Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a potential performance issue caused by failure to reschedule during an overflow refresh...

PT-2024-33824

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue concerns an out of bounds access in the performance query extensions of the Linux kernel's drm/v3d component. It involves checking that the number of perfmons userspace is...

PT-2024-33871

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.6.58 Description: The issue arises because, upon closing the file descriptor, the active performance monitor is not stopped. Although all perfmons are destroyed, the active performance monitor's pointer is sti...

CVE-2024-49984: Out-of-bounds Write

In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Prevent out of bounds access in performance query extensions Check that the number of perfmons userspace is passing in the copy and reset extensions is not greater than the internal kernel storage where the ids will be...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the drm/v3d module not stopping active monitors before destroying the performance monitor...

SUSE: Security Advisory (SUSE-SU-2024:3717-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 40 Update: rust-tonic-0.12.3-1.fc40

A gRPC over HTTP/2 implementation focused on high performance, interoperability, and flexibility...

[SECURITY] Fedora 39 Update: rust-tonic-0.12.3-1.fc39

A gRPC over HTTP/2 implementation focused on high performance, interoperability, and flexibility...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling due to the improper handling of certain requests. An attacker can trigger a gradual degradation in performance by sending specially crafted requests to the system. Remediation Upgrade...

Security Update for the OPC UA .NET Standard Stack

This security update resolves a vulnerability in the OPC UA .NET Standard Stack that allows an unauthorized attacker to trigger a gradual degradation in performance...

GHSA-7VFH-CQPC-4267 Security Update for the OPC UA .NET Standard Stack

This security update resolves a vulnerability in the OPC UA .NET Standard Stack that allows an unauthorized attacker to trigger a gradual degradation in performance...

PT-2024-31681

Name of the Vulnerable Software and Affected Versions: OPC Foundation OPCFoundation/UA-.NETStandard versions 1.5.374.78 and earlier Description: A remote attacker can send requests with invalid credentials and cause the server performance to degrade gradually. This issue allows an unauthorized...

installer Privilege Escalation

The vulnerability of the software installer for improving the performance of the Intel Connectivity Performance Suite ICPS is related to incorrect default permissions. Exploiting this vulnerability can allow attackers to enhance their privileges...

HPESBNS04713 rev.1 - OpenView Performance Mgt., Multiple Vulnerabilities

Potential Security Impact: Remote: Code Execution, Denial of Service DoS, Disclosure of Information, URL Redirection, Buffer Overflow SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. OpenView Performance Mgt. T0684 T0684V01^ABG, T0684V01^ABH, T0684V01^ABI, T0684V01^ABJ, T0684V01^AB...

CBL Mariner 2.0 Security Update: reaper (CVE-2024-45296)

The version of reaper installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-45296 advisory. - path-to-regexp turns path strings into a regular expressions. In certain cases, path-to-regexp will output a...

CVE-2024-47188

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to version 7.0.7, missing initialization of the random seed for "thash" leads to byte-range tracking having predictable hash table behavior. This can lead to an attacker...

CVE-2024-47187

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to version 7.0.7, missing initialization of the random seed for "thash" leads to datasets having predictable hash table behavior. This can lead to dataset file loading to us...

DEBIAN-CVE-2024-47188

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to version 7.0.7, missing initialization of the random seed for "thash" leads to byte-range tracking having predictable hash table behavior. This can lead to an attacker...

CVE-2024-47188 Suricata http/byte-ranges: missing hashtable random seed leads to potential DoS

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to version 7.0.7, missing initialization of the random seed for "thash" leads to byte-range tracking having predictable hash table behavior. This can lead to an attacker...

CVE-2024-47188

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to version 7.0.7, missing initialization of the random seed for "thash" leads to byte-range tracking having predictable hash table behavior. This can lead to an attacker...