Fedora 41 : proftpd (2025-835949b994)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-835949b994 advisory. This update addresses a null pointer dereferencing issue that could cause the session for a client that sent specially-crafted commands to the server to cras...

Azure Linux 3.0 Security Update: kernel (CVE-2024-47749)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-47749 advisory. - In the Linux kernel, the following vulnerability has been resolved: RDMA/cxgb4: Added NULL check for...

ROS-20250210-01

A vulnerability in the spi component of the Linux kernel is related to incorrect error handling in the rockchipspisuspend and rockchipspiresume functions in drivers/spi/spi-rockchip.c. Exploitation of the of the vulnerability could allow an attacker to cause a denial of service A vulnerability in...

ROS-20250131-01

A vulnerability in the f2fs component of the Linux operating system kernel is related to improper error handling in the f2fsmarkinodedirtysync function in f2fs/inode.c. Exploitation of the vulnerability could allow an attacker to cause a denial of service A vulnerability in the scsi component of...

ROS-20250130-03

Vulnerability of ma35d1serialprobe function in drivers/tty/serial/ma35d1serial.c module of Nuvoton driver MA35D1 of the Linux operating system kernel is related to null pointer dereferencing. Exploitation of the vulnerability could allow an attacker to cause a denial of service A vulnerability in...

Advisory ROSA-SA-2025-2627

software: libtiff 4.1.0 OS: ROSA-CHROME packageevrstring: libtiff-4.1.0-6 CVE-ID: CVE-2023-3576 BDU-ID: 2023-05973 CVE-Crit: MEDIUM CVE-DESC.: A vulnerability in the tiffcrop utility of the LibTIFF library is related to an operation exceeding buffer boundaries in memory. Exploitation of the...

ROS-20250128-06

A vulnerability in the convertfromstr function of the numpy.core component of the NumPy for Python module is related to an incorrect string comparison. Exploitation of the vulnerability could allow an attacker acting remotely to initiate a copy. remotely to initiate data copying using specially...

ROS-20250128-05

Vulnerability of the library for processing XML and HTML Lxml markup is related to pointer dereferencing errors NULL in the iterwalk function. Exploitation of the vulnerability could allow an attacker acting remotely, cause a denial of service...

The vulnerability of the nf_tables component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the nftables component in the Linux operating system’s kernel is related to pointer dereferencing errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the gve_main.c component in the Linux operating system, related to pointer dereferencing errors, allows a malicious actor to cause a service failure.

The vulnerability of the gvemain.c component in the Linux operating system is related to pointer dereferencing errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20250117-03

Vulnerability in modproxy module of Apache HTTP Server is related to incorrect writing of null pointer. pointer. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of denial of service using a specially crafted request Apache HTTP Server WebSocket protocol...

ROS-20250117-06

A vulnerability in the drm/lima components of the Linux operating system kernel is related to the race condition in the function limaschedtimedoutjob in drivers/gpu/drm/lima/lima/limasched.c. Exploitation of the vulnerability could allow an attacker to escalate privileges on the system A...

ROS-20250114-15

Vulnerability of gfxv943initmicrocode function in drivers/gpu/drm/amd/amdgpu/gfxv943.c module of driver Linux operating system kernel amdgpu is related to memory writes outside of the allocated buffer. Exploitation of the vulnerability could allow an attacker to impact confidentiality, integrity...

ROS-20250114-14

A vulnerability in the compress component of the Linux operating system kernel is related to incorrect blocking in the f2fsreleasecompressblocks and f2fsreservecompressblocks functions in f2fs/file.c. Exploitation of the of the vulnerability could allow an attacker to cause a denial of service A...

ROS-20250110-02

A vulnerability in the Exiv2 media metadata management library is related to a flaw in the use of the assert function. Exploitation of the vulnerability allows an attacker acting remotely to cause a denial of service using a specially crafted image file Vulnerability in the Jp2Image::readMetadata...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from the prevention of erroneous pointer dereferencing in the net/mlx5 module...

ROS-20241210-01

A vulnerability in the freerdpimagecopy function of the FreeRDP RDP client is related to reading beyond memory boundaries. Exploitation of the vulnerability could allow an attacker acting remotely to impact the Confidentiality, integrity and availability of protected information FreeRDP RDP clien...

ROS-20241202-02

Vulnerability of drivers/virt/acrn components of the Linux operating system kernel is related to errors of post-release usage errors in the acrnvmmemsegunmap and acrnvmvmrammap functions in the drivers/virt/acrn/mm.c. Exploitation of the vulnerability could allow an attacker to escalate privilege...

ROS-20241129-02

A vulnerability in the openvswitch component of the Linux operating system kernel is related to incorrect input validation in the parseicmpv6 function in net/openvswitch/flow.c. Exploitation of the vulnerability could allow an attacker to cause a denial of service A vulnerability in the cppccpufr...

ROS-20241127-03

A vulnerability in the net/smc components of the Linux operating system kernel is related to information disclosure in the function smcibfindroute in net/smc/smcib.c. Exploitation of the vulnerability could allow an attacker to gain access to confidential information A vulnerability in the e1000e...