3990 matches found
CVE-2024-26851
CVE-2024-26851: Linux kernel nf_conntrack_h323 decoding bug fixed. UBSAN reported negative/out-of-bounds shifts when decoding Ras messages due to abnormal skb->data; patch adds protection to keep extension bitmap length
PT-2024-24733
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned. Description The issue concerns an unsigned value that can never be negative, affecting the evaluation of the eMMC full disk test. Recommendations At the moment, there is no information about a...
PT-2024-32154
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue arises when the timing generator count equals 0, causing the tg inst index to be negative. This has been fixed to prevent two OVERRUN issues reported by Coverity. The fix ensur...
SUSE CVE-2024-26815
In the Linux kernel, the following vulnerability has been resolved: net/sched: taprio: proper TCATAPRIOTCENTRYINDEX check taprioparsetcentry is not correctly checking TCATAPRIOTCENTRYINDEX attribute: int tc; // Signed value tc = nlagetu32tbTCATAPRIOTCENTRYINDEX; if tc = TCQOPTMAXQUEUE...
CVE-2024-32001
SpiceDB is a graph database purpose-built for storing and evaluating access control data. Use of a relation of the form: relation folder: folder | folderparent with an arrow such as folder-view can cause LookupSubjects to only return the subjects found under subjects for either folder or...
GHSA-J85Q-46HG-36P2 SpiceDB: LookupSubjects may return partial results if a specific kind of relation is used
Background Use of a relation of the form: relation folder: folder | folderparent with an arrow such as folder-view can cause LookupSubjects to only return the subjects found under subjects for either folder or folderparent. This bug only manifests if the same subject type is used multiple types i...
CVE-2024-32001
Summary: CVE-2024-32001 affects SpiceDB. A bug in relations of the form folder: folder | folder#parent, when the same subject type is used multiple times and an arrow is used over the relation, can cause LookupSubjects to return only a subset of subjects. This affects any user making a negative a...
DEBIAN-CVE-2024-26815
In the Linux kernel, the following vulnerability has been resolved: net/sched: taprio: proper TCATAPRIOTCENTRYINDEX check taprioparsetcentry is not correctly checking TCATAPRIOTCENTRYINDEX attribute: int tc; // Signed value tc = nlagetu32tbTCATAPRIOTCENTRYINDEX; if tc = TCQOPTMAXQUEUE...
CVE-2024-26815
In the Linux kernel, the following vulnerability has been resolved: net/sched: taprio: proper TCATAPRIOTCENTRYINDEX check taprioparsetcentry is not correctly checking TCATAPRIOTCENTRYINDEX attribute: int tc; // Signed value tc = nlagetu32tbTCATAPRIOTCENTRYINDEX; if tc = TCQOPTMAXQUEUE...
CVE-2024-26815 net/sched: taprio: proper TCA_TAPRIO_TC_ENTRY_INDEX check
In the Linux kernel, the following vulnerability has been resolved: net/sched: taprio: proper TCATAPRIOTCENTRYINDEX check taprioparsetcentry is not correctly checking TCATAPRIOTCENTRYINDEX attribute: int tc; // Signed value tc = nlagetu32tbTCATAPRIOTCENTRYINDEX; if tc = TCQOPTMAXQUEUE...
How your business should deal with negative feedback on social media
By Owais Sultan If used correctly, social media can not only provide businesses with a fantastic generally free chance to market… This is a post from HackRead.com Read the original post: How your business should deal with negative feedback on social media...
CLSA-2024-1712176685 gawk: Fix of CVE-2023-4156
Fix CVE-2023-4156: builtin.c formattree: When collecting positional field widths or precisions, check for wrap around to negative values...
Denial Of Service (DoS)
Libvirt is vulnerable to Denial of ServiceDoS. The vulnerability is due to improper handling of negative array lengths during memory allocation. If an attacker can pass a negative length to the gnew0 function will usually result in a Denial of ServiceDoS...
The vulnerability of the Vim text editor, related to integer overflow or bypassing, allows attackers to cause a service failure.
The vulnerability of the Vim text editor is related to the use of negative line numbers. Exploiting this vulnerability can allow a remote attacker to cause a service failure...
The vulnerability of the g_new0() function in the virtualization management library Libvirt, which allows a hacker to trigger a service failure
The vulnerability of the gnew0 function in the Libvirt virtualization management library is related to an improper check of the negative length of an array before memory allocation. Exploiting this vulnerability could allow a attacker to cause a service failure...
PT-2024-26770
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a NULL pointer dereference in the vsnprintf function within the Linux kernel. Specifically, in the of modalias function, the str and len parameters can cause a...
CVE-2024-2971
Out-of-bounds array write in Xpdf 4.05 and earlier, triggered by negative object number in indirect reference in the input PDF file...
UBUNTU-CVE-2024-2971
Out-of-bounds array write in Xpdf 4.05 and earlier, triggered by negative object number in indirect reference in the input PDF file...
CVE-2024-2971
Out-of-bounds array write in Xpdf 4.05 and earlier, triggered by negative object number in indirect reference in the input PDF file...
CVE-2024-2971
Xpdf vulnerability CVE-2024-2971 affects Xpdf 4.05 and earlier, caused by an out-of-bounds write in an array triggered by a negative object number in an indirect reference in the input PDF. Fedora advisories and security notes indicate update to 4.06 as the fix. If exploiting, the issue could imp...