CVE-2024-27381

CVE-2024-27381 affects Samsung Mobile Processor Exynos 980/850/1280/1380/1330. The issue is in the function slsi_send_action_frame_ut() where there is no input validation on len from userspace, enabling a heap over-read. Impact is labeled as Confidentiality HIGH and Availability HIGH, with Local ...

CVE-2024-27381

An issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos 1380, and Exynos 1330. In the function slsisendactionframeut, there is no input validation check on len coming from userspace, which can lead to a heap over-read...

CVE-2024-27381

An issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos 1380, and Exynos 1330. In the function slsisendactionframeut, there is no input validation check on len coming from userspace, which can lead to a heap over-read...

CVE-2024-27382

An issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos 1380, and Exynos 1330. In the function slsisendactionframe, there is no input validation check on len coming from userspace, which can lead to a heap over-read...

CVE-2024-27382

CVE-2024-27382 affects Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos 1380, and Exynos 1330. The vulnerability lies in slsi_send_action_frame() where input length from userspace is not validated, leading to a heap over-read. Documented impact includes potential confidentiali...

CVE-2024-27382

An issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos 1380, and Exynos 1330. In the function slsisendactionframe, there is no input validation check on len coming from userspace, which can lead to a heap over-read...

CVE-2024-27378

An issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos 1380, and Exynos 1330. In the function slsisendactionframecert, there is no input validation check on len coming from userspace, which can lead to a heap over-read...

CVE-2024-27378

In the provided documents, CVE-2024-27378 affects Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos 1380, and Exynos 1330. The flaw resides in the function slsi_send_action_frame_cert(), where there is no input validation for the len value from userspace, enabling a heap over-r...

CVE-2024-27378

An issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos 1380, and Exynos 1330. In the function slsisendactionframecert, there is no input validation check on len coming from userspace, which can lead to a heap over-read...

CVE-2024-27380

An issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos 1380, and Exynos 1330. In the function slsisetdelayedwakeuptype, there is no input validation check on a length of ioctlargs-argsi coming from userspace, which can lead to a heap over-read...

CVE-2024-27380

CVE-2024-27380 affects Samsung Mobile Processors: Exynos 980, 850, 1280, 1380, and 1330. The issue is in the driver function slsi_set_delayed_wakeup_type() , where there is no input validation for the length of ioctl_args->args[i] coming from userspace, leading to a potential heap over-read . ...

CVE-2024-27380

An issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos 1380, and Exynos 1330. In the function slsisetdelayedwakeuptype, there is no input validation check on a length of ioctlargs-argsi coming from userspace, which can lead to a heap over-read...

SUSE SLED15: libunbound8 / unbound / unbound-anchor / unbound-devel / etc (SUSE-SU-2024:1923-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:1923-1 advisory. unbound was updated to 1.20.0: A lot of bugfixes and added features. For a complete list take a...

SUSE-SU-2024:1923-1 Security update for unbound

This update for unbound fixes the following issues: unbound was updated to 1.20.0: A lot of bugfixes and added features. For a complete list take a look at the changelog located at: /usr/share/doc/packages/unbound/Changelog or https://www.nlnetlabs.nl/projects/unbound/download/ Some Noteworthy...

CVE-2024-23363 Buffer Over-read in WLAN Firmware

Transient DOS while processing an improperly formatted Fine Time Measurement FTM management frame...

CVE-2024-23363 Buffer Over-read in WLAN Firmware

Transient DOS while processing an improperly formatted Fine Time Measurement FTM management frame...

CVE-2023-43555 Buffer Over-read in Video

Information disclosure in Video while parsing mp2 clip with invalid section length...

CVE-2023-43537 Buffer Over-read in WLAN Host

Information disclosure while handling T2LM Action Frame in WLAN Host...

CVE-2023-43537 Buffer Over-read in WLAN Host

Information disclosure while handling T2LM Action Frame in WLAN Host...

RHEL 6 : fontforge (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - fontforge: Command injetion in help function uiutil.c CVE-2017-17521 - Stack-based buffer overflow in...