OESA-2024-2162 ghostscript security update

Ghostscript is an interpreter for PostScript™ and Portable Document Format PDF files. Ghostscript consists of a PostScript interpreter layer, and a graphics library. Security Fixes: Artifex Ghostscript before 10.03.0 has a heap-based pointer disclosure observable in a constructed BaseFont name in...

UBUNTU-CVE-2024-31570

libfreeimage in FreeImage 3.4.0 through 3.18.0 has a stack-based buffer overflow in the PluginXPM.cpp Load function via an XPM file...

CVE-2024-31570

libfreeimage in FreeImage 3.4.0 through 3.18.0 has a stack-based buffer overflow in the PluginXPM.cpp Load function via an XPM file...

CVE-2024-45812

A DOM clobbering vulnerability was found in ViteJS. This may lead to cross-site scripting XSS attacks on websites that include Vite-bundled files configured with an output format of cjs, iife, or umd, and allow users to inject certain scriptless HTML tags without properly sanitizing the name or i...

CVE-2024-45812

Vite a frontend build tooling framework for javascript. Affected versions of vite were discovered to contain a DOM Clobbering vulnerability when building scripts to cjs/iife/umd output format. The DOM Clobbering gadget in the module can lead to cross-site scripting XSS in web pages where scriptle...

CVE-2024-7788

A flaw was found in LibreOffice. Various file formats are based on the zip file format. In cases of corruption of the underlying zip's central directory, LibreOffice offers a "repair mode" which will attempt to recover the zip file structure by scanning for secondary local file headers in the zip...

ca-certificates bug fix and enhancement update

An update is available for ca-certificates. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The ca-certificates package contains a set of Certificate Authority C...

scap-security-guide bug fix and enhancement update

An update is available for scap-security-guide. This update affects Rocky Linux 8, Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The scap-security-guide project provides a guide f...

Vulnerability of the Decompress() function in the decompress.c file of the HDF5 library, allowing attackers to cause a service failure.

The vulnerability of the Decompress function in the decompress.c file is related to writing beyond the memory boundaries. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the H5A__close() function in the HDF5 library allows a hacker to trigger a service failure.

The vulnerability of the H5Aclose function in the HDF5 library is related to buffer overflows in the queue, which can lead to corruption of instruction pointers. Exploiting this vulnerability may allow an attacker to cause a service failure remotely...

Vulnerability in file H5Eint.c of the HDF5 library, which allows a hacker to cause a service failure

The vulnerability in the H5Eint.c file of the HDF5 library is related to an uncontrolled recursion. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the H5Z__filter_scaleoffset() function in the HDF5 library allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the H5Zfilterscaleoffset function in the HDF5 library is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

Vulnerability of the H5O__layout_decode() function in the H5Olayout.c file of the HDF5 library, which allows a hacker to cause a service failure.

The vulnerability of the H5Olayoutdecode function in the H5Olayout.c file, belonging to the HDF5 library, involves reading data beyond the memory bounds. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the H5F_addr_decode_len() function in the H5Fint.c file of the HDF5 library allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the H5Faddrdecodelen function in the H5Fint.c file of the HDF5 library is related to buffer overflow in the queue. Exploitation of this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the H5O__layout_encode() function in the H5Olayout.c file of the HDF5 library allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the H5Olayoutencode function in the H5Olayout.c file of the HDF5 library is related to buffer overflow in the queue. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the H5FL_arr_malloc() function in the H5FL.c file of the HDF5 library allows a attacker to compromise the confidentiality and accessibility of protected information.

The vulnerability of the H5FLarrmalloc function in the H5FL.c file of the HDF5 library is related to buffer overflow in the queue. Exploitation of this vulnerability can allow a remote attacker to compromise the confidentiality and accessibility of the protected information...

The vulnerability of the H5T__ref_mem_setnull() function in the H5Tref.c file of the HDF5 library allows a attacker to compromise the confidentiality and integrity of the protected information.

The vulnerability of the H5Trefmemsetnull function in the H5Tref.c file of the HDF5 library is related to buffer overflow in the queue. Exploitation of this vulnerability could allow an attacker to compromise the confidentiality and integrity of the protected information...

The vulnerability of the H5VM_array_fill() function in the H5VM.c file of the HDF5 library allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the H5VMarrayfill function in the H5VM.c file of the HDF5 library is related to buffer overflow in the queue. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the H5T__get_native_type() function in the H5Tnative.c file of the HDF5 library allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the H5Tgetnativetype function in the H5Tnative.c file of the HDF5 library is related to buffer overflow in the queue. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the H5O__linfo_decode() function in the HDF5 library, which allows a hacker to cause a service failure

The vulnerability of the H5Olinfodecode function in the HDF5 library is related to buffer overflow in the queue. Exploiting this vulnerability could allow an attacker to cause a service failure...