12786 matches found
PT-2024-1892
Name of the Vulnerable Software and Affected Versions Firefox versions prior to 123 Firefox ESR versions prior to 115.8 Thunderbird versions prior to 115.8 Description The issue is related to the incorrect honoring of Set-Cookie response headers in multipart HTTP responses. If an attacker can...
Mozilla Firefox ESR < 115.8
The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 115.8. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2024-06 advisory. - Incorrect code generation could have led to unexpected numeric conversions and potential undefined...
Mozilla Firefox < 123.0
The version of Firefox installed on the remote macOS or Mac OS X host is prior to 123.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2024-05 advisory. - Incorrect code generation could have led to unexpected numeric conversions and potential undefined behavior...
Imaging Data Commons libdicom DICOM File Meta Information Parsing Use-After-Free vulnerabilities
Talos Vulnerability Report TALOS-2024-1931 Imaging Data Commons libdicom DICOM File Meta Information Parsing Use-After-Free vulnerabilities February 20, 2024 CVE Number CVE-2024-24793,CVE-2024-24794 SUMMARY A use-after-free vulnerability exists in the DICOM Element Parsing as implemented in Imagi...
CVE-2024-1551: Reliance on Cookies without Validation and Integrity Checking
Set-Cookie response headers were being incorrectly honored in multipart HTTP responses. If an attacker could control the Content-Type response header, as well as control part of the response body, they could inject Set-Cookie response headers that would have been honored by the browser. This...
Mozilla Thunderbird < 115.8
The version of Thunderbird installed on the remote Windows host is prior to 115.8. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2024-07 advisory. - Incorrect code generation could have led to unexpected numeric conversions and potential undefined behavior.Note:...
Slackware Linux 15.0 / current mozilla-firefox Multiple Vulnerabilities (SSA:2024-051-01)
The version of mozilla-firefox installed on the remote host is prior to 115.8.0esr. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2024-051-01 advisory. - When storing and re-accessing data on a networking channel, the length of buffers may have been confused,...
PT-2024-7720
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to errors in resource management within the vfio intx set signal function of the Linux kernel's vfio/pci component. This could allow an attacker to cause a denial of...
PT-2024-7737
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability exists in the Linux kernel where the eventfd for INTx signaling can be deconfigured, which unregisters the IRQ handler but still allows eventfds to be signaled with a NUL...
PT-2024-7729
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the fbcon component of the Linux kernel, where an error in resource management within the fbcon do set font function can lead to a system crash. This can be...
PT-2024-7736
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a NULL pointer dereference in the vfio-platform component of the Linux kernel. This occurs when the vfio-platform SET IRQS ioctl allows loopback triggering of an...
PT-2024-7850
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a null pointer dereference in the edp set replay allow active function. This occurs because the replay variable is not checked for null before calling...
PT-2024-19385
Name of the Vulnerable Software and Affected Versions Mathieu Malaterre Grassroot DICOM version 3.0.23 Description A heap-based buffer overflow issue exists in the LookupTable::SetLUT functionality. This can be triggered by a specially crafted malformed file, leading to memory corruption. An...
PT-2024-26847
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to string truncation warnings in the igb set fw version function of the Linux kernel. The warning occurs due to the potential truncation of the '%d' directive output...
Fedora: Security Advisory for rust-vmm-sys-util (FEDORA-2024-f2305d485f)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
PT-2024-41045
Name of the Vulnerable Software and Affected Versions mbedtls versions 2.28.3 through 2.28.6 Description The issue concerns a buffer overread in TLS stream cipher suites, a timing side channel in private key RSA operations, and a buffer overflow in mbedtls x509 set extension. Recommendations For...
Bluetooth HCI Driver Buffer Overflow DoS
The vulnerability of the conn,advmin,maxintervalset function in the implementation of the HCI driver for Bluetooth in Linux operating systems is related to competitive access to resources race conditions. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
Linux Bluetooth Kernel Buffer Overflow DoS
The vulnerability of the Linux kernel Bluetooth HCI driver implementation relates to competitive access to resources during the execution of the sniffmin,maxintervalset function in the net/bluetooth/hcidebugfs.c module. Exploiting this vulnerability allows a remote attacker to compromise the...
PT-2024-21615
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.9.0-rc3+ 365 Description The vulnerability is related to a memleak in the netfilter nf tables module. The delete set command does not rely on the transaction object for element removal, which could result in...
