CVE-2024-3708

A condition exists in lighttpd version prior to 1.4.51 whereby a remote attacker can craft an http request which could result in multiple outcomes: 1. cause lighttpd to access freed memory in which case the process lighttpd is running in could be terminated or other non-deterministic behavior cou...

UBUNTU-CVE-2024-3708

A condition exists in lighttpd version prior to 1.4.51 whereby a remote attacker can craft an http request which could result in multiple outcomes: 1. cause lighttpd to access freed memory in which case the process lighttpd is running in could be terminated or other non-deterministic behavior cou...

CVE-2024-3708

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2024-3708

...

CVE-2024-3708

Summary : Multiple connected sources describe a lighttpd vulnerability (CVE-2024-3708) affecting versions prior to 1.4.51. The root cause is a condition in handling remote HTTP requests that can access freed memory, causing process termination or non-deterministic behavior, and potentially enabli...

CVE-2024-3708

Removed by vendor...

D-Link DIR-3040 安全漏洞

The D-Link DIR-3040 is a router from China's AUO D-Link. It provides the function of connecting to the network. The D-Link DIR-3040 suffers from a memory disclosure vulnerability that originates from not freeing or failing to free dynamically allocated heap memory, which can be exploited by an...

grub2: out-of-bounds read at fs/ntfs.c

An out-of-bounds read flaw was found on grub2's NTFS filesystem driver. This issue may allow a physically present attacker to present a specially crafted NTFS file system image to read arbitrary memory locations. A successful attack allows sensitive data cached in memory or EFI variable values to...

kernel: netfilter: xtables out-of-bounds read in u32_match_it()

A flaw was found in the Netfilter subsystem in the Linux kernel. The xtu32 module did not validate the fields in the xtu32 structure. This flaw allows a local privileged attacker to trigger an out-of-bounds read by setting the size fields with a value beyond the array boundaries, leading to a cra...

Important: Red Hat Security Advisory: webkit2gtk3 security update

An update for webkit2gtk3 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...

webkitgtk: Processing a file may lead to a denial of service or potentially disclose memory contents

A use-after-free vulnerability was found in the SVG implementation within WebKitGTK. This flaw allows remote attackers to exploit the removal of an SVGFontFaceElement object, which occurs through specific vectors that trigger the deletion of the object during rendering...

Important: webkit2gtk3 security update

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fixes: webkitgtk: Processing web content may lead to arbitrary code execution CVE-2023-40414 webkitgtk: Processing web content may lead to arbitrary code execution CVE-2023-42852 webkitgtk: Processing...

PT-2024-27287 · Lighttpd · Lighttpd

Name of the Vulnerable Software and Affected Versions: lighttpd versions prior to 1.4.51 Description: A condition exists whereby a remote attacker can craft an http request which could result in multiple outcomes: 1. cause lighttpd to access freed memory in which case the process lighttpd is...

ALSA-2024:2982 Important: webkit2gtk3 security update

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fixes: webkitgtk: Processing web content may lead to arbitrary code execution CVE-2023-40414 webkitgtk: Processing web content may lead to arbitrary code execution CVE-2023-42852 webkitgtk: Processing...

Adobe Illustrator Buffer Overflow Vulnerability (CNVD-2024-24291)

Adobe Illustrator is a set of vector-based image creation software from the American company Audobee Adobe. A buffer overflow vulnerability exists in Adobe Illustrator versions 28.4 and 27.9.3, which stems from being affected by an out-of-bounds read vulnerability. An attacker could exploit the...

Adobe Animate Buffer Overflow Vulnerability (CNVD-2024-24288)

Adobe Animate is a set of Flash animation software from the American company Audobee Adobe. A buffer overflow vulnerability exists in Adobe Animate versions 24.0.2 and 23.0.5, which originated from being affected by an out-of-bounds read vulnerability. An attacker could exploit the vulnerability ...

Adobe Framemaker Buffer Overflow Vulnerability (CNVD-2024-24752)

Adobe Framemaker is the United States of America Odooby Adobe company's set of page layout software for writing and editing large or complex documents including structured documents. Adobe Framemaker suffers from a buffer overflow vulnerability that stems from being affected by an out-of-bounds...

Adobe Framemaker Buffer Overflow Vulnerability (CNVD-2024-24297)

Adobe Framemaker is the United States of America Odooby Adobe company's set of page layout software for writing and editing large or complex documents including structured documents. A buffer overflow vulnerability exists in Adobe Framemaker versions 2020.5 and 2022.3, which stems from being...

The vulnerability of the Adobe Framemaker desktop publishing system, related to reading data beyond the buffer in memory, allows attackers to disclose protected information.

The vulnerability of the Adobe Framemaker desktop publishing system relates to reading data beyond the buffer in memory. Exploiting this vulnerability could allow an attacker to disclose protected information...

CVE-2024-30287

Adobe Framemaker versions 2020.5, 2022.3 and earlier Answer: are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interactio...