow attackers to cause service failures...

Cisco IOS LISP DoS

The vulnerability of the LISP protocol implementation in Cisco IOS and Cisco IOS XE operating systems is related to uncontrolled recursion during the processing of LISP packets. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

CVE-2024-26702

In the Linux kernel, the following vulnerability has been resolved: iio: magnetometer: rm3100: add boundary check for the value read from RM3100REGTMRC Recently, we encounter kernel crash in function rm3100commonprobe caused by out of bound access of array rm3100samprates because of underlying...