Moderate: Red Hat Security Advisory: haproxy security update

An update for haproxy is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, and Red Hat Enterprise Linux 8.6 Telecommunications Update Service. Red Hat Product Security has rated this update as...

ALSA-2024:8849 Moderate: haproxy security update

The haproxy packages provide a reliable, high-performance network load balancer for TCP and HTTP-based applications. Security Fixes: haproxy: untrimmed URI fragments may lead to exposure of confidential data on static servers CVE-2023-45539 For more details about the security issues, including th...

Moderate: haproxy security update

The haproxy packages provide a reliable, high-performance network load balancer for TCP and HTTP-based applications. Security Fixes: haproxy: untrimmed URI fragments may lead to exposure of confidential data on static servers CVE-2023-45539 For more details about the security issues, including th...

CVE-2024-33068 Use After Free in WLAN Host Communication

Transient DOS while parsing fragments of MBSSID IE from beacon frame...

CVE-2024-33068 Use After Free in WLAN Host Communication

Transient DOS while parsing fragments of MBSSID IE from beacon frame...

CVE-2024-33068

CVE-2024-33068 is a vulnerability described as a transient DoS during parsing of MBSSID IE fragments in beacon frames. Public sources (NVD, Red Hat, CVE list) tie it to WLAN host communication and a use-after-free style issue in Qualcomm chipsets, with base scores: NVD 6.5 (MEDIUM) and CNA 7.5 (H...

igb: cope with large MAX_SKB_FRAGS

...

Optimizing Web Usability with Text Fragments

...

SUSE CVE-2024-45030

In the Linux kernel, the following vulnerability has been resolved: igb: cope with large MAXSKBFRAGS Sabrina reports that the igb driver does not cope well with large MAXSKBFRAG values: setting MAXSKBFRAG to 45 causes payload corruption on TX. An easy reproducer is to run ssh to connect to the...

haproxy: untrimmed URI fragments may lead to exposure of confidential data on static servers

HAProxy before 2.8.2 accepts as part of the URI component, which might allow remote attackers to obtain sensitive information or have unspecified other impact upon misinterpretation of a pathend rule, such as routing index.html.png to a static server...

AZL-49236 CVE-2024-45030 affecting package kernel for versions less than 6.6.51.1-1

In the Linux kernel, the following vulnerability has been resolved: igb: cope with large MAXSKBFRAGS Sabrina reports that the igb driver does not cope well with large MAXSKBFRAG values: setting MAXSKBFRAG to 45 causes payload corruption on TX. An easy reproducer is to run ssh to connect to the...

DEBIAN-CVE-2024-45030

In the Linux kernel, the following vulnerability has been resolved: igb: cope with large MAXSKBFRAGS Sabrina reports that the igb driver does not cope well with large MAXSKBFRAG values: setting MAXSKBFRAG to 45 causes payload corruption on TX. An easy reproducer is to run ssh to connect to the...

UBUNTU-CVE-2024-45030

In the Linux kernel, the following vulnerability has been resolved: igb: cope with large MAXSKBFRAGS Sabrina reports that the igb driver does not cope well with large MAXSKBFRAG values: setting MAXSKBFRAG to 45 causes payload corruption on TX. An easy reproducer is to run ssh to connect to the...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an issue with the igb component having problems handling large MAXSKBFRAGS. No detailed vulnerability detail...

kernel: net/sched: act_ct: fix skb leak and crash on ooo frags

A memory leak flaw and potential kernel crash were found in the Linux kernel’s Conntrack module. This issue occurs when Conntrack is being used by a local user for a specific configuration, and both fragmented packets are received remotely and out of order. This flaw allows a local or remote user...

CVE-2024-33010

Transient DOS while parsing fragments of MBSSID IE from beacon frame...

CVE-2024-33010 Use After Free in WLAN Host

Transient DOS while parsing fragments of MBSSID IE from beacon frame...

CVE-2024-33010 Use After Free in WLAN Host

Transient DOS while parsing fragments of MBSSID IE from beacon frame...

haproxy: untrimmed URI fragments may lead to exposure of confidential data on static servers

HAProxy before 2.8.2 accepts as part of the URI component, which might allow remote attackers to obtain sensitive information or have unspecified other impact upon misinterpretation of a pathend rule, such as routing index.html.png to a static server...

CVE-2024-39903 Local File Inclusion in Solara

Solara is a pure Python, React-style framework for scaling Jupyter and web apps. A Local File Inclusion LFI vulnerability was identified in widgetti/solara, in version 1.35.1, which was fixed in version 1.35.1. This vulnerability arises from the application's failure to properly validate URI...