SUSE SLES12 Security Update : kernel (Live Patch 47 for SLE 12 SP5) (SUSE-SU-2024:3040-1)

The remote SUSE Linux SLES12 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2024:3040-1 advisory. This update for the Linux Kernel 4.12.14-122173 fixes one issue. The following security issue was fixed: - CVE-2021-47378: Fixed use-after-free by...

CVE-2024-44934

In the Linux kernel, the following vulnerability has been resolved: net: bridge: mcast: wait for previous gc cycles when removing port syzbot hit a use-after-free1 which is caused because the bridge doesn't make sure that all previous garbage has been collected when removing a port. What happens...

KLA71827 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to spoof user interface, cause denial of service, bypass security restrictions, gain privileges, execute arbitrary code. Below is a complete list of vulnerabilities: 1. Inappropriate...

CVE-2022-48892

In the Linux kernel, the following vulnerability has been resolved: sched/core: Fix use-after-free bug in dupusercpusptr Since commit 07ec77a1d4e8 "sched: Allow task CPU affinity to be restricted on asymmetric systems", the setting and clearing of usercpusptr are done under pilock for arm64...

CVE-2023-52907

In the Linux kernel, the following vulnerability has been resolved: nfc: pn533: Wait for outurb's completion in pn533usbsendframe Fix a use-after-free that occurs in hcd when inurb sent from pn533usbsendframe is completed earlier than outurb. Its callback frees the skb data in...

CVE-2022-48869

In the Linux kernel, the following vulnerability has been resolved: USB: gadgetfs: Fix race between mounting and unmounting The syzbot fuzzer and Gerald Lee have identified a use-after-free bug in the gadgetfs driver, involving processes concurrently mounting and unmounting the gadgetfs filesyste...

CVE-2023-52907

CVE-2023-52907 affects the Linux kernel NFC pn533 driver. A use-after-free occurs in the host controller driver (hcd) when in_urb completes before out_urb, freeing skb data used as the transfer buffer for out_urb. The fix delays sending in_urb until the out_urb callback has run, and splits the co...

EulerOS Virtualization 2.11.1 : qemu (EulerOS-SA-2024-2176)

According to the versions of the qemu package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : QEMU is a FAST! processor emulator using dynamic translation to achieve good emulation speed.QEMU has two operating modes: Full system...

PT-2024-5907 · Google +4 · Google Chrome +4

Name of the Vulnerable Software and Affected Versions: Google Chrome on Android versions prior to 128.0.6613.84 Microsoft Edge affected versions not specified Description: The issue is related to a use-after-free vulnerability in the Passwords component, which could allow a remote attacker to...

EulerOS 2.0 SP12 : xorg-x11-server (EulerOS-SA-2024-2255)

According to the versions of the xorg-x11-server package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A use-after-free vulnerability was found in the ProcRenderAddGlyphs function of Xorg servers. This issue occurs when AllocateGlyph is call...

EulerOS Virtualization 2.11.0 : util-linux (EulerOS-SA-2024-2203)

According to the versions of the util-linux package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : QEMU is a FAST! processor emulator using dynamic translation to achieve good emulation speed.QEMU has two operating modes: Full...

CVE-2024-42302

In the Linux kernel, the following vulnerability has been resolved: PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal Keith reports a use-after-free when a DPC event occurs concurrently to hot-removal of the same portion of the hierarchy: The dpchandler awaits readiness of the seconda...

CVE-2024-41830 Talos Security Advisory for Adobe (TALOS-2024-2009)

Acrobat Reader versions 20.005.30636, 24.002.20965, 24.002.20964, 24.001.30123 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must op...

CVE-2024-39388 ZDI-CAN-24055: Adobe Substance 3D Stager SKP File Parsing Use-After-Free Remote Code Execution Vulnerability

Substance3D - Stager versions 3.0.2 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

Vim < 9.1.0648 Double-Free

According to its version, the version of Vim installed on the remote host is prior to 9.1.0648. It is, therefore affected by a double free vulnerability. When abandoning a buffer, Vim may ask the user what to do with the modified buffer. If the user wants the changed buffer to be saved, Vim may...

Vim < 9.1.0647 Use-After-Free

According to its version, the version of Vim installed on the remote host is prior to 9.1.0647. It is, therefore affected by a use-after-free vulnerability. When closing a window, the corresponding tagstack data will be cleared and freed. However a bit later, the quickfix list belonging to that...

EulerOS 2.0 SP11 : openssl (EulerOS-SA-2024-2090)

According to the versions of the openssl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Use After Free with SSLfreebuffersCVE-2024-4741 Tenable has extracted the preceding description block directly from the EulerOS openssl security...

CVE-2024-41965 Vim < v9.1.0648 has a double-free in dialog_changed()

Vim is an open source command line text editor. double-free in dialogchanged in Vim v9.1.0648. When abandoning a buffer, Vim may ask the user what to do with the modified buffer. If the user wants the changed buffer to be saved, Vim may create a new Untitled file, if the buffer did not have a nam...

CVE-2024-41957

Vulnerability CVE-2024-41957 affects Vim before 9.1.0647, where a double-free/Use-After-Free could occur during window close if a quickfix list references the same tagstack data. The issue is described as low impact in the public note, requiring non-default flags to be effective, and it has been ...

CVE-2024-41957

Vim is an open source command line text editor. Vim v9.1.0647 has double free in src/alloc.c:616. When closing a window, the corresponding tagstack data will be cleared and freed. However a bit later, the quickfix list belonging to that window will also be cleared and if that quickfix list points...