3019 matches found
SUSE-SU-2025:0755-1 Security update for u-boot
This update for u-boot fixes the following issues: - CVE-2024-57256: integer overflow in U-Boot's ext4 symlink resolution function bsc1237284. - CVE-2024-57258: multiple integer overflows in U-Boot's memory allocator bsc1237287...
OESA-2025-1212 uboot-tools security update
This package includes the mkimage program, which allows generation of U-Boot images in various formats, and the fwprintenv and fwsetenv programs to read and modify U-Boot's environment. Security Fixes: An integer overflow in sqfsinodesize in Das U-Boot before 2025.01-rc1 occurs in the symlink siz...
CVE-2025-1572
The KiviCare – Clinic & Patient Management System EHR plugin for WordPress is vulnerable to SQL Injection via the ‘uid’ parameter in all versions up to, and including, 3.6.7 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query...
WordPress KiviCare plugin <= 3.6.7 - Authenticated (Doctor+) SQL Injection via 'u_id' Parameter vulnerability
Authenticated Doctor+ SQL Injection via 'uid' Parameter vulnerability discovered by wesley wcraft in WordPress Plugin KiviCare versions = 3.6.7...
CVE-2024-57257
A stack consumption issue in sqfssize in Das U-Boot before 2025.01-rc1 occurs via a crafted squashfs filesystem with deep symlink nesting. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising...
CVE-2024-57258
A flaw was found in Das U-Boot. This vulnerability allows denial of service or arbitrary code execution via a crafted squashfs filesystem, exploiting sbrk, request2size, or mishandling of ptrdifft on x8664. Mitigation Mitigation for this issue is either not available or the currently available...
CVE-2024-57259
A flaw was found in Das U-Boot. This vulnerability allows heap memory corruption leading to denial of service or arbitrary code execution via improper size calculation that fails to account for the path separator during SquashFS directory listing. Mitigation Mitigation for this issue is either no...
CVE-2024-57254
A flaw was found in Das U-Boot. This vulnerability allows an attacker to cause an integer overflow in the symlink size calculation via a crafted squashfs filesystem, which can lead to memory corruption or arbitrary code execution. Mitigation Mitigation for this issue is either not available or th...
CVE-2024-57256
A flaw was found in Das U-Boot. This vulnerability allows an attacker to cause a memory overwrite via a crafted ext4 filesystem with an inode size of 0xffffffff, which can lead to code execution or system crash. Mitigation Mitigation for this issue is either not available or the currently availab...
CVE-2024-57255
A flaw was found in Das U-Boot. This vulnerability allows an attacker to cause a memory overwrite via a crafted SquashFS filesystem with an inode size of 0xffffffff, which can lead to code execution or system crash. Mitigation Mitigation for this issue is either not available or the currently...
DEBIAN-CVE-2024-57257
A stack consumption issue in sqfssize in Das U-Boot before 2025.01-rc1 occurs via a crafted squashfs filesystem with deep symlink nesting...
CVE-2024-57259
sqfssearchdir in Das U-Boot before 2025.01-rc1 exhibits an off-by-one error and resultant heap memory corruption for squashfs directory listing because the path separator is not considered in a size calculation...
DEBIAN-CVE-2024-57259
sqfssearchdir in Das U-Boot before 2025.01-rc1 exhibits an off-by-one error and resultant heap memory corruption for squashfs directory listing because the path separator is not considered in a size calculation...
DEBIAN-CVE-2024-57256
An integer overflow in ext4fsreadsymlink in Das U-Boot before 2025.01-rc1 occurs for zalloc adding one to an le32 variable via a crafted ext4 filesystem with an inode size of 0xffffffff, resulting in a malloc of zero and resultant memory overwrite...
DEBIAN-CVE-2024-57254
An integer overflow in sqfsinodesize in Das U-Boot before 2025.01-rc1 occurs in the symlink size calculation via a crafted squashfs filesystem...
CVE-2024-57255
An integer overflow in sqfsresolvesymlink in Das U-Boot before 2025.01-rc1 occurs via a crafted squashfs filesystem with an inode size of 0xffffffff, resulting in a malloc of zero and resultant memory overwrite...
CVE-2024-57254
An integer overflow in sqfsinodesize in Das U-Boot before 2025.01-rc1 occurs in the symlink size calculation via a crafted squashfs filesystem...
CVE-2024-57257
A stack consumption issue in sqfssize in Das U-Boot before 2025.01-rc1 occurs via a crafted squashfs filesystem with deep symlink nesting...
CVE-2024-57256
An integer overflow in ext4fsreadsymlink in Das U-Boot before 2025.01-rc1 occurs for zalloc adding one to an le32 variable via a crafted ext4 filesystem with an inode size of 0xffffffff, resulting in a malloc of zero and resultant memory overwrite...