UBUNTU-CVE-2024-56594

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: set the right AMDGPU sg segment limitation The driver needs to set the correct maxsegmentsize; otherwise debugdmamapsg will complain about the over-mapping of the AMDGPU sg length as following: WARNING: CPU: 6 PID: 19...

CVE-2024-56663 wifi: nl80211: fix NL80211_ATTR_MLO_LINK_ID off-by-one

In the Linux kernel, the following vulnerability has been resolved: wifi: nl80211: fix NL80211ATTRMLOLINKID off-by-one Since the netlink attribute range validation provides inclusive checking, the max of attribute NL80211ATTRMLOLINKID should be IEEE80211MLDMAXNUMLINKS - 1 otherwise causing an...

UBUNTU-CVE-2024-53225

In the Linux kernel, the following vulnerability has been resolved: iommu/tegra241-cmdqv: Fix alignment failure at maxnshift When configuring a kernel with PAGESIZE=4KB, depending on its setting of CONFIGCMAALIGNMENT, VCMDQLOG2SIZEMAX=19 could fail the alignment test and trigger a WARNON: WARNING...

CVE-2024-56544

CVE-2024-56544 details a kernel fix where the udmabuf folios array was changed from kmalloc to kvmalloc_array to support larger allocations. Under PAGE_SIZE=4096, MAX_PAGE_ORDER=10 (4MB memory limit for kmalloc), an udmabuf larger than 4MB could fail with a warning and NULL return. The patch enab...

PT-2024-35673 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to an alignment failure at max n shift in the iommu/tegra241-cmdqv component of the Linux kernel. When configuring a kernel with PAGE SIZE=4KB, depending on its...

DEBIAN-CVE-2024-53146

In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent a potential integer overflow If the tag length is = U32MAX - 3 then the "length + 4" addition can result in an integer overflow. Address this by splitting the decoding into several steps so that decodecbcompound4res...

WordPress Calculated Fields Form plugin <= 5.2.63 - Denial of Service vulnerability

Denial of Service vulnerability discovered by Max Boll b0lli in WordPress Plugin Calculated Fields Form versions = 5.2.63...

BD多款产品 安全漏洞

BD BACTEC Blood Culture System and others are products of BD Medical BD, Inc. the BD BACTEC Blood Culture System is a blood culture media system. the BD COR System is a fully automated and integrated high-throughput diagnostic system. the BD EpiCenter Microbiology Data Management System is a...

CVE-2024-48872 Bypass of "Max failed attempts" restriction via race condition

Mattermost versions 10.1.x = 10.1.2, 10.0.x = 10.0.2, 9.11.x = 9.11.4, and 9.5.x = 9.5.12 fail to prevent concurrently checking and updating the failed login attempts. which allows an attacker to bypass of "Max failed attempts" restriction and send a big number of login attempts before being...

JDK: HTTP client improper handling of maxHeaderSize (8328286)

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Networking. Supported versions that are affected are Oracle Java SE: 8u421, 8u421-perf, 11.0.24, 17.0.12, 21.0.4, 23; Oracle GraalVM for JDK: 17.0.12, 21.0.4, 23;...

CVE-2023-26520

Missing Authorization vulnerability in Max Chirkov Advanced Text Widget allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Advanced Text Widget : from n/a through 2.1.2...

CVE-2023-26520 WordPress Advanced Text Widget plugin <= 2.1.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in Max Chirkov Advanced Text Widget allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Advanced Text Widget : from n/a through 2.1.2...

MAL-2024-11395 Malicious code in mona-max (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in mona-max (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-11390 Malicious code in mona-client-max (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in mona-client-max (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @bytedanc/mona-max (npm)

--- -= Per source details. Do not edit below this line.=-...

CVE-2024-38925

Open Robotics Robotic Operating System 2 ROS2 and Nav2 humble versions were discovered to contain a use-after-free via the nav2amcl process. This vulnerability is triggered via remotely sending a request for change the value of dynamic-parameter/amcl zmax...

Nav2 安全漏洞

Nav2 is the ROS community's navigation framework and system for ROS2. A security vulnerability exists in Nav2 that originates from the nav2amcl process containing post-release reuse. The vulnerability is triggered by remotely sending a request to change the value of zmax in the dynamic...

CVE-2024-38920

Open Robotics Robotic Operating System 2 ROS2 and Nav2 humble versions were discovered to contain a use-after-free via the nav2amcl process. This vulnerability is triggerd via remotely sending a request for change the value of dynamic-parameter/amcl maxbeams...