[SECURITY] Fedora 39 Update: squid-6.9-1.fc39

Squid is a high-performance proxy caching server for Web clients, supporting FTP and HTTP data objects. Unlike traditional caching software, Squid handles all requests in a single, non-blocking, I/O-driven process. Squid keeps meta data and especially hot objects cached in RAM, caches DNS lookups...

CVE-2024-32482

The Tillitis TKey signer device application is an ed25519 signing tool. A vulnerability has been found that makes it possible to disclose portions of the TKey’s data in RAM over the USB interface. To exploit the vulnerability an attacker needs to use a custom client application and to touch the...

CVE-2024-32482 Tillitis TKey Signer possible RAM disclosure vulnerability

The Tillitis TKey signer device application is an ed25519 signing tool. A vulnerability has been found that makes it possible to disclose portions of the TKey’s data in RAM over the USB interface. To exploit the vulnerability an attacker needs to use a custom client application and to touch the...

CVE-2024-32482 Tillitis TKey Signer possible RAM disclosure vulnerability

The Tillitis TKey signer device application is an ed25519 signing tool. A vulnerability has been found that makes it possible to disclose portions of the TKey’s data in RAM over the USB interface. To exploit the vulnerability an attacker needs to use a custom client application and to touch the...

CVE-2024-32482

The CVE-2024-32482 concerns the Tillitis TKey Signer device application (ed25519 signer). A vulnerability can disclose portions of the TKey’s data in RAM over the USB interface when the device is touched and a custom client is used. No secret is disclosed. Exploitation requires local access via U...

PT-2024-3509 · Huawei · Huawei Matebook D16

Name of the Vulnerable Software and Affected Versions: Huawei Matebook D16 Model: CREM-WXX9, BIOS: v2.26 Description: The issue is related to insufficient validation of exceptional states in the UEFI BIOS firmware of Huawei personal computers. This can be exploited by a malicious OS attacker to...

PT-2024-3507 · Huawei · Huawei Matebook D16

Name of the Vulnerable Software and Affected Versions: Huawei Matebook D16 version v2.26 Description: The issue is related to a buffer overflow in the SMRAM memory of Huawei personal computers' UEFI BIOS microprogram, which can allow an attacker to execute arbitrary code in System Management Mode...

RHEL 8 / 9 : OpenShift Container Platform 4.14.4 (RHSA-2023:7473)

The remote Redhat Enterprise Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:7473 advisory. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or...

The vulnerability of the BIOS microprogramming software in Dell PowerEdge servers and Dell Precision Rack workstations allows a hacker to write arbitrary data into the SMRAM (System Management RAM) area.

The vulnerability of the BIOS software of Dell PowerEdge servers and Dell Precision Rack workstations is related to chips during the checking of the SMM connection buffer. Exploiting this vulnerability allows an attacker to write arbitrary data into the SMRAM System Management RAM area...

CVE-2024-25942

Dell PowerEdge Server BIOS contains an Improper SMM communication buffer verification vulnerability. A physical high privileged attacker could potentially exploit this vulnerability leading to arbitrary writes to SMRAM...

SUSE CVE-2023-52619

In the Linux kernel, the following vulnerability has been resolved: pstore/ram: Fix crash when setting number of cpus to an odd number When the number of cpu cores is adjusted to 7 or other odd numbers, the zone size will become an odd number. The address of the zone will become: addr of zone0 =...

Dell PowerEdge Server BIOS 输入验证错误漏洞

Dell PowerEdge Server BIOS is a system update driver for the Dell Dell of the United States. The Dell PowerEdge Server BIOS is vulnerable to an input validation error vulnerability that stems from the presence of an SMM communication buffer validation error. An attacker could exploit this...

CVE-2023-52619

In the Linux kernel, the following vulnerability has been resolved: pstore/ram: Fix crash when setting number of cpus to an odd number When the number of cpu cores is adjusted to 7 or other odd numbers, the zone size will become an odd number. The address of the zone will become: addr of zone0 =...

DEBIAN-CVE-2023-52619

In the Linux kernel, the following vulnerability has been resolved: pstore/ram: Fix crash when setting number of cpus to an odd number When the number of cpu cores is adjusted to 7 or other odd numbers, the zone size will become an odd number. The address of the zone will become: addr of zone0 =...

CVE-2023-52619 pstore/ram: Fix crash when setting number of cpus to an odd number

In the Linux kernel, the following vulnerability has been resolved: pstore/ram: Fix crash when setting number of cpus to an odd number When the number of cpu cores is adjusted to 7 or other odd numbers, the zone size will become an odd number. The address of the zone will become: addr of zone0 =...

CVE-2023-52619 pstore/ram: Fix crash when setting number of cpus to an odd number

In the Linux kernel, the following vulnerability has been resolved: pstore/ram: Fix crash when setting number of cpus to an odd number When the number of cpu cores is adjusted to 7 or other odd numbers, the zone size will become an odd number. The address of the zone will become: addr of zone0 =...

CVE-2023-52619

The CVE-2023-52619 issue affects the Linux kernel’s pstore/ram subsystem, where setting CPU count to an odd number causes zone_size to be odd, breaking address alignment and risking crashes when accessing zone memory. The documented fix uses ALIGN_DOWN() to ensure even zone sizes, preventing non‑...

CVE-2023-52619

In the Linux kernel, the following vulnerability has been resolved: pstore/ram: Fix crash when setting number of cpus to an odd number When the number of cpu cores is adjusted to 7 or other odd numbers, the zone size will become an odd number. The address of the zone will become: addr of zone0 =...

The vulnerability of the BIOS microprogramming software in Dell PowerEdge servers and Dell Precision Rack workstations allows a hacker to write arbitrary data into the SMRAM (System Management RAM) area.

The vulnerability of the BIOS software of Dell PowerEdge servers and Dell Precision Rack workstations is related to chips during the checking of the SMM connection buffer. Exploiting this vulnerability allows an attacker to write arbitrary data into the SMRAM System Management RAM area...

Dell PowerEdge Server BIOS 和 Dell Precision Rack BIOS 输入验证错误漏洞

Dell PowerEdge Server BIOS and Dell Precision Rack BIOS are both products of Dell, Inc.Dell PowerEdge Server BIOS is a system update driver from Dell.Dell Precision Rack BIOS is a Dell Precision Rack BIOS is a BIOS utility for high-performance workstation products. An input validation error...