PT-2024-36405 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 16.10.0 through 16.10.5 GitLab CE/EE versions 16.11.0 through 16.11.2 Description: The issue allows an attacker to crash KAS via crafted gRPC requests, potentially leading to a denial of service. Recommendations: For...

The vulnerability of the RPC procedure call component in the PyTorch machine learning framework allows a attacker to execute arbitrary code.

The vulnerability of the RPC procedure call component in the PyTorch machine learning framework is related to the lack of measures taken to neutralize special elements used in the operating system’s command set. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

SUSE CVE-2024-36939

In the Linux kernel, the following vulnerability has been resolved: nfs: Handle error of rpcprocregister in nfsnetinit. syzkaller reported a warning 0 triggered while destroying immature netns. rpcprocregister was called in initnfsfs, but its error has been ignored since at least the initial comm...

[SECURITY] Fedora 40 Update: qt6-qtgrpc-6.7.1-1.fc40

Protocol Buffers Protobuf is a cross-platform data format used to serialize structured data. gRPC provides a remote procedure call framework based on Protobuf. Qt provides tooling and classes to use these technologies...

DEBIAN-CVE-2021-47538

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix rxrpclocal leak in rxrpclookuppeer Need to call rxrpcputlocal for peer candidate before kfree as it holds a ref to rxrpclocal. DH: v2: Changed to abstract the peer freeing code out into a function...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel, which stems from the rxrpclocal leak in the rxrpc module rxrpclookuppeer...

DEBIAN-CVE-2024-35882

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Fix a slow server-side memory leak with RPC-over-TCP Jan Schunk reports that his small NFS servers suffer from memory exhaustion after just a few days. A bisect shows that commit e18e157bb5c8 "SUNRPC: Send RPC message on...

VulnCheck KEV: CVE-2020-9480

In Apache Spark 2.4.5 and earlier, a standalone resource manager's master may be configured to require authentication spark.authenticate via a shared secret. When enabled, however, a specially-crafted RPC to the master can succeed in starting an application's resources on the Spark cluster,...

DEBIAN-CVE-2023-52653

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: fix a memleak in gssimportv2context The ctx-mechused.data allocated by kmemdup is not freed in neither gssimportv2context nor it only caller gsskrb5importseccontext, which frees ctx on error. Thus, this patch reform the...

libvirt: negative g_new0 length can lead to unbounded memory allocation

A flaw was found in the RPC library APIs of libvirt. The RPC server deserialization code allocates memory for arrays before the non-negative length check is performed by the C API entry points. Passing a negative length to the gnew0 function results in a crash due to the negative length being...

The vulnerability affects the runtime of procedure calls in Microsoft Windows operating systems, allowing an attacker to execute arbitrary code.

The vulnerability of remote procedure call runtime in Microsoft Windows operating systems is related to access to resources through incompatible types. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability in the implementation of the RPC (Remote Procedure Call) protocol of Siemens’ process control systems such as SIMATIC PCS 7, OpenPCS 7, and Siemens’ SCADA system SIMATIC WinCC allows a attacker to trigger maintenance failures.

The vulnerability of the RPC Remote Procedure Call protocol implementation in Siemens SIMATIC PCS 7, OpenPCS 7, and SCADA systems like SIMATIC WinCC is related to errors in pointer assignment. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...

OESA-2024-1391 libvirt security update

Libvirt is a C toolkit to interact with the virtualization capabilities of recent versions of Linux and other OSes. The main package includes the libvirtd server exporting the virtualization support. Security Fixes: An off-by-one error flaw was found in the udevListInterfacesByStatus function in...

CVE-2024-20678

Remote Procedure Call Runtime Remote Code Execution Vulnerability...

CVE-2024-20678

Remote Procedure Call Runtime Remote Code Execution Vulnerability...

CVE-2024-20678 Remote Procedure Call Runtime Remote Code Execution Vulnerability

...

CVE-2024-20678 Remote Procedure Call Runtime Remote Code Execution Vulnerability

...

CVE-2024-20678

Public documents in the Connected set do not provide concrete technical details (affected product, root cause, impact, or remediation) for CVE-2024-20678; monitor for updates.

PT-2024-2806 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue is related to a Remote Procedure Call Runtime Remote Code Execution problem, which is associated with accessing a resource through incompatible types. This can allow a...

Microsoft Windows Remote Procedure Call Runtime 安全漏洞

Microsoft Windows Remote Procedure Call Runtime is a powerful technology for creating distributed client/server programs from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Remote Procedure Call Runtime. An attacker could exploit the vulnerability to remotely...