3721 matches found
DEBIAN-CVE-2024-35897
In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: discard table flag update with pending basechain deletion Hook unregistration is deferred to the commit phase, same occurs with hook updates triggered by the table dormant flag. When both commands are combine...
UBUNTU-CVE-2024-35897
In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: discard table flag update with pending basechain deletion Hook unregistration is deferred to the commit phase, same occurs with hook updates triggered by the table dormant flag. When both commands are combine...
CVE-2024-35897
CVE-2024-35897 affects the Linux kernel nf_tables component. The issue arises when updating the discard table flag while a basechain deletion is pending, because unregistration of hooks is deferred to the commit phase. If both commands execute together, a basechain can be deleted while its hook r...
Exploit for Unrestricted Upload of File with Dangerous Type in Git
CVE-2024-32002 RCE Submodule A submodule to demonstrate CVE-2...
CVE-2024-35818
A vulnerability was found in the Linux kernel's LoongArch architecture. This issue occurs due to an improperly defined ioaw hook, which could affect memory writes. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product...
Exploit for Unrestricted Upload of File with Dangerous Type in Git
CVE-2024-32002: Exploiting Git RCE via git clone This repos...
UBUNTU-CVE-2024-35818
In the Linux kernel, the following vulnerability has been resolved: LoongArch: Define the ioaw hook as mmiowb Commit fb24ea52f78e0d595852e "drivers: Remove explicit invocations of mmiowb" remove all mmiowb in drivers, but it says: "NOTE: mmiowb has only ever guaranteed ordering in conjunction wit...
PT-2024-40441 · Datadog · Datadog/Dd-Trace
Name of the Vulnerable Software and Affected Versions: datadog/dd-trace versions 0.30.0 through 0.30.1 Description: The issue concerns a security and stability problem where the ddtrace.request init hook was not properly bound by the open basedir INI directive, potentially leading to...
ALPINE-CVE-2024-32002
Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4, repositories with submodules can be crafted in a way that exploits a bug in Git whereby it can be fooled into writing files not into the submodule's worktree but into a .git/ directory...
UBUNTU-CVE-2024-32002
Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4, repositories with submodules can be crafted in a way that exploits a bug in Git whereby it can be fooled into writing files not into the submodule's worktree but into a .git/ directory...
CVE-2024-32002
Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4, repositories with submodules can be crafted in a way that exploits a bug in Git whereby it can be fooled into writing files not into the submodule's worktree but into a .git/ directory...
PT-2024-3769 · Cacti +3 · Cacti +3
Name of the Vulnerable Software and Affected Versions: Cacti versions prior to 1.2.27 Description: Cacti provides an operational monitoring and fault management framework. There is a file inclusion issue in the lib/plugin.php file, specifically with the api plugin hook function, which reads the...
SUSE CVE-2022-48691
In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: clean up hook list when offload flags check fails splice back the hook list so nftchainreleasehook has a chance to release the hooks. BUG: memory leak unreferenced object 0xffff88810180b100 size 96: comm...
container-tools:4.0 security update
An update is available for libslirp, module.buildah, module.crun, buildah, fuse-overlayfs, udica, module.oci-seccomp-bpf-hook, module.runc, conmon, module.containers-common, python-podman, module.libslirp, module.fuse-overlayfs, runc, criu, module.toolbox, module.container-selinux,...
container-tools:rhel8 security and bug fix update
An update is available for libslirp, module.buildah, module.crun, buildah, fuse-overlayfs, udica, module.oci-seccomp-bpf-hook, module.netavark, module.runc, conmon, module.containers-common, python-podman, module.libslirp, module.aardvark-dns, module.fuse-overlayfs, runc, criu, aardvark-dns,...
SUSE CVE-2024-27018
In the Linux kernel, the following vulnerability has been resolved: netfilter: brnetfilter: skip conntrack input hook for promisc packets For historical reasons, when bridge device is in promisc mode, packets that are directed to the taps follow bridge input hook path. This patch adds a workaroun...
DEBIAN-CVE-2022-48691
In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: clean up hook list when offload flags check fails splice back the hook list so nftchainreleasehook has a chance to release the hooks. BUG: memory leak unreferenced object 0xffff88810180b100 size 96: comm...
CVE-2022-48691
In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: clean up hook list when offload flags check fails splice back the hook list so nftchainreleasehook has a chance to release the hooks. BUG: memory leak unreferenced object 0xffff88810180b100 size 96: comm...
AZL-42252 CVE-2024-27018 affecting package kernel for versions less than 5.15.158.1-1
In the Linux kernel, the following vulnerability has been resolved: netfilter: brnetfilter: skip conntrack input hook for promisc packets For historical reasons, when bridge device is in promisc mode, packets that are directed to the taps follow bridge input hook path. This patch adds a workaroun...
CVE-2024-27018
In the Linux kernel, the following vulnerability has been resolved: netfilter: brnetfilter: skip conntrack input hook for promisc packets For historical reasons, when bridge device is in promisc mode, packets that are directed to the taps follow bridge input hook path. This patch adds a workaroun...