DEBIAN-CVE-2024-56709

In the Linux kernel, the following vulnerability has been resolved: iouring: check if iowq is killed before queuing task work can be executed after the task has gone through iouring termination, whether it's the final taskwork run or the fallback path. In this case, task work will find -iowq bein...

CVE-2024-56709

CVE-2024-56709 : Linux kernel io_uring vulnerability fixed by verifying iowq is not killed before queuing. If a task completes its termination path after io_uring teardown, task_work may see a null ->io_wq and attempt to forward to io_queue_iowq(), causing failure. The fix also accounts for PF...

UBUNTU-CVE-2024-53164

In the Linux kernel, the following vulnerability has been resolved: net: sched: fix ordering of qlen adjustment Changes to sch-q.qlen around qdisctreereducebacklog need to happen before a call to said function because otherwise it may fail to notify parent qdiscs when the child is about to become...

Ruijie Reyee OS Command Execution

The vulnerability of the Ruijie Reyee OS operating system is related to the use of a initially dangerous function. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands by sending a specially created malicious MQTT message...

Ruijie Reyee OS Credential Exposure

The vulnerability of the MQTT broker operating system in Ruijie Reyee OS is related to the use of weak credentials. Exploiting this vulnerability can allow a malicious actor to obtain access to the credentials...

Microsoft Message Queuing Queue Service Code Execution

The vulnerability of the Microsoft Message Queuing MSMQ service on Microsoft Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code remotely...

Microsoft Message Queuing Service DoS

The vulnerability of the Microsoft Message Queuing MSMQ service on Microsoft Windows operating systems is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

Windows Message Queuing Code Execution

The vulnerability of Windows’ Message Queuing system is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2024-52061

Buffer Copy without Checking Size of Input 'Classic Buffer Overflow' vulnerability in RTI Connext Professional Core Libraries, Queuing Service, Recording Service, Routing Service allows Overflow Variables and Tags.This issue affects Connext Professional: from 7.4.0 before 7.5.0, from 7.0.0 before...

CVE-2024-52060

Buffer Copy without Checking Size of Input 'Classic Buffer Overflow' vulnerability in RTI Connext Professional Routing Service, Recording Service, Queuing Service, Observability Collector Service, Cloud Discovery Service allows Buffer Overflow via Environment Variables.This issue affects Connext...

CVE-2024-52061 Potential stack buffer overflow when parsing an XML type

Buffer Copy without Checking Size of Input 'Classic Buffer Overflow' vulnerability in RTI Connext Professional Core Libraries, Queuing Service, Recording Service, Routing Service allows Overflow Variables and Tags.This issue affects Connext Professional: from 7.4.0 before 7.5.0, from 7.0.0 before...

CVE-2024-52061 Potential stack buffer overflow when parsing an XML type

Buffer Copy without Checking Size of Input 'Classic Buffer Overflow' vulnerability in RTI Connext Professional Core Libraries, Queuing Service, Recording Service, Routing Service allows Overflow Variables and Tags.This issue affects Connext Professional: from 7.4.0 before 7.5.0, from 7.0.0 before...

CVE-2024-52057

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in RTI Connext Professional Queuing Service allows SQL Injection.This issue affects Connext Professional: from 7.0.0 before 7.3.0, from 6.1.0 before 6.1.2.17, from 6.0.0 before 6.0., from 5.2.0 before...

CVE-2024-52057

RTI Connext Professional (Queuing Service) is affected by CVE-2024-52057 due to improper neutralization of special elements used in SQL commands, enabling SQL injection. Affected versions are: 5.2.0–5.3.* (update to after 5.3.); 6.0.0–6.0. (update to after 6.0.*); 6.1.0–6.1.2.17 (update to after ...

CVE-2024-52057 Potential arbitrary SQL query execution in Queuing Service while parsing malicious remote commands or configuration files

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in RTI Connext Professional Queuing Service allows SQL Injection.This issue affects Connext Professional: from 7.0.0 before 7.3.0, from 6.1.0 before 6.1.2.17, from 6.0.0 before 6.0., from 5.2.0 before...

CVE-2024-52057 Potential arbitrary SQL query execution in Queuing Service while parsing malicious remote commands or configuration files

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in RTI Connext Professional Queuing Service allows SQL Injection.This issue affects Connext Professional: from 7.0.0 before 7.3.0, from 6.1.0 before 6.1.2.17, from 6.0.0 before 6.0., from 5.2.0 before...

PT-2024-35107

Name of the Vulnerable Software and Affected Versions RTI Connext Professional versions 5.2.0 through 5.3. RTI Connext Professional versions 6.0.0 through 6.0. RTI Connext Professional versions 6.1.0 through 6.1.2.17 RTI Connext Professional versions 7.0.0 through 7.3.0 Description The issue is...

PT-2024-35112

Name of the Vulnerable Software and Affected Versions RTI Connext Professional versions 5.0.0 through 5.3.1.45 RTI Connext Professional versions 6.0.0 through 6.0.1.40 RTI Connext Professional versions 6.1.0 through 6.1.2.21 RTI Connext Professional versions 7.0.0 through 7.3.0.5 RTI Connext...

CVE-2024-52061: Buffer Copy without Checking Size of Input

Buffer Copy without Checking Size of Input 'Classic Buffer Overflow' vulnerability in RTI Connext Professional Core Libraries, Queuing Service, Recording Service, Routing Service allows Overflow Variables and Tags.This issue affects Connext Professional: from 7.4.0 before 7.5.0, from 7.0.0 before...

PT-2024-35111

Name of the Vulnerable Software and Affected Versions RTI Connext Professional versions 5.3.0 through 5.3.1.45 RTI Connext Professional versions 6.0.0 through 6.0. RTI Connext Professional versions 6.1.0 through 6.1.2.21 RTI Connext Professional versions 7.0.0 through 7.3.0.5 Description The issu...