CVE-2022-49534 scsi: lpfc: Protect memory leak for NPIV ports sending PLOGI_RJT

In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Protect memory leak for NPIV ports sending PLOGIRJT There is a potential memory leak in lpfcignoreelscmpl and lpfcelsrspreject that was allocated from NPIV PLOGIRJT lpfcrcvplogi's loginmbox. Check if...

Ubuntu 18.04 LTS / 20.04 LTS : Linux kernel vulnerabilities (USN-7293-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7293-1 advisory. Attila Szsz discovered that the HFS+ file system implementation in the Linux Kernel contained a heap overflow vulnerability. An attacker coul...

WordPress plugin Ultimate Classified Listings 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

USN-7276-1: Linux kernel vulnerabilities

Attila Szász discovered that the HFS+ file system implementation in the Linux Kernel contained a heap overflow vulnerability. An attacker could use a specially crafted file system image that, when mounted, could cause a denial of service system crash or possibly execute arbitrary code...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: mailbox: bcm2835: Fixed timeout during suspend mode During the noirq suspend phase, the Raspberry Pi power driver experiences firmware property timeouts. The reason is that the IRQ of the underlying BCM2835 mailbox is disabled...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: Handling of errors when calling otx2mboxgetrsp in otx2common.c has been improved. A check for the error pointer was added after calling otx2mboxgetrsp...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: mailbox: mtk-cmdq: Move devmmboxcontrollerregister after devmpmruntimeenable. When mtk-cmdq unbind itself, a WARNON message with the condition pmruntimegetsync 0 is generated. According to the call trace below: cmdqmboxshutdown...

Azure Linux 3.0 Security Update: kernel (CVE-2024-49963)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-49963 advisory. - In the Linux kernel, the following vulnerability has been resolved: mailbox: bcm2835: Fix timeout during...

CVE-2024-3760

In lunary-ai/lunary version 1.2.7, there is a lack of rate limiting on the forgot password page, leading to an email bombing vulnerability. Attackers can exploit this by automating forgot password requests to flood targeted user accounts with a high volume of password reset emails. This not only...

octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c

...

octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_dcbnl.c

...

octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_flows.c

...

CVE-2024-43063

information disclosure while invoking the mailbox read API...

CVE-2024-23366

Information Disclosure while invoking the mailbox write API when message received from user is larger than mailbox size...

CVE-2024-43063

Technical details about CVE-2024-43063 are not publicly available in the provided documents. Monitor for updates from vendors and security bulletins.

CVE-2024-43063 Buffer Over-read in Automotive Autonomy

information disclosure while invoking the mailbox read API...

CVE-2024-43063 Buffer Over-read in Automotive Autonomy

information disclosure while invoking the mailbox read API...

CVE-2024-23366 Buffer Over-read in Automotive Autonomy

Information Disclosure while invoking the mailbox write API when message received from user is larger than mailbox size...

CVE-2024-23366

CVE-2024-23366 affects Qualcomm chipset mailbox handling. The issue is an information disclosure in the mailbox write API when a message from a user exceeds the mailbox size, potentially exposing data due to improper handling of oversized input. Ironically, the vulnerability is scoped to local ac...

CVE-2024-23366 Buffer Over-read in Automotive Autonomy

Information Disclosure while invoking the mailbox write API when message received from user is larger than mailbox size...