CVE-2024-32462

CVE-2024-32462 affects Flatpak releases prior to 1.15.8, 1.10.9, 1.12.9, and 1.14.6. The issue arises when a Flatpak app passes arbitrary bwrap arguments (eg, --bind) to the --command used by flatpak run, which can be constructed from a portal call (org.freedesktop.portal.Background.RequestBackgr...

CVE-2024-26854

In the Linux kernel, the following vulnerability has been resolved: ice: fix uninitialized dplls mutex usage The pf-dplls.lock mutex is initialized too late, after its first use. Move it to the top of icedpllinit. Note that the "errexit" error path destroys the mutex. And the mutex is the last...

DLA-3782-1 util-linux - security update

Bulletin has no description...

MGASA-2024-0112 Updated util-linux packages fix security vulnerability

wall in util-linux through 2.40, often installed with setgid tty permissions, allows escape sequences to be sent to other users' terminals through argv. Specifically, escape sequences received from stdin are blocked, but escape sequences received from argv are not blocked. There may be plausible...

SUSE CVE-2024-26632

In the Linux kernel, the following vulnerability has been resolved: block: Fix iterating over an empty bio with bioforeachfolioall If the bio contains no data, biofirstfolio calls pagefolio on a NULL pointer and oopses. Move the test that we've reached the end of the bio from bionextfolio to...

DLA-3766-1 zfs-linux - security update

Bulletin has no description...

PT-2024-2626

Name of the Vulnerable Software and Affected Versions Nix versions prior to 2.3.18 Nix versions prior to 2.18.2 Nix versions prior to 2.19.4 Nix versions prior to 2.20.5 Description The issue is related to errors in synchronization when using a shared resource in the Nix package manager for Unix...

CVE-2023-52587

CVE-2023-52587 (Linux kernel) affects IB/ipoib multicast locking. The issue arose when priv->lock was released while iterating priv->multicast_list in ipoib_mcast_join_task(), creating a window for ipoib_mcast_dev_flush() to remove items mid-iteration. If a mcast item is removed after the l...

The vulnerability of the centralized endpoint security management tools—WithSecure Client Security, WithSecure Server Security, WithSecure Email and Server Security, WithSecure Elements Endpoint Protection, WithSecure Linux Security, WithSecure Linux Protection, WithSecure Atlant—is related to insufficient validation of input data. This allows attackers to trigger a Denial-of-Service attack.

The vulnerability of the centralized endpoint security management tools—WithSecure Client Security, WithSecure Server Security, WithSecure Email and Server Security, WithSecure Elements Endpoint Protection, WithSecure Linux Security, WithSecure Linux Protection, and WithSecure Atlant—is related t...

CVE-2021-46921

In the Linux kernel, the following vulnerability has been resolved: locking/qrwlock: Fix ordering in queuedwritelockslowpath While this code is executed with the waitlock held, a reader can acquire the lock without holding waitlock. The writer side loops checking the value with the...

CVE-2021-46915

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftlimit: avoid possible divide error in nftlimitinit divu64 divides u64 by u32. nftlimitinit wants to divide u64 by u64, use the appropriate math function div64u64 divide error: 0000 1 PREEMPT SMP KASAN CPU: 1 PID: 83...

CVE-2024-27359

Certain WithSecure products allow a Denial of Service because the engine scanner can go into an infinite loop when processing an archive file. This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, WithSecure Elements Endpoint Protectio...

WithSecure products Security breaches

WithSecure products is a line of security software from the Finnish company WithSecure. A security vulnerability exists in WithSecure products, which stems from the fact that the engine scanning program may enter an infinite loop when processing archived files, resulting in a denial of service. T...

PT-2024-1945 · Withsecure · Withsecure Server Security +7

Name of the Vulnerable Software and Affected Versions: WithSecure Client Security version 15 WithSecure Server Security version 15 WithSecure Email and Server Security version 15 WithSecure Elements Endpoint Protection versions 17 and later WithSecure Client Security for Mac version 15 WithSecure...

GLSA-202402-27 : Glade: Denial of Service

The remote host is affected by the vulnerability described in GLSA-202402-27 Glade: Denial of Service - plugins/gtk+/glade-gtk-box.c in GNOME Glade before 3.38.1 and 3.39.x before 3.40.0 mishandles widget rebuilding for GladeGtkBox, leading to a denial of service application crash. CVE-2020-36774...

Fedora: Security Advisory for chromium (FEDORA-2024-ca36dcc1d3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2024-1402

Name of the Vulnerable Software and Affected Versions glibc versions 2.36 and newer Description A heap-based buffer overflow was found in the vsyslog internal function of the glibc library. This function is called by the syslog and vsyslog functions. The issue occurs when the openlog function was...

Exploit for Improper Initialization in Linux Linux_Kernel

DirtyPipevirus Dirty Pipe is a kind of Linux exploit. Its C...

CVE-2023-49321

Certain WithSecure products allow a Denial of Service because scanning a crafted file takes a long time, and causes the scanner to hang. This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, WithSecure Elements Endpoint Protection 17 a...

CVE-2023-49322

Certain WithSecure products allow a Denial of Service because there is an unpack handler crash that can lead to a scanning engine crash. This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, WithSecure Elements Endpoint Protection 17 a...