7704 matches found
DEBIAN-CVE-2024-57259
sqfssearchdir in Das U-Boot before 2025.01-rc1 exhibits an off-by-one error and resultant heap memory corruption for squashfs directory listing because the path separator is not considered in a size calculation...
UBUNTU-CVE-2024-57259
sqfssearchdir in Das U-Boot before 2025.01-rc1 exhibits an off-by-one error and resultant heap memory corruption for squashfs directory listing because the path separator is not considered in a size calculation...
SUSE CVE-2024-57259
sqfssearchdir in Das U-Boot before 2025.01-rc1 exhibits an off-by-one error and resultant heap memory corruption for squashfs directory listing because the path separator is not considered in a size calculation...
CVE-2024-57259
sqfssearchdir in Das U-Boot before 2025.01-rc1 exhibits an off-by-one error and resultant heap memory corruption for squashfs directory listing because the path separator is not considered in a size calculation...
CVE-2024-57259: Off-by-one Error
sqfssearchdir in Das U-Boot before 2025.01-rc1 exhibits an off-by-one error and resultant heap memory corruption for squashfs directory listing because the path separator is not considered in a size calculation...
CVE-2024-57259
CVE-2024-57259 affects Das U-Boot up to 2025.01-rc1. The issue is an off-by-one error in sqfs_search_dir that causes heap memory corruption during squashfs directory listings because the path separator is not counted in a size calculation. Impact is described as high (confidentiality, integrity, ...
CVE-2024-57259
sqfssearchdir in Das U-Boot before 2025.01-rc1 exhibits an off-by-one error and resultant heap memory corruption for squashfs directory listing because the path separator is not considered in a size calculation...
CVE-2024-57259
sqfssearchdir in Das U-Boot before 2025.01-rc1 exhibits an off-by-one error and resultant heap memory corruption for squashfs directory listing because the path separator is not considered in a size calculation...
CVE-2024-57259
sqfssearchdir in Das U-Boot before 2025.01-rc1 exhibits an off-by-one error and resultant heap memory corruption for squashfs directory listing because the path separator is not considered in a size calculation...
PT-2025-6745
Name of the Vulnerable Software and Affected Versions Das U-Boot versions prior to 2025.01-rc1 Description The issue is related to an off-by-one error in the sqfs search dir function, which leads to heap memory corruption when listing SquashFS directories. This error occurs because the path...
SUSE CVE-2025-0896
Orthanc server prior to version 1.5.8 does not enable basic authentication by default when remote access is enabled. This could result in unauthorized access by an attacker...
gimp:2.8 security update
An update is available for module.pygtk2, module.gimp, pygtk2, gimp, module.pygobject2, module.python2-pycairo, pygobject2, python2-pycairo. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
Astra Linux – vulnerability in Zabbix
The researcher has demonstrated that, due to how the SNMP trap log is parsed, an attacker can craft an SNMP trap containing additional lines of information, causing forged data to appear in the Zabbix UI. This attack requires SNMP authentication to be disabled and/or the attacker to know the...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: ep93xx: clock: Fix off by one in ep93xxdivrecalcrate The psc-div array has psc-numdiv elements. These values are generated when we call clkhwregisterdiv. They are adcdivisors and ARRAYSIZEadcdivisors etc. Therefore, this conditio...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: avoid off-by-one read from userspace We attempt to access count + 1 byte from userspace using memdupuserbuffer, count + 1. However, userspace only supplies a buffer of count bytes, and only those count bytes are...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: can: hi311x: hi3110canist: fix potential use-after-free The commit a22bd630cfff “can: hi311x: do not report txerr and rxerr during bus-off” removed the reporting of rxerr and txerr even in cases where they occur i.e., not due to ...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: scsi: sd: Fix off-by-one error in sdreadblockcharacteristics When the device returns page 0xb1 with length 8 this occurs, for example, in qemu v2.x, sdreadblockcharacteristics may attempt an out-of-bounds memory access when...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix user-after-free from session log off There is a race condition between smb2 session log off and smb2 session setup. This causes user-after-free from session log off. This add sessionlock when setting SMB2SESSIONEXPIRED...
CVE-2024-13850
The Simple add pages or posts plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 2.0.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access, to inject...