5558 matches found
CVE-2024-46795 ksmbd: unset the binding mark of a reused connection
In the Linux kernel, the following vulnerability has been resolved: ksmbd: unset the binding mark of a reused connection Steve French reported null pointer dereference error from sha256 lib. cifs.ko can send session setup requests on reused connection. If reused connection is used for binding...
CVE-2024-46795 ksmbd: unset the binding mark of a reused connection
In the Linux kernel, the following vulnerability has been resolved: ksmbd: unset the binding mark of a reused connection Steve French reported null pointer dereference error from sha256 lib. cifs.ko can send session setup requests on reused connection. If reused connection is used for binding...
RHSA-2007:0951 Red Hat Security Advisory: nfs-utils-lib security update
Bulletin has no description...
RHSA-2007:0913 Red Hat Security Advisory: nfs-utils-lib security update
Bulletin has no description...
RHSA-2005:033 Red Hat Security Advisory: alsa-lib security update
Bulletin has no description...
PT-2024-41009 · Colord · Colord
Name of the Vulnerable Software and Affected Versions: colord affected versions not specified Description: The issue is related to a potential local privilege escalation. This could be exploited by removing the script in the specfile which changes the ownership of /var/lib/colord. Recommendations...
Malicious code in @zarafront/lib-zds (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b7da81ddf52154f443baa27b56764a0be023447376bd6d8a3f587cc7db455f84 The OpenSSF Package Analysis project identified '@zarafront/lib-zds' @ 99.50.55 npm as malicious. It is considered malicious because: - The...
MAL-2024-8838 Malicious code in @zarafront/lib-zds (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b7da81ddf52154f443baa27b56764a0be023447376bd6d8a3f587cc7db455f84 The OpenSSF Package Analysis project identified '@zarafront/lib-zds' @ 99.50.55 npm as malicious. It is considered malicious because: - The...
Malware in tappp-tv-ui-lib
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malicious code in open-wuji-lib (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8b545c17e3e6d2e0a14f46b48f10fd15e2eda7222a6e82ead13d4391cfacd9c8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malware in open-wuji-lib
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
MAL-2024-8087 Malicious code in open-wuji-lib (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8b545c17e3e6d2e0a14f46b48f10fd15e2eda7222a6e82ead13d4391cfacd9c8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malware in @mp-ss-promotions-lib/components
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
CVE-2024-43896
In the Linux kernel, the following vulnerability has been resolved: ASoC: cs-amp-lib: Fix NULL pointer crash if efi.getvariable is NULL Call efirtservicessupported to check that efi.getvariable exists before calling it...
CVE-2024-43896
In the Linux kernel, the following vulnerability has been resolved: ASoC: cs-amp-lib: Fix NULL pointer crash if efi.getvariable is NULL Call efirtservicessupported to check that efi.getvariable exists before calling it...
CVE-2024-43896 ASoC: cs-amp-lib: Fix NULL pointer crash if efi.get_variable is NULL
In the Linux kernel, the following vulnerability has been resolved: ASoC: cs-amp-lib: Fix NULL pointer crash if efi.getvariable is NULL Call efirtservicessupported to check that efi.getvariable exists before calling it...
CVE-2024-43896 ASoC: cs-amp-lib: Fix NULL pointer crash if efi.get_variable is NULL
In the Linux kernel, the following vulnerability has been resolved: ASoC: cs-amp-lib: Fix NULL pointer crash if efi.getvariable is NULL Call efirtservicessupported to check that efi.getvariable exists before calling it...
CVE-2024-43896
In the Linux kernel, the following vulnerability has been resolved: ASoC: cs-amp-lib: Fix NULL pointer crash if efi.getvariable is NULL Call efirtservicessupported to check that efi.getvariable exists before calling it...
CVE-2024-43896: NULL Pointer Dereference
In the Linux kernel, the following vulnerability has been resolved: ASoC: cs-amp-lib: Fix NULL pointer crash if efi.getvariable is NULL Call efirtservicessupported to check that efi.getvariable exists before calling it...