UBUNTU-CVE-2024-27005

In the Linux kernel, the following vulnerability has been resolved: interconnect: Don't access reqlist while it's being manipulated The icclock mutex was split into separate icclock and iccbwlock mutexes in 1 to avoid lockdep splats. However, this didn't adequately protect access to...

CVE-2024-31750

SQL injection vulnerability in f-logic datacube3 v.1.0 allows a remote attacker to obtain sensitive information via the reqid parameter...

CLSA-2024-1711026811 kernel: Fix of 7 CVEs

netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one CVE-2023-39197 - mtd: Fix gluebi NULL pointer dereference caused by ftl notifier CVE-2023-52449 - media: pvrusb2: fix use after free on context disconnection CVE-2023-52445 - net: prevent mss overflow in skbsegment...

CLSA-2024-1711026398 kernel: Fix of 7 CVEs

netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one CVE-2023-39197 - mtd: Fix gluebi NULL pointer dereference caused by ftl notifier CVE-2023-52449 - media: pvrusb2: fix use after free on context disconnection CVE-2023-52445 - net: prevent mss overflow in skbsegment...

CVE-2023-52612

A vulnerability was found in scomp component Linux Kernel causing a buffer overflow in the req-dst buffer. This occurred because the buffer size was not checked before copying data from scompscratch-dst, leading to potential overflow and DoS. Mitigation Mitigation for this issue is either not...

SUSE-SU-2023:3866-1 Security update for salt

This update for salt fixes the following issues: Security issues fixed: - CVE-2023-20897: Fixed DOS in minion return. bsc1214796, bsc1213441 - CVE-2023-20898: Fixed Git Providers can read from the wrong environment because they get the same cache directory base name. bsc1214797, bsc1193948 Bugs...

SUSE-SU-2023:3862-1 Security update for salt

This update for salt fixes the following issues: Security issues fixed: - CVE-2023-20897: Fixed DOS in minion return. bsc1214796, bsc1213441 - CVE-2023-20898: Fixed Git Providers can read from the wrong environment because they get the same cache directory base name. bsc1214797, bsc1193948 Bugs...

CVE-2023-30686

Out-of-bounds Write in ReqDataRaw of libsec-ril prior to SMR Aug-2023 Release 1 allows local attacker to execute arbitrary code...

SAMSUNG Mobile devices buffer error vulnerability

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices SMR Aug-2023 Release 1 version, which stems from an out-of-bounds write issue in libsec-ril ReqDataR...

Malicious code in numpy-req (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b444962332036ed34a6122ae3f4595e0b05e8a2d1391aa9f7a1b06b9ab639114 The OpenSSF Package Analysis project identified 'numpy-req' @ 12.17.3 pypi as malicious. It is considered malicious because: - The package...

MAL-2023-1381 Malicious code in numpy-req (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b444962332036ed34a6122ae3f4595e0b05e8a2d1391aa9f7a1b06b9ab639114 The OpenSSF Package Analysis project identified 'numpy-req' @ 12.17.3 pypi as malicious. It is considered malicious because: - The package...

MAL-2023-1399 Malicious code in req-flask (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a1a249da7f5d65ac080890111e76921348e8eadbfca48a449be1319f9c65982c The OpenSSF Package Analysis project identified 'req-flask' @ 2.9.4 pypi as malicious. It is considered malicious because: - The package...

Malicious code in req-flask (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a1a249da7f5d65ac080890111e76921348e8eadbfca48a449be1319f9c65982c The OpenSSF Package Analysis project identified 'req-flask' @ 2.9.4 pypi as malicious. It is considered malicious because: - The package...

Malicious code in matplotlib-req (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis bd93a03dd511f9d7c410511963475b420e4509248f52573f9dbcb75147a43d8a The OpenSSF Package Analysis project identified 'matplotlib-req' @ 17.6.16 pypi as malicious. It is considered malicious because: - The package...

MAL-2023-1377 Malicious code in matplotlib-req (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis bd93a03dd511f9d7c410511963475b420e4509248f52573f9dbcb75147a43d8a The OpenSSF Package Analysis project identified 'matplotlib-req' @ 17.6.16 pypi as malicious. It is considered malicious because: - The package...

Malicious code in req-matplotlib (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 42e8fed5a27a6a36519ad623fa6c33db0f7824fc859500c5f049ec26347c2b3c The OpenSSF Package Analysis project identified 'req-matplotlib' @ 11.2.18 pypi as malicious. It is considered malicious because: - The package...

MAL-2023-1400 Malicious code in req-matplotlib (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 42e8fed5a27a6a36519ad623fa6c33db0f7824fc859500c5f049ec26347c2b3c The OpenSSF Package Analysis project identified 'req-matplotlib' @ 11.2.18 pypi as malicious. It is considered malicious because: - The package...

Malicious code in req-os (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a4c774c66c886693b125c705573bcf15587bb2320aec1b977d51399406abb433 The OpenSSF Package Analysis project identified 'req-os' @ 20.5.17 pypi as malicious. It is considered malicious because: - The package...

MAL-2023-1401 Malicious code in req-os (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a4c774c66c886693b125c705573bcf15587bb2320aec1b977d51399406abb433 The OpenSSF Package Analysis project identified 'req-os' @ 20.5.17 pypi as malicious. It is considered malicious because: - The package...

GSD-2023-1001288 mptcp: use proper req destructor for IPv6

mptcp: use proper req destructor for IPv6 This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.163 by commit...