Lucene search
K

1430 matches found

OSV
OSV
added 2024/10/21 1:15 p.m.1 views

DEBIAN-CVE-2024-49854

In the Linux kernel, the following vulnerability has been resolved: block, bfq: fix uaf for accessing wakerbfqq after splitting After commit 42c306ed7233 "block, bfq: don't break merge chain in bfqsplitbfqq", if the current procress is the last holder of bfqq, the bfqq can be freed after...

7.8CVSS5.8AI score0.00024EPSS
Exploits0References1
OSV
OSV
added 2024/10/21 1:15 p.m.1 views

AZL-50829 CVE-2024-49854 affecting package kernel for versions less than 5.15.173.1-1

In the Linux kernel, the following vulnerability has been resolved: block, bfq: fix uaf for accessing wakerbfqq after splitting After commit 42c306ed7233 "block, bfq: don't break merge chain in bfqsplitbfqq", if the current procress is the last holder of bfqq, the bfqq can be freed after...

7.8CVSS6.5AI score0.00024EPSS
Exploits0References1
OSV
OSV
added 2024/10/21 1:15 p.m.0 views

UBUNTU-CVE-2024-49854

In the Linux kernel, the following vulnerability has been resolved: block, bfq: fix uaf for accessing wakerbfqq after splitting After commit 42c306ed7233 "block, bfq: don't break merge chain in bfqsplitbfqq", if the current procress is the last holder of bfqq, the bfqq can be freed after...

7.8CVSS6.6AI score0.00024EPSS
Exploits0References9
CNNVD
CNNVD
added 2024/10/21 12:0 a.m.1 views

Linux kernel 资源管理错误漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a post-release reuse issue that may occur when the bfq module in the block layer accesses wakerbfqq after...

7.8CVSS6.6AI score0.00024EPSS
Exploits0References9
CNNVD
CNNVD
added 2024/10/21 12:0 a.m.2 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a null pointer being passed in the dcn20validateapplypipesplitflags function, which results in a null pointe...

5.5CVSS6.6AI score0.00018EPSS
Exploits0References6
OSV
OSV
added 2024/10/15 6:38 p.m.9 views

GO-2024-3189 Consensus failure in github.com/btcsuite/btcd

The btcd Bitcoin client versions 0.10 to 0.24 did not correctly re-implement Bitcoin Core's 'FindAndDelete' functionality, causing discrepancies in the validation of Bitcoin blocks. This can lead to a chain split accepting an invalid block or Denial of Service DoS attacks rejecting a valid block...

8.1CVSS7.2AI score0.00427EPSS
Exploits0References4
OSV
OSV
added 2024/10/12 11:9 a.m.1 views

OESA-2024-2235 vim security update

Vim is an advanced text editor that seeks to provide the power of the de-facto Unix editor 'Vi', with a more complete feature set. Vim is a highly configurable text editor built to enable efficient text editing. It is an improved version of the vi editor distributed with most UNIX systems. Securi...

4.7CVSS6.9AI score0.00069EPSS
Exploits0References2
NVD
NVD
added 2024/10/11 8:15 p.m.11 views

CVE-2024-38365

btcd is an alternative full node bitcoin implementation written in Go golang. The btcd Bitcoin client versions 0.10 to 0.24 did not correctly re-implement Bitcoin Core's "FindAndDelete" functionality. This logic is consensus-critical: the difference in behavior with the other Bitcoin clients can...

8.1CVSS0.00427EPSS
Exploits0References4
CVE
CVE
added 2024/10/11 7:32 p.m.103 views

CVE-2024-38365

CVE-2024-38365 affects btcd (versions 0.10 to 0.24). The issue is a mismatch in Bitcoin Core’s FindAndDelete() versus btcd’s removeOpcodeByData() that can cause btcd to validate blocks differently, risking a chain split (accepting an invalid block) or DoS (rejecting a valid block). The root cause...

8.1CVSS7.2AI score0.00427EPSS
Exploits0References4Affected Software1
OSV
OSV
added 2024/10/11 7:32 p.m.7 views

CVE-2024-38365 btcd did not correctly re-implement Bitcoin Core's "FindAndDelete()" functionality

btcd is an alternative full node bitcoin implementation written in Go golang. The btcd Bitcoin client versions 0.10 to 0.24 did not correctly re-implement Bitcoin Core's "FindAndDelete" functionality. This logic is consensus-critical: the difference in behavior with the other Bitcoin clients can...

