PT-2024-31350

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A null pointer dereference issue has been resolved in the Linux kernel. The issue is related to the bonding functionality, specifically in the bond ipsec offload ok function. It is...

CVE-2024-43256

Missing Authorization vulnerability in nouthemes Leopard - WordPress offload media allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Leopard - WordPress offload media: from n/a through 2.0.36...

CVE-2024-43256

CVE-2024-43256 affects Leopard - WordPress Offload Media. The issue is a Missing Authorization vulnerability that allows Accessing Functionality Not Properly Constrained by ACLs in Leopard versions up to 2.0.36 (no patch details provided in the documents).

CVE-2024-43844

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: wow: fix GTK offload H2C skbuff issue We mistakenly put skb too large and that may exceed skb-end. Therefore, we fix it. skbuff: skboverpanic: text:ffffffffc09e9a9d len:416 put:204 head:ffff8fba04eca780...

WordPress plugin Leopard - WordPress offload media 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security vulnerability...

PT-2024-30418

Name of the Vulnerable Software and Affected Versions Leopard - WordPress offload media versions prior to 2.0.37 Description The issue is related to a missing authorization vulnerability in Leopard - WordPress offload media, which allows accessing functionality not properly constrained by ACLs...

CVE-2024-43256: Missing Authorization

Missing Authorization vulnerability in nouthemes Leopard - WordPress offload media allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Leopard - WordPress offload media: from n/a through 2.0.36...

SUSE CVE-2024-43844

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: wow: fix GTK offload H2C skbuff issue We mistakenly put skb too large and that may exceed skb-end. Therefore, we fix it. skbuff: skboverpanic: text:ffffffffc09e9a9d len:416 put:204 head:ffff8fba04eca780...

UBUNTU-CVE-2024-43844

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: wow: fix GTK offload H2C skbuff issue We mistakenly put skb too large and that may exceed skb-end. Therefore, we fix it. skbuff: skboverpanic: text:ffffffffc09e9a9d len:416 put:204 head:ffff8fba04eca780...

CVE-2024-43844

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: wow: fix GTK offload H2C skbuff issue We mistakenly put skb too large and that may exceed skb-end. Therefore, we fix it. skbuff: skboverpanic: text:ffffffffc09e9a9d len:416 put:204 head:ffff8fba04eca780...

CVE-2024-43844 wifi: rtw89: wow: fix GTK offload H2C skbuff issue

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: wow: fix GTK offload H2C skbuff issue We mistakenly put skb too large and that may exceed skb-end. Therefore, we fix it. skbuff: skboverpanic: text:ffffffffc09e9a9d len:416 put:204 head:ffff8fba04eca780...

CVE-2024-43844 wifi: rtw89: wow: fix GTK offload H2C skbuff issue

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: wow: fix GTK offload H2C skbuff issue We mistakenly put skb too large and that may exceed skb-end. Therefore, we fix it. skbuff: skboverpanic: text:ffffffffc09e9a9d len:416 put:204 head:ffff8fba04eca780...

CVE-2024-43844: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: wow: fix GTK offload H2C skbuff issue We mistakenly put skb too large and that may exceed skb-end. Therefore, we fix it. skbuff: skboverpanic: text:ffffffffc09e9a9d len:416 put:204 head:ffff8fba04eca780...

PT-2024-31371

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the netfilter: flowtable in the Linux kernel, where the extack is not properly initialized before use, leading to a missing initialisation of extack in flow...

kernel: netfilter: nft_flow_offload: reset dst in route object after setting up flow

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftflowoffload: reset dst in route object after setting up flow dst is transferred to the flow object, route object does not own it anymore. Reset dst in route object, otherwise if flowoffloadadd fails, error path...

kernel: netfilter: nft_flow_offload: reset dst in route object after setting up flow

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftflowoffload: reset dst in route object after setting up flow dst is transferred to the flow object, route object does not own it anymore. Reset dst in route object, otherwise if flowoffloadadd fails, error path...

WordPress Leopard - WordPress offload media Plugin <= 2.0.36 is vulnerable to Sensitive Data Exposure

Software Leopard - WordPress offload media Type Plugin Vulnerable versions = 2.0.36 Fixed in 3.1.2 OWASP Top 10 A1: Broken Access Control Classification Sensitive Data Exposure CVE CVE-2024-43257 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID abc75d6c856e Credits Da...

WordPress Leopard - WordPress offload media Plugin <= 2.0.36 is vulnerable to Settings Change

Software Leopard - WordPress offload media Type Plugin Vulnerable versions = 2.0.36 Fixed in 3.1.2 OWASP Top 10 A1: Broken Access Control Classification Settings Change CVE CVE-2024-43256 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 4b11a3c864a0 Credits Dave Jong...

kernel: net/sched: flower: Fix chain template offload

In the Linux kernel, the following vulnerability has been resolved: net/sched: flower: Fix chain template offload The Linux kernel CVE team has assigned CVE-2024-26669 to this issue. Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024040237-CVE-2024-26669-ca3c@gregkh/T...

kernel: net: bridge: switchdev: Skip MDB replays of deferred events on offload

A flaw was found in the Linux kernel. A race condition in network bridge management could lead to a denial of service...