DEBIAN-CVE-2023-34241

OpenPrinting CUPS is a standards-based, open source printing system for Linux and other Unix-like operating systems. Starting in version 2.0.0 and prior to version 2.4.6, CUPS logs data of free memory to the logging service AFTER the connection has been closed, when it should have logged the data...

Mozilla Firefox Resource Management Error Vulnerability (CNVD-2023-59029)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in Mozilla Firefox, which originates from a confusing instruction in libaudio that is responsible for freeing memory. An attacker can exploit this vulnerability to cause...

Linux kernel cedrus.c resource management error vulnerability

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in versions of Linux kernel prior to 6.3.2, which originates from a garbled instruction to free memory in dm1105remove in cedrusremove in...

USN-6167-1: QEMU vulnerabilities

It was discovered that QEMU did not properly manage the guest drivers when shared buffers are not allocated. A malicious guest driver could use this issue to cause QEMU to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 20.04 LTS, Ubunt...

Ubuntu: Security Advisory (USN-6167-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2023-35829

An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in rkvdecremove in drivers/staging/media/rkvdec/rkvdec.c...

The vulnerability in the implementation of the Linux operating system’s MACsec security protocol allows a perpetrator to gain access to protected information or compromise the integrity of data.

The vulnerability of the Linux operating system’s MACsec network protocol implementation is related to the re-release of memory allocated in the macsecfreenetdev function, which was previously released in the macsecadddev function within the drivers/net/macsec.c module. Exploiting this...

Denial Of Service (DoS)

libmp4v2.so is vulnerable to Denial Of Service DoS. The vulnerability exists due to improper memory management in MP4SdpAtom::Read of atomsdp.cpp, which allows an attacker to crash the application...

Denial Of Service (DoS)

libmp4v2.so is vulnerable to Denial Of Service DoS. The vulnerability exists due to improper memory management in the MP4StringProperty of mp4property.cpp, which allows an attacker to crash the application...

Denial Of Service (DoS)

libmp4v2.so is vulnerable to Denial Of Service DoS. The vulnerability exists due to improper memory management in the MP4StringProperty of mp4property.cpp, which allows an attacker to crash the application...

Remote Code Execution (RCE)

Overview Affected versions of this package are vulnerable to Remote Code Execution RCE. A vulnerability exists in .NET source generator for P/Invokes that can lead to generated code freeing uninitialized memory and crashing. Remediation Upgrade Microsoft.NETCore.App.Runtime.win-x64 to version 7.0...

Amazon Linux 2 : webkitgtk4 (ALAS-2023-2088)

The version of webkitgtk4 installed on the remote host is prior to 2.38.5-3. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2023-2088 advisory. 2024-08-28: CVE-2022-22620 was added to this advisory. 2024-08-14: CVE-2022-32893 was added to this advisory. A logic...

USN-6140-1: Go vulnerabilities

It was discovered that Go did not properly manage memory under certain circumstances. An attacker could possibly use this issue to cause a panic resulting in a denial of service. This issue only affected golang-1.19 on Ubuntu 22.10. CVE-2022-41724, CVE-2023-24534, CVE-2023-24537 It was discovered...

Fedora 38 : webkitgtk (2023-9e75e38b47)

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-9e75e38b47 advisory. Fix scrollbar jumping to top when drag released outside window in GTK 4. Fix video rendering when GL is disabled. Fix flickering on looped videos wh...

Fedora 37 : webkitgtk (2023-23cc337543)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-23cc337543 advisory. Fix scrollbar jumping to top when drag released outside window in GTK 4. Fix video rendering when GL is disabled. Fix flickering on looped videos wh...

CVE-2023-29536

An attacker could cause the memory manager to incorrectly free a pointer that addresses attacker-controlled memory, resulting in an assertion, memory corruption, or a potentially exploitable crash. This vulnerability affects Firefox 112, Focus for Android 112, Firefox ESR 102.10, Firefox for...

Linux kernel 资源管理错误漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux Kernel that originates from a mix-up in the program's instructions responsible for freeing memory. An attacker could exploit the...

kernel: use-after-free related to leaf anon_vma double reuse

A memory leak flaw with use-after-free capability was found in the Linux kernel. The VMA mm/rmap.c functionality in the ismergeableanonvma function continuously forks, using memory operations to trigger an incorrect reuse of leaf anonvma. This issue allows a local attacker to crash the system...

USN-6074-3 firefox regressions

USN-6074-1 fixed vulnerabilities and USN-6074-2 fixed minor regressions in Firefox. The update introduced several minor regressions. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Multiple security issues were discovered in Firefox. If a user were...

SUSE CVE-2023-32373

A use-after-free issue was addressed with improved memory management. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, iOS 15.7.6 and iPadOS 15.7.6, Safari 16.5, iOS 16.5 and iPadOS 16.5. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is...