Azure Linux 3.0 Security Update: bind / dhcp (CVE-2024-1737)

The version of bind / dhcp installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-1737 advisory. - Resolver caches and authoritative zone databases that hold significant numbers of RRs for the same...

Azure Linux 3.0 Security Update: edk2 / hvloader / openssl / rust (CVE-2023-2650)

The version of edk2 / hvloader / openssl / rust installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-2650 advisory. - Issue summary: Processing some specially crafted ASN.1 object identifiers or data...

MySQL Server Performance Schema DoS

The vulnerability of the Server component of the Oracle MySQL Server’s database management system is related to the exhaustion of memory resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through network packets...

EulerOS 2.0 SP11 : dhcp (EulerOS-SA-2025-1152)

According to the versions of the dhcp package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Resolver caches and authoritative zone databases that hold significant numbers of RRs for the same hostname of any RTYPE can suffer from degraded...

EulerOS 2.0 SP11 : dhcp (EulerOS-SA-2025-1133)

According to the versions of the dhcp package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Resolver caches and authoritative zone databases that hold significant numbers of RRs for the same hostname of any RTYPE can suffer from degraded...

CVE-2024-57959

Use-After-Free UAF vulnerability in the display module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally...

CVE-2024-57958

Out-of-bounds array read vulnerability in the FFRT module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally...

CVE-2024-57961

Out-of-bounds write vulnerability in the emcom module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally...

[SECURITY] Fedora 40 Update: firefox-135.0-1.fc40

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

[SECURITY] Fedora 41 Update: rust-pore-0.1.17-5.fc41

A performance oriented reimplementation of repo...

[SECURITY] Fedora 41 Update: firefox-135.0-1.fc41

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

[SECURITY] Fedora 40 Update: java-latest-openjdk-23.0.2.0.7-1.rolling.fc40

The OpenJDK 23 runtime environment...

vLLM uses Python 3.12 built-in hash() which leads to predictable hash collisions in prefix cache

Summary Maliciously constructed prompts can lead to hash collisions, resulting in prefix cache reuse, which can interfere with subsequent responses and cause unintended behavior. Details vLLM's prefix caching makes use of Python's built-in hash function. As of Python 3.12, the behavior of hashNon...

Cryptominers’ Anatomy: Cryptomining Internals

...

CVE-2024-57958

Out-of-bounds array read vulnerability in the FFRT module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally...

CVE-2024-57959

Use-After-Free UAF vulnerability in the display module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally...

CVE-2024-57961

Out-of-bounds write vulnerability in the emcom module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally...

CVE-2024-57961

Out-of-bounds write vulnerability in the emcom module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally...

CVE-2024-57959

Use-After-Free UAF vulnerability in the display module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally...

CVE-2024-57959

CVE-2024-57959 is a memory misreference (use-after-free-like) vulnerability in Huawei HarmonyOS/EMUI display module. Connected sources describe a memory misreference in the HarmonyOS/EMUI display component that can be exploited to cause a functional exception. The NVD entry characterizes impact a...