CVE-2024-51529: Improper Input Validation

Data verification vulnerability in the battery module Impact: Successful exploitation of this vulnerability may affect function stability...

PT-2024-34693 · Unknown · Battery Module

Name of the Vulnerable Software and Affected Versions: Battery module affected versions not specified Description: The issue is related to a data verification vulnerability in the battery module. Successful exploitation of this vulnerability may affect function stability. Recommendations: At the...

RHEL 6 : openstack-neutron (RHSA-2014:0091)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2014:0091 advisory. The openstack-neutron packages provide Openstack Networking neutron, the virtual network service. It was discovered that the metadata agent in...

EulerOS 2.0 SP12 : curl (EulerOS-SA-2024-2795)

According to the versions of the curl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : libcurl's ASN1 parser code has the GTime2str function, used for parsing an ASN.1 Generalized Time field. If given an syntactically incorrect field,...

Security update for 389-ds

This update for 389-ds fixes the following issues: Persist extracted key path for ldapsslclientinit over repeat invocations bsc1230852 Re-enable use of .dsrc basedn for dsidm commands bsc1231462 Update to version 2.2.10git18.20ce9289: RFE: Use previously extracted key path Update dsidm to...

SUSE SLES15 Security Update : kernel (Live Patch 11 for SLE 15 SP5) (SUSE-SU-2024:3842-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3842-1 advisory. This update for the Linux Kernel 5.14.21-1505005552 fixes several issues. The following security issues were fixed: - CVE-2024-35905: Fixed int...

openSUSE 15 Security Update : lxc (openSUSE-SU-2024:0342-1)

The remote openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2024:0342-1 advisory. lxc was updated to 6.0.2: The LXC team is pleased to announce the release of LXC 6.0.2! This is the second bugfix release for LXC 6.0 which is supported...

OPENSUSE-SU-2024:0342-1 Security update for lxc

This update for lxc fixes the following issues: lxc was updated to 6.0.2: The LXC team is pleased to announce the release of LXC 6.0.2! This is the second bugfix release for LXC 6.0 which is supported until June 2029. As usual this bugfix releases focus on stability and hardening. Some of the...

Security update for lxc (moderate)

openSUSE Security Update: Security update for lxc Announcement ID: openSUSE-SU-2024:0342-1 Rating: moderate References: 1204842 1206779 Cross-References: CVE-2022-47952 CVSS scores: CVE-2022-47952 SUSE: 6.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N Affected Products: openSUSE Backports...

Virtuozzo Hybrid Infrastructure 6.3 (6.3.0-170)

In this release, Virtuozzo Hybrid Infrastructure provides a range of new features that cover the compute service and our ecosystem of backup and disaster recovery solutions. Additionally, this release delivers stability and security improvements, and addresses issues found in previous releases...

Virtuozzo Hybrid Infrastructure 6.2 Update 1 Hotfix 2 (6.2.1-66)

This update provides stability fixes. Vulnerability id: VSTOR-93320 Cannot update a cluster due to little free space on the boot partition. Vulnerability id: VSTOR-93349 During a cluster update, VM live migration may fail with the libvirt error. Vulnerability id: VSTOR-93365 Fixed detaching CD-RO...

Virtuozzo Hybrid Infrastructure 6.1 Update 1 Hotfix 7 (6.1.1-59)

This update provides stability and security fixes. Vulnerability id: VSTOR-86581 Fixed an issue with iSCSI persistent reservations. Vulnerability id: VSTOR-90084 A stability improvement for the compute service. Vulnerability id: VSTOR-90793 Fixed an error with extending volumes. Vulnerability id:...

Fedora: Security Advisory (FEDORA-2024-8b08786765)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2024-47706

CVE-2024-47706 affects the Linux kernel bfq I/O scheduler. The issue was a use-after-free involving bfqq->bic during merges in the bfq_merge/merge-chain flow, which could allow IO handling to operate on a bfqq that is no longer valid. The provided details describe an initial state with three b...

CVE-2024-27766

Disputed A flaw was found in MariaDB. This flaw allows a remote attacker to use a specially crafted payload to execute arbitrary commands in certain configurations. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product...

BYOB Unauthenticated Remote Code Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'sqlite3' class MetasploitModule 'BYOB Unauthenticated RCE via Arbitrary File Write and Command Injection CVE-2024-45256, CVE-2024-45257', 'Description' = %q Thi...

[SECURITY] [DSA 5779-1] cups security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5779-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso September 29, 2024 https://www.debian.org/security/faq -...

CVE-2024-23271

A flaw was found in WebKit. This flaw allows a remote attacker to trigger unexpected cross-origin behavior via a malicious website. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of...

Virtuozzo Hybrid Infrastructure 6.2 Update 1 Hotfix 1 (6.2.1-57)

This update provides security, stability, and performance fixes. Vulnerability id: VSTOR-88709 Network and disk information is missing in hciinfo.disks due to a race. Vulnerability id: VSTOR-89823 VMs are in the shutoff state after upgrading the libvirt package. Vulnerability id: VSTOR-90644 An...

kernel: mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path

A flaw was found in the Linux kernel, where a faulty error handler in the driver for certain Mellanox hardware could lead to a null pointer reference. This issue affects system stability...