7.4CVSS7.7AI score0.00427EPSS
Exploits0References6
Vulnrichment
Vulnrichment
added 2024/10/11 7:32 p.m.12 views

CVE-2024-38365 btcd did not correctly re-implement Bitcoin Core's "FindAndDelete()" functionality

btcd is an alternative full node bitcoin implementation written in Go golang. The btcd Bitcoin client versions 0.10 to 0.24 did not correctly re-implement Bitcoin Core's "FindAndDelete" functionality. This logic is consensus-critical: the difference in behavior with the other Bitcoin clients can...

7.4CVSS6.6AI score0.00427EPSS
Exploits0References4
Cvelist
Cvelist
added 2024/10/11 7:32 p.m.15 views

CVE-2024-38365 btcd did not correctly re-implement Bitcoin Core's "FindAndDelete()" functionality

btcd is an alternative full node bitcoin implementation written in Go golang. The btcd Bitcoin client versions 0.10 to 0.24 did not correctly re-implement Bitcoin Core's "FindAndDelete" functionality. This logic is consensus-critical: the difference in behavior with the other Bitcoin clients can...

7.4CVSS0.00427EPSS
Exploits0References4
OSV
OSV
added 2024/10/10 4:43 p.m.8 views

GHSA-27VH-H6MC-Q6G8 btcd did not correctly re-implement Bitcoin Core's "FindAndDelete()" functionality

Impact The btcd Bitcoin client versions 0.10 to 0.24 did not correctly re-implement Bitcoin Core's "FindAndDelete" functionality. This logic is consensus-critical: the difference in behavior with the other Bitcoin clients can lead to btcd clients accepting an invalid Bitcoin block or rejecting a...

8.3CVSS7.3AI score0.00427EPSS
Exploits0References6
Github Security Blog
Github Security Blog
added 2024/10/10 4:43 p.m.20 views

btcd did not correctly re-implement Bitcoin Core's "FindAndDelete()" functionality

Impact The btcd Bitcoin client versions 0.10 to 0.24 did not correctly re-implement Bitcoin Core's "FindAndDelete" functionality. This logic is consensus-critical: the difference in behavior with the other Bitcoin clients can lead to btcd clients accepting an invalid Bitcoin block or rejecting a...

8.1CVSS6.6AI score0.00427EPSS
Exploits0References6Affected Software1
Positive Technologies
Positive Technologies
added 2024/10/10 12:0 a.m.3 views

PT-2024-27962 · Btcd +1 · Btcd +1

Name of the Vulnerable Software and Affected Versions: btcd versions 0.10 through 0.24 Description: The btcd Bitcoin client did not correctly re-implement Bitcoin Core's 'FindAndDelete' functionality, leading to discrepancies in Bitcoin block validation. This can result in a chain split or Denial...

9.9CVSS5.9AI score0.94047EPSS
Exploits20References152
OSV
OSV
added 2024/10/07 10:15 p.m.2 views

AZL-50176 CVE-2024-47814 affecting package vim for versions less than 9.1.0791-1

Vim is an open source, command line text editor. A use-after-free was found in Vim 9.1.0764. When closing a buffer visible in a window a BufWinLeave auto command can cause an use-after-free if this auto command happens to re-open the same buffer in a new split window. Impact is low since the user...

4.7CVSS6.7AI score0.00069EPSS
Exploits0References1
OSV
OSV
added 2024/10/07 10:15 p.m.1 views

ALPINE-CVE-2024-47814

Vim is an open source, command line text editor. A use-after-free was found in Vim 9.1.0764. When closing a buffer visible in a window a BufWinLeave auto command can cause an use-after-free if this auto command happens to re-open the same buffer in a new split window. Impact is low since the user...

4.7CVSS7AI score0.00069EPSS
Exploits0References1
OSV
OSV
added 2024/10/07 10:15 p.m.0 views

UBUNTU-CVE-2024-47814

Vim is an open source, command line text editor. A use-after-free was found in Vim 9.1.0764. When closing a buffer visible in a window a BufWinLeave auto command can cause an use-after-free if this auto command happens to re-open the same buffer in a new split window. Impact is low since the user...

4.7CVSS7.3AI score0.00069EPSS
Exploits0References4
OSV
OSV
added 2024/09/30 2:20 p.m.21 views

RHSA-2022:0988 Red Hat Security Advisory: Red Hat OpenStack Platform 16.1 (golang-github-vbatts-tar-split) security update

Bulletin has no description...

7.3CVSS6.7AI score0.00917EPSS
Exploits2References15
OSV
OSV
added 2024/09/30 2:19 p.m.20 views

RHSA-2022:0998 Red Hat Security Advisory: Red Hat OpenStack Platform 16.2 (golang-github-vbatts-tar-split) security update

Bulletin has no description...

7.3CVSS6.7AI score0.00917EPSS
Exploits2References14
Rows per page
Query Builder