CVE-2024-38233

CVE-2024-38233 is a Windows Networking Denial of Service vulnerability. The provided sources confirm it as a network-accessible issue with CVSS v3.1 base score 7.5 (HIGH) and no user interaction required. Several advisories/NVD entries link this CVE to Microsoft security updates KB5043051 (Septem...

CVE-2024-38233 Windows Networking Denial of Service Vulnerability

...

CVE-2024-38233 Windows Networking Denial of Service Vulnerability

...

CVE-2024-38232

CVE-2024-38232 — Windows Networking Denial of Service Vulnerability Affected: Windows networking components. The record consolidates multiple Windows CVEs, with CVE-2024-38232 specifically characterized as a Denial-of-Service in Windows Networking. The vulnerability has a CVSS v3.1 base score of ...

CVE-2024-38232 Windows Networking Denial of Service Vulnerability

...

CVE-2024-38232 Windows Networking Denial of Service Vulnerability

...

SUSE-SU-2024:3186-1 Security update for buildah

This update for buildah fixes the following issues: Update to version 1.35.4: CVE-2024-3727 updates bsc1224117 Bump go-jose CVE-2024-28180 Bump ocicrypt and go-jose CVE-2024-28180 Update to version 1.35.3: correctly configure /etc/hosts and resolv.conf buildah: refactor resolv/hosts setup. rename...

Windows Networking Denial of Service Vulnerability

...

Windows Networking Denial of Service Vulnerability

...

Windows Networking Information Disclosure Vulnerability

...

Windows Networking Denial of Service Vulnerability

...

SUSE: Security Advisory (SUSE-SU-2024:3186-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2024-6241 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a denial-of-service vulnerability in the Windows Networking service, which is caused by a null pointer dereference. This vulnerability can be exploited by a remote...

PT-2024-6243 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows versions prior to the fixed version Description: The issue is related to an uninitialized pointer in the Windows Networking service, which can be exploited by a remote attacker to disclose protected information. This can potentially...

Microsoft Windows TCP/IP 安全漏洞

Microsoft Windows TCP/IP is a component of Microsoft Corporation USA that provides TCP/IP configuration capabilities for Windows. A security vulnerability exists in Microsoft Windows TCP/IP. An attacker exploiting this vulnerability could remotely execute code. The following products and versions...

PT-2024-6240 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a denial-of-service vulnerability in the Windows Networking service, which is caused by a null pointer dereference. This could allow a remote attacker to cause a...

Amazon Linux 2 : docker (ALASECS-2024-042)

The version of docker installed on the remote host is prior to 25.0.6-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2ECS-2024-042 advisory. 2025-01-04: CVE-2024-36620 was added to this advisory. 2025-01-04: CVE-2024-36623 was added to this advisory. When...

SUSE SLES15: buildah / docker / docker-bash-completion / docker-fish-completion / etc (SUSE-SU-2024:3120-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3120-1 advisory. Changes in docker: - CVE-2024-23651: Fixed arbitrary files write due to race condition on mounts bsc1219267 -...

kernel: net: fix out-of-bounds access in ops_init

An out-of-bounds memory access flaw was found in the Linux kernel’s networking subsystem in how a local user triggers a complex race condition. This flaw allows a local user to crash or potentially escalate their privileges on the system...

golang: net: malformed DNS message can cause infinite loop

A flaw was found in the net package of the Go stdlib. When a malformed DNS message is received as a response to a query, the Lookup functions within the net package can get stuck in an infinite loop. This issue can lead to resource exhaustion and denial of service DoS conditions...