DEBIAN-CVE-2024-35862

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in smb2isnetworknamedeleted Skip sessions that are being teared down status == SESEXITING to avoid UAF...

DEBIAN-CVE-2024-35864

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in smb2isvalidleasebreak Skip sessions that are being teared down status == SESEXITING to avoid UAF...

AZL-54687 CVE-2024-35864 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in smb2isvalidleasebreak Skip sessions that are being teared down status == SESEXITING to avoid UAF...

AZL-54690 CVE-2024-35861 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in cifssignalcifsdforreconnect Skip sessions that are being teared down status == SESEXITING to avoid UAF...

AZL-54699 CVE-2024-35862 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in smb2isnetworknamedeleted Skip sessions that are being teared down status == SESEXITING to avoid UAF...

DEBIAN-CVE-2024-35863

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in isvalidoplockbreak Skip sessions that are being teared down status == SESEXITING to avoid UAF...

UBUNTU-CVE-2024-35867

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in cifsstatsprocshow Skip sessions that are being teared down status == SESEXITING to avoid UAF...

UBUNTU-CVE-2024-35868

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in cifsstatsprocwrite Skip sessions that are being teared down status == SESEXITING to avoid UAF...

UBUNTU-CVE-2024-35865

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in smb2isvalidoplockbreak Skip sessions that are being teared down status == SESEXITING to avoid UAF...

CVE-2024-35868 smb: client: fix potential UAF in cifs_stats_proc_write()

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in cifsstatsprocwrite Skip sessions that are being teared down status == SESEXITING to avoid UAF...

CVE-2024-35868 smb: client: fix potential UAF in cifs_stats_proc_write()

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in cifsstatsprocwrite Skip sessions that are being teared down status == SESEXITING to avoid UAF...

CVE-2024-35865

CVE-2024-35865 is a Linux kernel vulnerability affecting the SMB client path, specifically a use-after-free in smb2_is_valid_oplock_break(). The issue arises when skipping sessions that are tearing down (status SES_EXITING) is not performed correctly, enabling a UAF condition in the SMB2 oplock b...

CVE-2024-35864 smb: client: fix potential UAF in smb2_is_valid_lease_break()

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in smb2isvalidleasebreak Skip sessions that are being teared down status == SESEXITING to avoid UAF...

CVE-2024-35863 smb: client: fix potential UAF in is_valid_oplock_break()

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in isvalidoplockbreak Skip sessions that are being teared down status == SESEXITING to avoid UAF...

CVE-2024-35862 smb: client: fix potential UAF in smb2_is_network_name_deleted()

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in smb2isnetworknamedeleted Skip sessions that are being teared down status == SESEXITING to avoid UAF...

CVE-2024-35862 smb: client: fix potential UAF in smb2_is_network_name_deleted()

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in smb2isnetworknamedeleted Skip sessions that are being teared down status == SESEXITING to avoid UAF...

CVE-2024-35861 smb: client: fix potential UAF in cifs_signal_cifsd_for_reconnect()

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in cifssignalcifsdforreconnect Skip sessions that are being teared down status == SESEXITING to avoid UAF...

PT-2024-33771 · Siadmin · Siadmin

Name of the Vulnerable Software and Affected Versions: SiAdmin version 1.1 Description: The issue allows a remote attacker to send a specially crafted URL to an authenticated user, potentially stealing their cookie session credentials via XSS. This is achieved through the "/show.php" query...

CVE-2024-35049

SurveyKing v1.3.1 is affected by a session-management issue where users’ sessions remain active after logout, related to an incomplete fix for CVE-2022-25590. CVSSv3.1 base score 9.1 (CRITICAL) with network access, no privileges required, and no user interaction. Impact primarilyConfidentiality a...

PT-2024-26299 · Unknown · Surveyking

Name of the Vulnerable Software and Affected Versions: SurveyKing version 1.3.1 Description: The issue allows attackers to escalate privileges via re-using the session ID of a user that was deleted by an Admin. Recommendations: For SurveyKing version 1.3.1, as a temporary workaround, consider...