515 matches found
Security Bulletin: Oracle Outside In Technology (OIT) Security Vulnerabilities - July 2024
Summary Oracle Outside In Technology OIT Security Vulnerabilities CVE-2023-45853 and CVE-2023-52425 - Resolved in July 2024 Oracle OIT v8.5.7 BP3 p36705510 Vulnerability Details CVEID:CVE-2023-45853 DESCRIPTION: MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer...
CLSA-2025-1740823970 bind: Fix of CVE-2024-11187
CVE-2024-11187: Limit the additional processing for large RDATA sets...
bind: Fix of CVE-2024-11187
CVE-2024-11187: Limit the additional processing for large RDATA sets...
CLSA-2025-1740823520 bind: Fix of CVE-2024-11187
CVE-2024-11187: Limit the additional processing for large RDATA sets...
Security Bulletin: ThoughtWorks XStream CVE-2024-47072 security vulnerability in FileNet Content Manager (FNCM) Content Search Services (CSS)
Summary ThoughtWorks XStream CVE-2024-47072 security vulnerability in FileNet Content Manager FNCM Content Search Services CSS Vulnerability Details CVEID:CVE-2024-47072 DESCRIPTION: XStream is vulnerable to a denial of service, caused by a stack-based buffer overflow in BinaryStreamDriver. By...
DEBIAN-CVE-2022-49647
In the Linux kernel, the following vulnerability has been resolved: cgroup: Use separate src/dst nodes when preloading csssets for migration Each cset cssset is pinned by its tasks. When we're moving tasks around across csets for a migration, we need to hold the source and destination csets to...
DEBIAN-CVE-2022-49236
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix UAF due to race between btftrygetmodule and loadmodule While working on code to populate kfunc BTF ID sets for module BTF from its initcall, I noticed that by the time the initcall is invoked, the module BTF can already ...
CVE-2022-49236 bpf: Fix UAF due to race between btf_try_get_module and load_module
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix UAF due to race between btftrygetmodule and loadmodule While working on code to populate kfunc BTF ID sets for module BTF from its initcall, I noticed that by the time the initcall is invoked, the module BTF can already ...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: Fixed the issue with rcudereferenceprotected. When destroying all sets, we are either in the pernetexit phase or executing a “destroy all sets” command from user space. The latter was taken into account in...
Hickory DNS 数据伪造问题漏洞
Hickory DNS is a Rust-based DNS client, server, and resolver from the Hickory DNS open source. A data forgery issue vulnerability exists in Hickory DNS version 0.8.0 and earlier, which stems from the DNSSEC validation mechanism incorrectly treating DNSKEY records across RRsets as trusted, and a...
[SECURITY] [DSA 5851-1] pdns-recursor security update
------------------------------------------------------------------------- Debian Security Advisory DSA-5852-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff January 28, 2025 https://www.debian.org/security/faq -...
unbound: Unbounded name compression could lead to Denial of Service
A flaw was found in Unbound which can lead to degraded performance and an eventual denial of service when handling replies with very large RRsets that require name compression to be applied. Versions prior to 1.21.1 do not have a hard limit on the number of name compression calculations that...
CVE-2024-12151
Incorrect permission assignment in the user migration feature in Devolutions Server 2024.3.8.0 and earlier allows users to retain their old permission sets...
OPENSUSE-SU-2024:0384-1 Security update for zabbix
This update for zabbix fixes the following issues: Zabbix was updated to 6.0.33: - this version fixes CVE-2024-36461 and CVE-2024-22114 - New Features and Improvements + ZBXNEXT-9000 Changed query table for ASM disk group metrics in Oracle Database plugin and Oracle by ODBC template Agent Templat...
PT-2024-35462 · Argo Helm · Argo Helm
Name of the Vulnerable Software and Affected Versions: Argo Helm versions prior to 0.45.0 Description: The issue is related to the workflow-role lacking granularity in its privileges, giving unnecessary permissions to workflowtasksets and workflowartifactgctasks for all workflow Pods. This could...
OESA-2024-2424 kernel security update
The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: pinctrl: single: fix potential NULL dereference in pcsgetfunction pinmuxgenericgetfunction can return NULL and the pointer 'function' was dereferenced without...
November 12, 2024—KB5046616 (OS Build 20348.2849)
None None...
November 12, 2024—KB5046618 (OS Build 25398.1251)
None None...
Malicious code in cml-tt-sets (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cf782b7bdc62c7fa7743c5fafc916bcd3c20ec2c23d89837b120d35d53659e6b The OpenSSF Package Analysis project identified 'cml-tt-sets' @ 9.3.5 npm as malicious. It is considered malicious because: - The package...