100 matches found
AZL-56031 CVE-2024-45341 affecting package msft-golang for versions less than 1.23.3-2
A certificate with a URI which has a IPv6 address with a zone ID may incorrectly satisfy a URI name constraint that applies to the certificate chain. Certificates containing URIs are not permitted in the web PKI, so this only affects users of private PKIs which make use of URIs...
AZL-56058 CVE-2024-45336 affecting package msft-golang for versions less than 1.23.3-2
The HTTP client drops sensitive headers after following a cross-domain redirect. For example, a request to a.com/ containing an Authorization header which is redirected to b.com/ will not send that header to b.com. In the event that the client received a subsequent same-domain redirect, however,...
ROS-20241028-04
A vulnerability in the tcp component of the Linux operating system kernel is related to excessive output in the function sockprotinuseadd in net/ipv4/inethashtables.c. Exploitation of the vulnerability could allow an attacker to gain access to confidential information A vulnerability in the btrtl...
Security Updates for Microsoft Dynamics 365 Business Central (September 2024)
The Microsoft Dynamics 365 Business Central install is missing security updates. It is, therefore, affected by a privilege escalation vulnerability. An authenticated, remote attacker can exploit this to gain privileged or administrator access to the system. Note that Nessus has not attempted to...
CVE-2024-24789 affecting package msft-golang for versions less than 1.22.4-1
CVE-2024-24789 affecting package msft-golang for versions less than 1.22.4-1. A patched version of the package is available...
AZL-43104 CVE-2023-24531 affecting package msft-golang for versions less than 1.21.0-1
Command go env is documented as outputting a shell script containing the Go environment. However, go env doesn't sanitize values, so executing its output as a shell script can cause various bad bahaviors, including executing arbitrary commands or inserting new environment variables. This issue is...
CVE-2024-24788 affecting package msft-golang for versions less than 1.22.3
CVE-2024-24788 affecting package msft-golang for versions less than 1.22.3. A patched version of the package is available...
CVE-2024-24787 affecting package msft-golang for versions less than 1.22.3
CVE-2024-24787 affecting package msft-golang for versions less than 1.22.3. A patched version of the package is available...
CVE-2023-45285 affecting package msft-golang for versions less than 1.22.3-1.
CVE-2023-45285 affecting package msft-golang for versions less than 1.22.3-1.. A patched version of the package is available...
Security Updates for Microsoft SharePoint Server 2019 (June 2024)
The Microsoft SharePoint Server 2019 installation on the remote host is missing security updates. It is, therefore, affected by a local code execution vulnerability. An attacker can exploit this with a specially crafted file to bypass authentication and execute unauthorized arbitrary commands...
AZL-42386 CVE-2024-24790 affecting package msft-golang for versions less than 1.21.6-1
The various Is methods IsPrivate, IsLoopback, etc did not work as expected for IPv4-mapped IPv6 addresses, returning false for addresses which would return true in their traditional IPv4 forms...
AZL-42415 CVE-2024-24789 affecting package msft-golang for versions less than 1.22.4-1
The archive/zip package's handling of certain types of invalid zip files differs from the behavior of most zip implementations. This misalignment could be exploited to create an zip file with contents that vary depending on the implementation reading the file. The archive/zip package now rejects...
SUSE CVE-2024-36012
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: msft: fix slab-use-after-free in msftdoclose Tying the msft-data lifetime to hdev by freeing it in hcireleasedev to fix the following case: use msftdoclose msft = hdev-msftdata; if !msft ...1 filterlock; ...4 msftdata;...
DEBIAN-CVE-2024-36012
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: msft: fix slab-use-after-free in msftdoclose Tying the msft-data lifetime to hdev by freeing it in hcireleasedev to fix the following case: use msftdoclose msft = hdev-msftdata; if !msft ...1 filterlock; ...4 msftdata;...
CVE-2024-36012 Bluetooth: msft: fix slab-use-after-free in msft_do_close()
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: msft: fix slab-use-after-free in msftdoclose Tying the msft-data lifetime to hdev by freeing it in hcireleasedev to fix the following case: use msftdoclose msft = hdev-msftdata; if !msft ...1 filterlock; ...4 msftdata;...
PT-2024-4090
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a slab-use-after-free vulnerability in the msft do close function. This vulnerability is caused by a race condition where the msft-data is freed in hci release de...
Security Updates for Microsoft SharePoint Server 2016 (April 2024)
The Microsoft SharePoint Server 2016 installation on the remote host is missing a security update. It is, therefore, affected by a session spoofing vulnerability exists. An attacker can exploit this to perform actions with the privileges of another user. %NASLMINLEVEL 70300 C Tenable, Inc...
CVE-2023-24531 affecting package msft-golang for versions less than 1.21.0-1
CVE-2023-24531 affecting package msft-golang for versions less than 1.21.0-1. A patched version of the package is available...