CVE-2024-22525

dnspod-sr 0dfbd37 contains a SEGV...

dnspod-sr Security Vulnerability

DNSPod dnspod-sr is a high-performance recursive DNS server software from China-based DNSPod running on the Linux platform. A security vulnerability exists in dnspod-sr that stems from the inclusion of a SEGV memory error...

PT-2024-19467 · Dnspod-Sr · Dnspod-Sr

Name of the Vulnerable Software and Affected Versions: dnspod-sr version 0dfbd37 Description: The issue is related to a SEGV in dnspod-sr. No information is available about the estimated number of potentially affected devices or real-world incidents where this issue was exploited. Recommendations...

kernel: x86/fpu: Stop relying on userspace for info to fault in xsave buffer that cause loop forever

A flaw was found in the Linux kernel's x86/fpu module, which revolves around an issue with relying on user space for critical information regarding the xsave buffer. In the affected scenario, the expected size of the user space buffer is derived from user-controlled data, specifically,...

kernel: x86/fpu: Stop relying on userspace for info to fault in xsave buffer that cause loop forever

A flaw was found in the Linux kernel's x86/fpu module, which revolves around an issue with relying on user space for critical information regarding the xsave buffer. In the affected scenario, the expected size of the user space buffer is derived from user-controlled data, specifically,...

RHEL 9 : ncurses (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 9 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - ncurses: segfaulting OOB read CVE-2022-29458 - NCurse v6.4-20230418 was discovered to contain a...

RHEL 7 : perl (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - perl: segmentation fault in Sregmatch on negative backreference CVE-2013-7422 - perl: XSLoader loads...

RHEL 6 : libjpeg (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - libjpeg: null pointer dereference in cjpeg CVE-2016-3616 - An issue was discovered in libjpeg 9a and 9d...

RHEL 6 : memcached (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - memcached: Integer Overflow in items.c:itemfree CVE-2018-1000127 - Multiple integer signedness errors in...

RHEL 7 : thunderbird (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - libical: Segmentation fault on crafted file CVE-2016-5823 Note that Nessus has not tested for this issue but has...

RHEL 6 : libtirpc (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - libtirpc: Segmentation fault in makefdxprt return value in svcvc.c CVE-2018-14622 Note that Nessus has not tested f...

RHEL 8 : giflib (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - giflib: segfault via getarg.c CVE-2023-39742 Note that Nessus has not tested for this issue but has instead relied ...

RHEL 5 : coreutils (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - coreutils: memory corruption flaw in parsedatetime CVE-2014-9471 - coreutils: race condition vulnerabilit...

RHEL 7 : mod_auth_mellon (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - modauthmellon: Cross-site session transfer vulnerability CVE-2017-6807 - The amreadpostdata function in...

RHEL 5 : evince (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - poppler: Null pointer dereference in the JPXStream::readUByte function CVE-2017-9083 - evince is missing ...

RHEL 7 : liblouis (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - liblouis: Stack-based buffer overflow in function compileHyphenation in compileTranslationTable.c...

RHEL 9 : giflib (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 9 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - giflib: segfault via getarg.c CVE-2023-39742 Note that Nessus has not tested for this issue but has instead relied ...

RHEL 8 : libpng (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - libpng: underflow read in pngcheckkeyword CVE-2015-8540 - pngimagefree in png.c in libpng 1.6.x before...

RHEL 5 : qt (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - qt: segmentation fault in qgifhandler.cpp CVE-2015-1860 - libtiff: Out of bounds read in TIFFVGetField...

RHEL 7 : qt (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - qt: segmentation fault in qgifhandler.cpp CVE-2015-1860 - qt: XML entity expansion vulnerability...