13988 matches found
CVE-2024-44981 workqueue: Fix UBSAN 'subtraction overflow' error in shift_and_mask()
In the Linux kernel, the following vulnerability has been resolved: workqueue: Fix UBSAN 'subtraction overflow' error in shiftandmask UBSAN reports the following 'subtraction overflow' error when booting in a virtual machine on Android: | Internal error: UBSAN: integer subtraction overflow:...
CVE-2024-45506
creationtimestamp| type| source ---|---|--- 2024-09-04 17:44:46+00:00| seen| https://t.me/cvedetector/4794 2024-09-09 09:27:41+00:00| exploited| https://t.me/HackingInsights/12528 2025-03-14 19:45:02+00:00| exploited| https://t.me/DarkWebInformerCVEAlerts/7632 2026-06-19 12:46:35+00:00| exploited...
PT-2024-29640 · Bhyve +1 · Bhyve +1
Name of the Vulnerable Software and Affected Versions: bhyve affected versions not specified Description: Malicious software running in a guest VM can exploit a buffer overflow to achieve code execution on the host in the bhyve userspace process, which typically runs as root. The bhyve process ru...
PT-2024-8608 · Bhyve +1 · Bhyve +1
Name of the Vulnerable Software and Affected Versions: FreeBSD affected versions not specified Description: The issue is related to the ctl request sense function in the ctl subsystem of FreeBSD operating systems, which can lead to a buffer overflow in memory. This can allow an attacker to execut...
kernel: virtio-net: tap: mlx5_core short frame denial of service
A denial of service DoS attack was found in the mlx5 driver in the Linux kernel. A KVM guest VM using virtio-net can crash the host by sending a short packet, for example, size = ETHHLEN...
Moderate: Red Hat Security Advisory: gvisor-tap-vsock security update
An update for gvisor-tap-vsock is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerabilit...
Division By Zero Error
TensorFlow is vulnerable to a division by zero error. The vulnerability is due to insufficient handling of cases where the input's fourth dimension is zero in the DepthwiseConv TFLite operator, which can allows to execution issues or crashes in machine learning models...
kernel: virtio-net: tap: mlx5_core short frame denial of service
A denial of service DoS attack was found in the mlx5 driver in the Linux kernel. A KVM guest VM using virtio-net can crash the host by sending a short packet, for example, size = ETHHLEN...
The possible power state of the VDA machines
This article describes all the possible power state of the VDA machines...
ALSA-2024:6187 Moderate: gvisor-tap-vsock security update
A replacement for libslirp and VPNKit, written in pure Go. It is based on the network stack of gVisor and is used to provide networking for podman-machine virtual machines. Compared to libslirp, gvisor-tap-vsock brings a configurable DNS server and dynamic port forwarding. Security Fixes: golang:...
RHEL 9 : gvisor-tap-vsock (RHSA-2024:6187)
The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2024:6187 advisory. A replacement for libslirp and VPNKit, written in pure Go. It is based on the network stack of gVisor and is used to provide networking for...
Moderate: gvisor-tap-vsock security update
A replacement for libslirp and VPNKit, written in pure Go. It is based on the network stack of gVisor and is used to provide networking for podman-machine virtual machines. Compared to libslirp, gvisor-tap-vsock brings a configurable DNS server and dynamic port forwarding. Security Fixes: golang:...
CVE-2024-33054 Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Computer Vision
Memory corruption during the handshake between the Primary Virtual Machine and Trusted Virtual Machine...
CVE-2024-33054
CVE-2024-33054 describes memory corruption during the handshake between the Primary Virtual Machine and Trusted Virtual Machine in Qualcomm components (notably showing up under the Qualcomm Camera subcomponent). The vulnerability is characterized by a High impact on confidentiality, integrity, an...
CVE-2024-33054 Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Computer Vision
Memory corruption during the handshake between the Primary Virtual Machine and Trusted Virtual Machine...
CVE-2024-44943
A flaw was found in the Linux kernel. This issue involved improperly using the trygrabfolio function in the memory management subsystem and led to failures and kernel warnings during memory pinning in the Contiguous Memory Allocator CMA area, especially when starting SEV virtual machines...
Malicious code in @diotoborg/cupiditate-perferendis-repudiandae (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware be1a1e30efc8f2edde1f365989aec5b901f987c1459819caab446b8152561acb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @diotoborg/placeat-ea-autem (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bcf0392eb6b7aaaf4beeb8fc0399b6dd4ad83eff6a98b990b17d2c31f8f41687 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @diotoborg/debitis-blanditiis-dolore (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c14a6d140782ef2d9f2eedd0b3d5b1546fc6b40e149e1f5f53dd3a3a39f8fddc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
