CVE-2024-56743

CVE-2024-56743 affects the Linux kernel NFS path. The issue arises from holding RCU while calling nfsd_file_put_local; the RCU hold is moved from nfs_to_nfsd_file_put_local to nfs_to_nfsd_net_put, with the rcu-protective call nfsd_serv_put being the one that requires RCU. This change addresses a ...

CVE-2024-56740 nfs/localio: must clear res.replen in nfs_local_read_done

In the Linux kernel, the following vulnerability has been resolved: nfs/localio: must clear res.replen in nfslocalreaddone Otherwise memory corruption can occur due to NFSv3 LOCALIO reads leaving garbage in res.replen: - nfs3readdone copies that into server-readhdrsize; from there nfs3procreadset...

CVE-2024-56649

In the Linux kernel, the following vulnerability has been resolved: net: enetc: Do not configure preemptible TCs if SIs do not support Both ENETC PF and VF drivers share enetcsetuptcmqprio to configure MQPRIO. And enetcsetuptcmqprio calls enetcchangepreemptibletcs to configure preemptible TCs...

USN-7178-1 dpdk vulnerability

It was discovered that DPDK incorrectly handled the Vhost library checksum offload feature. An malicious guest could possibly use this issue to cause the hypervisor's vSwitch to crash, resulting in a denial of service...

UBUNTU-CVE-2024-11614

An out-of-bounds read vulnerability was found in DPDK's Vhost library checksum offload feature. This issue enables an untrusted or compromised guest to crash the hypervisor's vSwitch by forging Virtio descriptors to cause out-of-bounds reads. This flaw allows an attacker with a malicious VM using...

CVE-2024-51175

An issue in H3C switch h3c-S1526 allows a remote attacker to obtain sensitive information via the S1526.cfg component...

PT-2024-34549 · H3C · H3C Switch H3C-S1526

Name of the Vulnerable Software and Affected Versions: H3C switch h3c-S1526 affected versions not specified Description: An issue in the H3C switch h3c-S1526 allows a remote attacker to obtain sensitive information via the S1526.cfg component. Recommendations: At the moment, there is no informati...

CVE-2024-51175

The CVE-2024-51175 entry concerns the H3C S1526 switch, specifically the S1526.cfg component. A remote attacker can obtain sensitive information from the device due to this vulnerability. Connected sources confirm the affected product and component and the impact (information disclosure). There a...

H3C S1526 安全漏洞

The H3C S1526 is a managed access switch from China's Xinhua San H3C. A security vulnerability exists in the H3C S1526. An attacker can exploit the vulnerability to obtain sensitive information via the S1526.cfg component...

CVE-2024-51175

An issue in H3C switch h3c-S1526 allows a remote attacker to obtain sensitive information via the S1526.cfg component...

CVE-2024-51175

An issue in H3C switch h3c-S1526 allows a remote attacker to obtain sensitive information via the S1526.cfg component...

BIT-MATTERMOST-2024-2450

Mattermost versions 8.1.x before 8.1.10, 9.2.x before 9.2.6, 9.3.x before 9.3.2, and 9.4.x before 9.4.3 fail to correctly verify account ownership when switching from email to SAML authentication, allowing an authenticated attacker to take over other user accounts via a crafted switch request und...

Planet WGS-804HPT 安全漏洞

Planet WGS-804HPT is an industrial 8-port 10/100/1000T wall-mounted managed switch from Planet, China. A security vulnerability exists in the Planet WGS-804HPT. An attacker can exploit this vulnerability to remotely execute code by sending commands via malicious HTTP requests...

Planet WGS-804HPT 安全漏洞

Planet WGS-804HPT is an industrial 8-port 10/100/1000T wall-mounted managed switch from Planet, China. A security vulnerability exists in the Planet WGS-804HPT. An attacker can exploit this vulnerability to send a malformed HTTP request, which could cause the program to crash...

Cisco NX-OS Command Injection (CVE-2017-12335)

A vulnerability in the CLI of Cisco NX-OS System Software could allow an authenticated, local attacker to perform a command injection attack. The vulnerability is due to insufficient input validation of command arguments. An attacker could exploit this vulnerability by injecting crafted command...

CVE-2024-53849

editorconfig-core-c is theEditorConfig core library written in C for use by plugins supporting EditorConfig parsing. In affected versions several overflows may occur in switch case '' when the input pattern contains many escaped characters. The added backslashes leave too little space in the outp...

CVE-2024-53849

The CVE-2024-53849 issue affects editorconfig-core-c (EditorConfig core library in C) where multiple escaped characters in input patterns can trigger stack/pointer overflows in the '[' handling during parsing. The root cause is that added backslashes reduce available space in nested-bracket outpu...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: greybus: Fixed a use-after-free bug in gbinterfacerelease due to a race condition. In gbinterfacecreate, &intf-modeswitchcompletion is bound to gbinterfacemodeswitchwork. Then, it will be initiated by gbinterfacerequestmodeswitch...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: BPF: Avoid using an uninitialized value in BPFCOREREADBITFIELD Changes from V1: - A default branch is added to the switch statement to initialize val. GCC warns that val may be used uninitialized in the BPFCREREADBITFIELD macro,...

OESA-2024-2473 curl security update

cURL is a computer software project providing a library libcurl and command-line tool curl for transferring data using various protocols. Security Fixes: When curl is asked to use HSTS, the expiry time for a subdomain might overwrite a parent domain's cache entry, making it end sooner or later th...