Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the ivpubolist function of the accel/ivpu module not checking if ctx is NULL, which could lead to a general...

PT-2025-3605 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the ASoC: Intel: sof sdw component in the Linux kernel. The code uses the initialised member of the asoc sdw dailink struct to determine if a member of the arra...

OESA-2025-1040 iperf3 security update

Iperf is a tool for active measurements of the maximum achievable bandwidth on IP networks. It supports tuning of various parameters related to timing, protocols, and buffers. Security Fixes: iperf v3.17.1 was discovered to contain a segmentation violation via the iperfexchangeparameters...

iperf: Denial of Service in iperf Due to Improper JSON Handling

A flaw was found in iperf. This vulnerability allows a Denial of Service DoS via the injection of malformed JSON data, which can result in a segmentation fault when a NULL pointer is passed to strdup...

iperf: Denial of Service in iperf Due to Improper JSON Handling

A flaw was found in iperf. This vulnerability allows a Denial of Service DoS via the injection of malformed JSON data, which can result in a segmentation fault when a NULL pointer is passed to strdup...

CVE-2024-43663 Buffer overflow vulnerabilities in CGI scripts lead to segfault

There are many buffer overflow vulnerabilities present in several CGI binaries of the charging station.This issue affects Iocharger firmware for AC model chargers beforeversion 24120701. Likelihood: High – Given the prevalence of these buffer overflows, and the clear error message of the web...

CVE-2024-43663

CVE-2024-43663 describes buffer overflow vulnerabilities in several CGI binaries of Iocharger AC model charging stations. Affected firmware versions are before 24120701. Exploitation can occur over the network and may lead to remote code execution; the webserver may segfault and return 502, with ...

CVE-2024-43663 Buffer overflow vulnerabilities in CGI scripts lead to segfault

There are many buffer overflow vulnerabilities present in several CGI binaries of the charging station.This issue affects Iocharger firmware for AC model chargers beforeversion 24120701. Likelihood: High – Given the prevalence of these buffer overflows, and the clear error message of the web...

SUSE CVE-2024-56624

In the Linux kernel, the following vulnerability has been resolved: iommufd: Fix outfput in iommufdfaultalloc As fput calls the file-fop-release op, where fault obj and ictx are getting released, there is no need to release these two after fput one more time, which would result in imbalanced...

iperf v3.17.1 was discovered to contain a segmentation violation via the iperf_exchange_parameters() function.

...

CVE-2024-46602

An issue was discovered in Elspec G5 digital fault recorder version 1.2.1.12 and earlier. An XML External Entity XXE vulnerability may allow an attacker to cause a Denial of Service DoS via a crafted XML payload...

CVE-2024-46601

Elspec Engineering G5 Digital Fault Recorder Firmware v1.2.1.12 was discovered to contain a buffer overflow...

CVE-2025-0241 Memory corruption when using JavaScript Text Segmentation

When segmenting specially crafted text, segmentation would corrupt memory leading to a potentially exploitable crash. This vulnerability was fixed in Firefox 134, Firefox ESR 128.6, Thunderbird 134, and Thunderbird 128.6...

CVE-2024-46602

Summary: CVE-2024-46602 affects Elspec G5 digital fault recorder, versions 1.2.1.12 and earlier. The issue is an XML External Entity (XXE) vulnerability that may enable a remote attacker to trigger a Denial of Service via a crafted XML payload. The CVSSv3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N...

CVE-2024-46601

Elspec Engineering G5 Digital Fault Recorder Firmware v1.2.1.12 was discovered to contain a buffer overflow...

Elspec G5 Digital Fault Recorder 安全漏洞

Elspec G5 Digital Fault Recorder is a digital fault recorder from Elspec, Israel. It is used to monitor and record fault events and waveform data in power systems. A security vulnerability exists in Elspec G5 Digital Fault Recorder version 1.2.1.12 and earlier, which stems from a contained buffer...

CVE-2024-46601

Elspec Engineering G5 Digital Fault Recorder Firmware v1.2.1.12 was discovered to contain a buffer overflow...

CVE-2024-46602

An issue was discovered in Elspec G5 digital fault recorder version 1.2.1.12 and earlier. An XML External Entity XXE vulnerability may allow an attacker to cause a Denial of Service DoS via a crafted XML payload...

CVE-2024-46601

CVE-2024-46601 affects Elspec G5 Digital Fault Recorder firmware. A buffer overflow in Firmware v1.2.1.12 (and earlier per sources) could allow code execution on the device. CVSSv3.1 base score 7.5 (HIGH) with network access, no user interaction required, and no confidentiality/integrity impact r...

Mozilla -- DoS via segmentation fault

[email protected] reports: When segmenting specially crafted text, segmentation would corrupt memory leading to a potentially exploitable crash...