EulerOS 2.0 SP10 : kernel (EulerOS-SA-2023-2811)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in the Linux kernel through 6.0.9. drivers/media/dvb-core/dvbnet.c has a .disconnect versus dvbdeviceopen race condition...

EulerOS 2.0 SP11 : kernel (EulerOS-SA-2023-2647)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : The Linux kernel before 6.2.9 has a race condition and resultant use-after-free in drivers/net/ethernet/qualcomm/emac/emac.c if a physically...

EulerOS Virtualization 2.11.1 : kernel (EulerOS-SA-2023-2724)

According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : The Linux kernel before 6.2.9 has a race condition and resultant use-after-free in drivers/net/ethernet/qualcomm/emac/emac.c if a...

Google Chrome < 120.0.6099.225 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 120.0.6099.225. It is, therefore, affected by multiple vulnerabilities as referenced in the 202401stable-channel-update-for-desktop16 advisory. - Out of bounds write in V8 in Google Chrome prior to 120.0.6099.224 allowe...

CVE-2024-0229

An out-of-bounds memory access flaw was found in the X.Org server. This issue can be triggered when a device frozen by a sync grab is reattached to a different master device. This issue may lead to an application crash, local privilege escalation if the server runs with extended privileges, or...

EulerOS 2.0 SP10 : glibc (EulerOS-SA-2024-1081)

According to the versions of the glibc packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in glibc. In an extremely rare situation, the getaddrinfo function may access memory that has been freed, resulting in an...

EulerOS 2.0 SP11 : libXpm (EulerOS-SA-2023-3279)

According to the versions of the libXpm package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A vulnerability was found in libXpm due to a boundary condition within the XpmCreateXpmImageFromBuffer function. This flaw allows a local attacke...

EulerOS 2.0 SP10 : glibc (EulerOS-SA-2024-1057)

According to the versions of the glibc packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in glibc. In an extremely rare situation, the getaddrinfo function may access memory that has been freed, resulting in an...

xorg server -- Multiple vulnerabilities

The X.Org project reports: CVE-2023-6816: Heap buffer overflow in DeviceFocusEvent and ProcXIQueryPointer Both DeviceFocusEvent and the XIQueryPointer reply contain a bit for each logical button currently down. Buttons can be arbitrarily mapped to any value up to 255 but the X.Org Server was only...

Google Chrome < 120.0.6099.234 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 120.0.6099.234. It is, therefore, affected by multiple vulnerabilities as referenced in the 202401stable-channel-update-for-desktop16 advisory. - Out of bounds memory access in V8 in Google Chrome prior to 120.0.6099.224...

EulerOS Virtualization 3.0.6.6 : kernel (EulerOS-SA-2023-3418)

According to the versions of the kernel package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in the Linux kernel through 5.16.11. The mixed IPID assignment method with the hash-based IPID assignment...

PT-2024-1267 · X.Org +11 · X.Org Server +11

Name of the Vulnerable Software and Affected Versions: X.Org Server affected versions not specified Description: An out-of-bounds memory access flaw was found in the X.Org server. This issue can be triggered when a device frozen by a sync grab is reattached to a different master device. The issue...

EulerOS Virtualization 2.9.0 : glibc (EulerOS-SA-2024-1008)

According to the versions of the glibc packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in glibc. In an extremely rare situation, the getaddrinfo function may access memory that has been freed, resulti...

EulerOS 2.0 SP10 : libXpm (EulerOS-SA-2024-1091)

According to the versions of the libXpm package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A vulnerability was found in libXpm due to a boundary condition within the XpmCreateXpmImageFromBuffer function. This flaw allows a local attacke...

The vulnerability of the slice_indices function in the programming language Python for microcontrollers and MicroPython systems allows a intruder to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the sliceindices function in the Python programming language for microcontrollers and MicroPython-based systems involves the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality,...

kernel: netfilter: potential slab-out-of-bound access due to integer underflow

An array indexing vulnerability was found in the netfilter subsystem of the Linux kernel. A missing macro could lead to a miscalculation of the h-nets array offset, providing attackers with the primitive to arbitrarily increment/decrement a memory buffer out-of-bound. This issue may allow a local...

Huawei EulerOS: Security Advisory for glibc (EulerOS-SA-2024-1081)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2023-5091 Mali GPU Kernel Driver allows improper GPU processing operations

Use After Free vulnerability in Arm Ltd Valhall GPU Kernel Driver allows a local non-privileged user to make improper GPU processing operations to gain access to already freed memory. This issue affects Valhall GPU Kernel Driver: from r37p0 through r40p0...

`serde` deserialization for `FamStructWrapper` lacks bound checks that could potentially lead to out-of-bounds memory access

...

ARM Valhall GPU Kernel Driver Resource Management Error Vulnerability

The ARM Valhall GPU Kernel Driver is a Valhall GPU kernel driver from ARM UK. A security vulnerability exists in ARM Valhall GPU Kernel Driver versions r37p0 through r40p0, which arises from the presence of post-release reuse in the kernel driver, allowing a local, unprivileged user to perform...