CVE-2024-0229

An out-of-bounds memory access flaw was found in the X.Org server. This issue can be triggered when a device frozen by a sync grab is reattached to a different master device. This issue may lead to an application crash, local privilege escalation if the server runs with extended privileges, or...

CVE-2024-0229

CVE-2024-0229 affects the X.Org server (xorg-x11-server). The flaw is an out-of-bounds memory access triggered when a device frozen by a sync grab is reattached to a different master device, potentially causing an application crash, local privilege escalation, or remote code execution in SSH X11 ...

CVE-2024-0229 Xorg-x11-server: reattaching to different master device may lead to out-of-bounds memory access

An out-of-bounds memory access flaw was found in the X.Org server. This issue can be triggered when a device frozen by a sync grab is reattached to a different master device. This issue may lead to an application crash, local privilege escalation if the server runs with extended privileges, or...

CVE-2024-0229 Xorg-x11-server: reattaching to different master device may lead to out-of-bounds memory access

An out-of-bounds memory access flaw was found in the X.Org server. This issue can be triggered when a device frozen by a sync grab is reattached to a different master device. This issue may lead to an application crash, local privilege escalation if the server runs with extended privileges, or...

X.Org Server DeviceFocusEvent Improper Validation of Array Index Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of X.Org Server. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of...

X.Org Server XIQueryPointer Improper Validation of Array Index Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of X.Org Server. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the ProcXIQueryPointer...

Open vSwitch Security Vulnerabilities

Open vSwitch is an open source virtual switch. A security vulnerability exists in Open vSwitch. An attacker exploited the vulnerability to cause a denial of service and invalid memory access...

CentOS 8 : glibc (CESA-2023:5455)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2023:5455 advisory. - A flaw was found in glibc. When the getaddrinfo function is called with the AFUNSPEC address family and the system is configured with no-aaaa mode vi...

kernel: drivers/usb/storage/ene_ub6250.c

An out-of-bounds memory access flaw was found in the Linux kernel ENE SD/MS Card reader driver. This issue occurs when using a malicious USB device, which could allow a local user to crash the system...

kernel: net/tls: tls_is_tx_ready() checked list_entry

A memory leak flaw was found in the Linux kernel's TLS protocol. This issue could allow a local user unauthorized access to some memory...

kernel: improper input validation may lead to privilege escalation

An out-of-bounds OOB memory access flaw was found in the Linux kernel's eBPF due to an Improper Input Validation. This flaw allows a local attacker with a special privilege to crash the system or leak internal information...

kernel: Double-free in split_2MB_gtt_entry when function intel_gvt_dma_map_guest_page failed

A double-free memory flaw was found in the Linux kernel. The Intel GVT-g graphics driver triggers VGA card system resource overload, causing a fail in the intelgvtdmamapguestpage function. This issue could allow a local user to crash the system...

kernel: drivers/usb/storage/ene_ub6250.c

An out-of-bounds memory access flaw was found in the Linux kernel ENE SD/MS Card reader driver. This issue occurs when using a malicious USB device, which could allow a local user to crash the system...

RHEL 8 : kernel (RHSA-2024:0724)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:0724 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: use-after-free in schqfq netwo...

CVE-2024-24575

libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your application. Using well-crafted inputs to gitrevparsesingle can cause the function to enter an infinite loop, potentially causing a Denial ...

Denial Of Service (DoS)

Open Policy Agent is vulnerable to Denial Of Service DoS. The vulnerability is due to ast/parser.go which incorrectly interprets expression. This results in triggering out of range memory access, resulting in Denial of Service DoS...

PT-2024-1690 · Libgit2 +4 · Libgit2 +4

Name of the Vulnerable Software and Affected Versions: libgit2 versions prior to 1.7.2 Description: The issue is related to the git revparse single function, which can enter an infinite loop when provided with well-crafted inputs, potentially causing a Denial of Service attack. The revparse...

Mageia: Security Advisory (MGASA-2024-0022)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Updated x11-server, x11-server-xwayland and tigervnc fix security issues

The updated packages fix security vulnerabilities: Heap buffer overflow in DeviceFocusEvent and ProcXIQueryPointer. CVE-2023-6816 Reattaching to different master device may lead to out-of-bounds memory access. CVE-2024-0229 Heap buffer overflow in XISendDeviceHierarchyEvent. CVE-2024-21885 Heap...

The vulnerability of the PMRWritePMPageList() function in the PowerVR GPU graphics driver for Android and ChromeOS systems allows attackers to exploit their privileges.

The vulnerability of the PMRWritePMPageList function in the PowerVR GPU driver for Android and ChromeOS operating systems is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow attackers to gain increased privileges...