14501 matches found
CVE-2024-35890 gro: fix ownership transfer
In the Linux kernel, the following vulnerability has been resolved: gro: fix ownership transfer If packets are GROed with fraglist they might be segmented later on and continue their journey in the stack. In skbsegmentlist those skbs can be reused as-is. This is an issue as their destructor was...
CVE-2024-35884
CVE-2024-35884 is a Linux kernel vulnerability in UDP GRO handling. When rx-udp-gro-forwarding is enabled, UDP packets may be GROed in transit and land in a tunnel, causing issues such as corrupted packets or kernel crashes (geneve path example). The root cause is that udp_gro_receive/udp4/udp6_g...
Linux Kernel Security Vulnerabilities
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from allowing non-tunneled GSO skbs to log in the tunnel...
EulerOS Virtualization 3.0.6.6 : libtiff (EulerOS-SA-2024-1655)
According to the versions of the libtiff packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - There exists one heap buffer overflow in TIFFmemcpy in tifunix.c in libtiff 4.0.10, which allows an attacker to cause a...
biome-text (>=3.0.0, <=3.2.1), farm (>=0.6.2, <=0.8.0) +5 more potentially affected by CVE-2024-4263 via mlflow (1.13.1)
mlflow PYPI version 1.13.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - biome-text =3.0.0, =0.6.2, =0.7.0, =0.0.1, =1.1.0, =1.0.0, =0.4.5.dev2, =0.6.5 Source cves: CVE-2024-4263 Source advisory: OSV:PYSEC-2024-51...
Huawei EulerOS: Security Advisory for libtiff (EulerOS-SA-2024-1655)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS Virtualization 2.11.0 : ncurses (EulerOS-SA-2024-1630)
According to the versions of the ncurses packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - NCurse v6.4-20230418 was discovered to contain a segmentation fault via the component ncwrapentry. CVE-2023-50495 Note that...
EulerOS Virtualization 2.11.1 : ncurses (EulerOS-SA-2024-1611)
According to the versions of the ncurses packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - NCurse v6.4-20230418 was discovered to contain a segmentation fault via the component ncwrapentry. CVE-2023-50495 Note that...
Huawei EulerOS: Security Advisory for ncurses (EulerOS-SA-2024-1630)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for ncurses (EulerOS-SA-2024-1611)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
AZL-40706 CVE-2024-32614 affecting package hdf5 for versions less than 1.14.4-1
HDF5 Library through 1.14.3 has a SEGV in H5VMmemcpyvv in H5VM.c...
DEBIAN-CVE-2024-32614
HDF5 Library through 1.14.3 has a SEGV in H5VMmemcpyvv in H5VM.c...
AZL-40562 CVE-2024-32610 affecting package hdf5 for versions less than 1.14.4.3-1
HDF5 Library through 1.14.3 has a SEGV in H5Tclosereal in H5T.c, resulting in a corrupted instruction pointer...
DEBIAN-CVE-2024-32607
HDF5 Library through 1.14.3 has a SEGV in H5Aclose in H5Aint.c, resulting in the corruption of the instruction pointer...
UBUNTU-CVE-2024-32607
HDF5 Library through 1.14.3 has a SEGV in H5Aclose in H5Aint.c, resulting in the corruption of the instruction pointer...
UBUNTU-CVE-2024-32614
HDF5 Library through 1.14.3 has a SEGV in H5VMmemcpyvv in H5VM.c...
HDF5 Library through 1.14.3 has a SEGV in H5VM_memcpyvv in H5VM.c.
...
HDF5 Library through 1.14.3 has a SEGV in H5A__close in H5Aint.c resulting in the corruption of the instruction pointer.
...