The vulnerability of the DXE microprogramming software driver in Dell Edge Gateway BIOS allows a intruder to gain unauthorized access to protected information.

The vulnerability of the DXE microprogramming software driver for Dell Edge Gateway BIOS is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

The vulnerability of the IBM QRadar SIEM system for event collection and analysis, related to the disclosure of protected information, allows attackers to gain unauthorized access to confidential data.

The vulnerability of the IBM QRadar SIEM event collection and analysis system is related to the disclosure of protected information. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of Acronis Agent, a software protection tool from Acronis Cyber Protect 15, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of Acronis Agent, a software solution for data protection, within Acronis Cyber Protect 15, is related to insufficient protection of operational data due to improper privilege assignment. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthoriz...

The vulnerability of the kernel of microprogramming software in embedded Qualcomm chips allows attackers to disclose protected information.

The vulnerability of the kernel of microprogramming software in embedded Qualcomm chips is related to the use of insufficiently random values. Exploiting this vulnerability can allow attackers to disclose protected information...

The vulnerability of NETGEAR XR1000 Wi-Fi routers’ microprogramming software, related to access control deficiencies, allows intruders to compromise the confidentiality and integrity of protected information.

The vulnerability of NETGEAR XR1000 Wi-Fi routers’ microprogramming software is related to deficiencies in access control. Exploiting this vulnerability could allow attackers to compromise the confidentiality and integrity of the protected information...

CVE-2024-42156

In the Linux kernel, the following vulnerability has been resolved: s390/pkey: Wipe copies of clear-key structures on failure Wipe all sensitive data from stack for all IOCTLs, which convert a clear-key into a protected- or secure-key...

AZL-47586 CVE-2024-42155 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: s390/pkey: Wipe copies of protected- and secure-keys Although the clear-key of neither protected- nor secure-keys is accessible, this key material should only be visible to the calling process. So wipe all copies of protected- or...

AZL-47507 CVE-2024-42155 affecting package kernel 6.6.126.1-1

In the Linux kernel, the following vulnerability has been resolved: s390/pkey: Wipe copies of protected- and secure-keys Although the clear-key of neither protected- nor secure-keys is accessible, this key material should only be visible to the calling process. So wipe all copies of protected- or...

AZL-47361 CVE-2024-42156 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: s390/pkey: Wipe copies of clear-key structures on failure Wipe all sensitive data from stack for all IOCTLs, which convert a clear-key into a protected- or secure-key...

DEBIAN-CVE-2024-42155

In the Linux kernel, the following vulnerability has been resolved: s390/pkey: Wipe copies of protected- and secure-keys Although the clear-key of neither protected- nor secure-keys is accessible, this key material should only be visible to the calling process. So wipe all copies of protected- or...

CVE-2024-42155

In the Linux kernel, the following vulnerability has been resolved: s390/pkey: Wipe copies of protected- and secure-keys Although the clear-key of neither protected- nor secure-keys is accessible, this key material should only be visible to the calling process. So wipe all copies of protected- or...

UBUNTU-CVE-2024-42155

In the Linux kernel, the following vulnerability has been resolved: s390/pkey: Wipe copies of protected- and secure-keys Although the clear-key of neither protected- nor secure-keys is accessible, this key material should only be visible to the calling process. So wipe all copies of protected- or...

CVE-2024-42156

The CVE-2024-42156 issue concerns the Linux kernel s390/pkey code, where copies of clear-key structures are wiped on failure. The underlying flaw wipes sensitive data from the stack for all IOCTLs converting a clear-key into a protected- or secure-key, exposing confidentiality risk. Documents con...

CVE-2024-42155

In the Linux kernel, the following vulnerability has been resolved: s390/pkey: Wipe copies of protected- and secure-keys Although the clear-key of neither protected- nor secure-keys is accessible, this key material should only be visible to the calling process. So wipe all copies of protected- or...

CVE-2024-42155 s390/pkey: Wipe copies of protected- and secure-keys

In the Linux kernel, the following vulnerability has been resolved: s390/pkey: Wipe copies of protected- and secure-keys Although the clear-key of neither protected- nor secure-keys is accessible, this key material should only be visible to the calling process. So wipe all copies of protected- or...

CVE-2024-42155

The CVE-2024-42155 issue affects the Linux kernel on s390 architectures, where the k ey material of protected- or secure-keys should not be visible to the caller. The vulnerability notes that all copies of protected- or secure-keys must be wiped from the stack even if an error occurs. CVSS data p...

The vulnerability of the dml_core_mode_programming function in the AMD Display kernel of the Linux operating system allows a hacker to compromise the accessibility of protected information.

The vulnerability of the dmlcoremodeprogramming function in the AMD Display kernel of the Linux operating system is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the accessibility of protected information...

ROS-20240730-01

A vulnerability in the freempimage function of the free media player Mplayer is related to writing outside of memory boundaries memory. Exploitation of the vulnerability could allow an attacker to cause a denial of service Vulnerability in free mpgetbits function of Mplayer media player is relate...

CVE-2024-40811

The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.6. An app may be able to modify protected parts of the file system...

CVE-2024-40800

An input validation issue was addressed with improved input validation. This issue is fixed in macOS Sonoma 14.6, macOS Monterey 12.7.6, macOS Ventura 13.6.8. An app may be able to modify protected parts of the file system...