DEBIAN-CVE-2021-46992

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: avoid overflows in nfthashbuckets Number of buckets being stored in 32bit variables, we have to ensure that no overflows occur in nfthashbuckets syzbot injected a size == 0x40000000 and reported: UBSAN:...

SUSE-SU-2024:0589-1 Security update for qemu

This update for qemu fixes the following issues: - CVE-2021-3638: hw/display/ati2d: Fix buffer overflow in ati2dblt bsc1188609 - CVE-2023-3180: virtio-crypto: verify src and dst buffer length for sym request bsc1213925 - CVE-2023-3354: io: remove io watch if TLS channel is closed during handshake...

SUSE-SU-2024:0468-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-1086: Fixed a use-after-free vulnerability inside the nftables component that could have been exploited to achieve local privilege escalation bsc1219434....

SUSE-SU-2024:0298-1 Security update for squid

This update for squid fixes the following issues: - CVE-2023-50269: fixed X-Forwarded-For Stack Overflow. bsc1217654 - CVE-2024-23638: fixed Denial of Service attack against Cache Manager error responses. bsc1219131...

kernel: sctp: fix a potential overflow in sctp_ifwdtsn_skip

In the Linux kernel, the following vulnerability has been resolved: sctp: fix a potential overflow in sctpifwdtsnskip Currently, when traversing ifwdtsn skips with sctpwalkifwdtsn, it only checks the pos against the end of the chunk. However, the data left for the last pos may be sizeofstruct...

SUSE-SU-2024:0165-1 Security update for xwayland

This update for xwayland fixes the following issues: - CVE-2023-6816: Fixed heap buffer overflow in DeviceFocusEvent and ProcXIQueryPointer bsc1218582 - CVE-2024-0229: Fixed reattaching to different master device may lead to out-of-bounds memory access bsc1218583 - CVE-2024-0408: Fixed SELinux...

CVE-2024-22419 concat built-in can corrupt memory in vyper

Vyper is a Pythonic Smart Contract Language for the Ethereum Virtual Machine. The concat built-in can write over the bounds of the memory buffer that was allocated for it and thus overwrite existing valid data. The root cause is that the buildIR for concat doesn't properly adhere to the API of co...

OPENSUSE-SU-2024:0008-1 Security update for proftpd

This update for proftpd fixes the following issues: proftpd was updated to 1.3.8b - released 19-Dec-2023 - CVE-2023-48795: Fixed prefix truncation breaking ssh channel integrity boo1218144 - CVE-2023-51713: Fixed Out-of-bounds buffer read when handling FTP commands. boo1218344...

SUSE-SU-2023:4950-1 Security update for libqt5-qtbase

This update for libqt5-qtbase fixes the following issues: - CVE-2023-37369: Fixed buffer overflow in QXmlStreamReader bsc1214327. - libq5-qtbase was rebuild against icu 73. jscPED-6193...

ALPINE-CVE-2023-50246

jq is a command-line JSON processor. Version 1.7 is vulnerable to heap-based buffer overflow. Version 1.7.1 contains a patch for this issue...

SUSE-SU-2023:4543-1 Security update for xerces-c

This update for xerces-c fixes the following issues: - CVE-2023-37536: Fixed an integer overflow that could have led to a out-of-bounds memory accesses bsc1216156...

kernel: Linux kernel: ALSA HDA denial of service via array overflow

A flaw was found in the Linux kernel's Advanced Linux Sound Architecture ALSA High Definition Audio HDA component. A local user could exploit this vulnerability by providing specially crafted 9.1 surround channel names, leading to an array overflow in the getlineoutpfx function. This can cause a...

kernel: sctp: fix a potential overflow in sctp_ifwdtsn_skip

In the Linux kernel, the following vulnerability has been resolved: sctp: fix a potential overflow in sctpifwdtsnskip Currently, when traversing ifwdtsn skips with sctpwalkifwdtsn, it only checks the pos against the end of the chunk. However, the data left for the last pos may be sizeofstruct...

kernel: RDMA/core: Fix ib block iterator counter overflow

In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Fix ib block iterator counter overflow When registering a new DMA MR after selecting the best aligned page size for it, we iterate over the given sglist to split each entry to smaller, aligned to the selected page size...

SUSE-SU-2023:4225-1 Security update for zchunk

This update for zchunk fixes the following issues: - CVE-2023-46228: Fixed a handle overflow errors in malformed zchunk files. bsc1216268...

SUSE-SU-2023:4056-1 Security update for qemu

This update for qemu fixes the following issues: - CVE-2023-3180: Fixed a buffer overflow in the virtio-crypto device bsc1213925. - CVE-2021-3750: Fixed a DMA reentrancy in the USB EHCI device that could lead to use-after-free bsc1190011. - CVE-2021-3638: Fixed a buffer overflow in the ati-vga...

SUSE-SU-2023:3963-1 Security update for libX11

This update for libX11 fixes the following issues: - CVE-2023-43786: Fixed stack exhaustion from infinite recursion in PutSubImage bsc1215684. - CVE-2023-43787: Fixed integer overflow in XCreateImage leading to a heap overflow bsc1215685. - CVE-2023-43785: Fixed out-of-bounds memory access in...

SUSE-SU-2023:3800-1 Security update for qemu

This update for qemu fixes the following issues: - CVE-2022-26354: Fixed a memory leak due to a missing virtqueue detach on error. bsc1198712 - CVE-2021-3929: Fixed an use-after-free in nvme DMA reentrancy issue. bsc1193880 - CVE-2023-0330: Fixed a stack overflow due to a DMA reentrancy issue...

SUSE-SU-2023:3792-1 Security update for ImageMagick

This update for ImageMagick fixes the following issues: - CVE-2020-21679: Fixed a buffer overflow in WritePCXImage function in pcx.c which may allow a remote attackers to cause a denial of service. bsc1214578...

SUSE-SU-2023:3739-1 Security update for ImageMagick

This update for ImageMagick fixes the following issues: - CVE-2020-21679: Fixed a buffer overflow in WritePCXImage function in pcx.c which may allow a remote attackers to cause a denial of service. bsc1214578...