CVE-2024-4775

An iterator stop condition was missing when handling WASM code in the built-in profiler, potentially leading to invalid memory access and undefined behavior. Note: This issue only affects the application when the profiler is running. This vulnerability affects Firefox 126...

CVE-2024-26901 do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak

In the Linux kernel, the following vulnerability has been resolved: dosysnametohandle: use kzalloc to fix kernel-infoleak syzbot identified a kernel information leak vulnerability in dosysnametohandle and issued the following report 1. 1 "BUG: KMSAN: kernel-infoleak in instrumentcopytouser...

CVE-2024-26890 Bluetooth: btrtl: fix out of bounds memory access

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btrtl: fix out of bounds memory access The problem is detected by KASAN. btrtl driver uses private hci data to store 'struct btrealtekdata'. If btrtl driver is used with btusb, then memory for private hci data is...

CVE-2021-47153

In the Linux kernel, the following vulnerability has been resolved: i2c: i801: Don't generate an interrupt on bus reset Now that the i2c-i801 driver supports interrupts, setting the KILL bit in a attempt to recover from a timed out transaction triggers an interrupt. Unfortunately, the interrupt...

SUSE-SU-2024:0937-1 Security update for openvswitch

This update for openvswitch fixes the following issues: - CVE-2023-3966: Fixed invalid memory access in Geneve with HW offload bsc1219465...

SUSE-SU-2024:0912-1 Security update for openvswitch

This update for openvswitch fixes the following issues: - CVE-2023-3966: Fixed invalid memory access in Geneve with HW offload bsc1219465...

SUSE-SU-2024:0830-1 Security update for xen

This update for xen fixes the following issues: - CVE-2023-46839: Fixed memory access through PCI device with phantom functions XSA-449 bsc1218851. - CVE-2023-46840: Fixed Failure to quarantine devices in !HVM builds XSA-450 bsc1219080. - CVE-2023-46841: Fixed shadow stack vs exceptions from...

SUSE-SU-2024:0738-2 Security update for openvswitch3

This update for openvswitch3 fixes the following issues: - CVE-2023-3966: Fixed invalid memory access in Geneve with HW offload bsc1219465...

SUSE-SU-2024:0738-1 Security update for openvswitch3

This update for openvswitch3 fixes the following issues: - CVE-2023-3966: Fixed invalid memory access in Geneve with HW offload bsc1219465...

CVE-2024-26608 ksmbd: fix global oob in ksmbd_nl_policy

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix global oob in ksmbdnlpolicy Similar to a reported issue check the commit b33fb5b801c6 "net: qualcomm: rmnet: fix global oob in rmnetpolicy", my local fuzzer finds another global out-of-bounds read for policy...

SUSE-SU-2024:0114-1 Security update for xwayland

This update for xwayland fixes the following issues: - CVE-2023-6816: Fixed heap buffer overflow in DeviceFocusEvent and ProcXIQueryPointer bsc1218582 - CVE-2024-0229: Fixed reattaching to different master device may lead to out-of-bounds memory access bsc1218583 - CVE-2024-21885: Fixed heap buff...

PT-2023-31573 · Cjson +3 · Cjson +3

Name of the Vulnerable Software and Affected Versions: cJSON version 1.7.16 Description: The issue is related to a segmentation violation in the function cJSON SetValuestring at cJSON.c. This indicates a potential problem with memory access that could lead to a crash or other unintended behavior...

Linux kernel io_uring SQ/CQ function denial of service vulnerability

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. Linux kernel suffers from a denial of service vulnerability that originates from an out-of-bounds memory access found in the iouring SQ/CQ function, which can be exploited by a...

SUSE-SU-2023:4543-1 Security update for xerces-c

This update for xerces-c fixes the following issues: - CVE-2023-37536: Fixed an integer overflow that could have led to a out-of-bounds memory accesses bsc1216156...

Medium: binutils

Issue Overview: A potential illegal memory access in binutils has been found when parsing a corrupt file. CVE-2023-1579 Affected Packages: binutils Issue Correction: Run dnf update binutils --releasever 2023.2.20231030 or dnf update --advisory ALAS2023-2023-425 --releasever 2023.2.20231030 to...

MGASA-2023-0292 Updated libxpm packages fix security vulnerabilities

A vulnerability was found in libXpm due to a boundary condition within the XpmCreateXpmImageFromBuffer function. This flaw allows a local to trigger an out-of-bounds read error and read the contents of memory on the system. CVE-2023-43788 Out of bounds read on XPM with corrupted colormap...

SUSE-SU-2023:3632-1 Security update for the Linux Kernel (Live Patch 34 for SLE 15 SP3)

This update for the Linux Kernel 5.3.18-15030059127 fixes several issues. The following security issues were fixed: - CVE-2023-2156: Fixed a flaw in the networking subsystem within the handling of the RPL protocol bsc1211395. - CVE-2023-3567: Fixed a use-after-free in vcsread in...

SUSE-SU-2023:3555-1 Security update for libssh2_org

This update for libssh2org fixes the following issues: - CVE-2020-22218: Fixed a bug in libssh2packetadd which allows to access out of bounds memory. bsc1214527...

CVE-2023-39616

AOMedia v3.0.0 to v3.5.0 was discovered to contain an invalid read memory access via the component assignframebufferp in av1/common/av1commonint.h...

PT-2023-27034

Name of the Vulnerable Software and Affected Versions AOMedia versions 3.0.0 through 3.5.0 Description The issue is related to an invalid read memory access via the component assign frame buffer p in av1/common/av1 common int.h. This component is part of the AOMedia library. Recommendations For...