AZL-48300 CVE-2024-43806 affecting package cloud-hypervisor for versions less than 32.0-7

Rustix is a set of safe Rust bindings to POSIX-ish APIs. When using rustix::fs::Dir using the linuxraw backend, it's possible for the iterator to "get stuck" when an IO error is encountered. Combined with a memory over-allocation issue in rustix::fs::Dir::readmore, this can cause quick and...

AZL-48312 CVE-2024-43806 affecting package virtiofsd for versions less than 1.8.0-3

Rustix is a set of safe Rust bindings to POSIX-ish APIs. When using rustix::fs::Dir using the linuxraw backend, it's possible for the iterator to "get stuck" when an IO error is encountered. Combined with a memory over-allocation issue in rustix::fs::Dir::readmore, this can cause quick and...

AZL-48333 CVE-2024-43806 affecting package kata-containers for versions less than 3.2.0.azl4-1

Rustix is a set of safe Rust bindings to POSIX-ish APIs. When using rustix::fs::Dir using the linuxraw backend, it's possible for the iterator to "get stuck" when an IO error is encountered. Combined with a memory over-allocation issue in rustix::fs::Dir::readmore, this can cause quick and...

CVE-2024-45168

An issue was discovered in UCI IDOL 2 aka uciIDOL or IDOL2 through 2.12. Data is transferred over a raw socket without any authentication mechanism. Thus, communication endpoints are not verifiable...

CVE-2024-45168: Missing Authorization

An issue was discovered in UCI IDOL 2 aka uciIDOL or IDOL2 through 2.12. Data is transferred over a raw socket without any authentication mechanism. Thus, communication endpoints are not verifiable...

UCI IDOL 2 security vulnerabilities

UCI IDOL 2 IDOL2,uciIDOL is a management system from UCI Inc. to optimize the company's business processes as well as increase productivity. A security vulnerability exists in UCI IDOL 2 version 2.12 and prior versions that stems from data being transferred over raw sockets without any...

PT-2024-31451

Name of the Vulnerable Software and Affected Versions UCI IDOL 2 versions through 2.12 Description An issue was discovered in UCI IDOL 2, where data is transferred over a raw socket without any authentication mechanism. Thus, communication endpoints are not verifiable. Recommendations For version...

CVE-2023-52889 apparmor: Fix null pointer deref when receiving skb during sock creation

In the Linux kernel, the following vulnerability has been resolved: apparmor: Fix null pointer deref when receiving skb during sock creation The panic below is observed when receiving ICMP packets with secmark set while an ICMP raw socket is being created. SKCTXsk-label is updated in...

CVE-2023-52889

In the Linux kernel, the following vulnerability has been resolved: apparmor: Fix null pointer deref when receiving skb during sock creation The panic below is observed when receiving ICMP packets with secmark set while an ICMP raw socket is being created. SKCTXsk-label is updated in...

SUSE-SU-2024:2928-1 Security update for kubernetes1.25

This update for kubernetes1.25 fixes the following issues: - CVE-2021-25743: Fixed sanitization of raw data of escape, meta or control sequences before output it to terminal bsc1194400 Other fixes: - Included kubernetes1.25-client package. jscPED-5755...

PT-2024-38052 · WordPress · Elementskit Pro

Name of the Vulnerable Software and Affected Versions: ElementsKit Pro plugin for WordPress versions up to, and including, 3.6.6 Description: The issue allows authenticated attackers with Contributor-level permissions and above to extract sensitive data, including private, future, and draft posts...

PT-2024-6862

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.52 Description The issue is related to a device address out-of-bounds read in the interrupt map walk. When of irq parse raw is invoked with a device address smaller than the interrupt parent node, KASAN detec...

CBL Mariner 2.0 Security Update: kernel (CVE-2023-52340)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-52340 advisory. - The IPv6 implementation in the Linux kernel before 6.3 has a net/ipv6/route.c maxsize threshold that can be...

The IPv6 implementation in the Linux kernel before 6.3 has a net/ipv6/route.c max_size threshold that can be consumed easily e.g. leading to a denial of service (network is unreachable errors) when IPv6 packets are sent in a loop via a raw socket.

...

SUSE-SU-2024:2859-1 Security update for kubernetes1.24

This update for kubernetes1.24 fixes the following issues: - CVE-2021-25743: Fixed sanitization of raw data of escape, meta or control sequences before output it to terminal bsc1194400...

SUSE-SU-2024:2858-1 Security update for kubernetes1.23

This update for kubernetes1.23 fixes the following issues: - CVE-2021-25743: Fixed sanitization of raw data of escape, meta or control sequences before output it to terminal bsc1194400...

UBUNTU-CVE-2024-4207

A cross-site scripting issue has been discovered in GitLab affecting all versions starting from 5.1 prior 17.0.6, starting from 17.1 prior to 17.1.4, and starting from 17.2 prior to 17.2.2. When viewing an XML file in a repository in raw mode, it can be made to render as HTML if viewed under...

CVE-2024-4207

A cross-site scripting issue has been discovered in GitLab affecting all versions starting from 5.1 prior 17.0.6, starting from 17.1 prior to 17.1.4, and starting from 17.2 prior to 17.2.2. When viewing an XML file in a repository in raw mode, it can be made to render as HTML if viewed under...

openstack-nova: Regression VMDK/qcow arbitrary file access

An arbitrary file access flaw was found in Nova. By supplying a RAW format image, a specially crafted QCOW2 image with a backing file path, or a VMDK flat image with a descriptor file path, an authenticated user may convince systems to return a copy of the referenced file’s contents from the...

kernel: ipv4: Fix uninit-value access in __ip_make_skb()

A flaw was found in the Linux kernel's IPv4 networking subsystem. A local user can cause a Denial of Service DoS by exploiting a race condition when altering socket options while network packets are being constructed. This issue leads to an uninitialized memory read that can crash the system...