6990 matches found
CVE-2024-30949
CVE-2024-30949 concerns an issue in the GNU C library replacement newlib version 4.3.0 where the time unit scaling in the function _gettimeofday may allow an attacker to execute arbitrary code. The connected sources consistently describe the vulnerability and its impact as arbitrary code executio...
CVE-2024-30949
An issue in newlib v.4.3.0 allows an attacker to execute arbitrary code via the time unit scaling in the gettimeofday function...
PT-2024-23685 · Newlib +1 · Newlib +1
Name of the Vulnerable Software and Affected Versions: newlib version 4.3.0 Description: An issue in the gettimeofday function allows an attacker to execute arbitrary code via the time unit scaling. Recommendations: For newlib version 4.3.0, at the moment, there is no information about a newer...
CVE-2024-44069
Pi-hole before 6 allows unauthenticated admin/api.php?setTempUnit= calls to change the temperature units of the web dashboard. NOTE: the supplier reportedly does "not consider the bug a security issue" but the specific motivation for letting arbitrary persons change the value Celsius, Fahrenheit,...
CVE-2024-44069: Missing Authorization
Pi-hole before 6 allows unauthenticated admin/api.php?setTempUnit= calls to change the temperature units of the web dashboard. NOTE: the supplier reportedly does "not consider the bug a security issue" but the specific motivation for letting arbitrary persons change the value Celsius, Fahrenheit,...
SUSE CVE-2023-20584
IOMMU improperly handles certain special address ranges with invalid device table entries DTEs, which may allow an attacker with privileges and a compromised Hypervisor to induce DTE faults to bypass RMP checks in SEV-SNP, potentially leading to a loss of guest integrity...
powerpc/pseries/iommu: LPAR panics during boot up with a frozen PE
...
gpac:fuzz_probe_analyze: Stack-buffer-overflow in gf_hevc_parse_nalu_bs
Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=6203059915522048 Project: gpac Fuzzing Engine: libFuzzer Fuzz Target: fuzzprobeanalyze Job Type: libfuzzerasangpac Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 4 Crash Address: 0x7eb7a122186...
PT-2024-23977 · Google · Android
Name of the Vulnerable Software and Affected Versions: Google Android affected versions not specified Description: In the MMU AllocLevel function of mmu common.c, there is a possible arbitrary code execution due to an integer overflow. This could lead to local escalation of privilege in the kerne...
Nissan Altima Blind Spot Detection Sensor ECU 安全漏洞
The Nissan Altima Blind Spot Detection Sensor ECU is a blind spot detection sensor from Nissan Japan. A security vulnerability exists in Nissan Altima Blind Spot Detection Sensor ECU version 2022, which arises from an unprotected UDS session in the blind spot detection sensor ECU firmware, allowi...
DEBIAN-CVE-2023-20584
IOMMU improperly handles certain special address ranges with invalid device table entries DTEs, which may allow an attacker with privileges and a compromised Hypervisor to induce DTE faults to bypass RMP checks in SEV-SNP, potentially leading to a loss of guest integrity...
AMD Uninitialized GPU Register Access Advisory - Lenovo Support US
No description provided...
CVE-2024-41711: Improper Neutralization of Argument Delimiters in a Command
A vulnerability in the Mitel 6800 Series, 6900 Series, and 6900w Series SIP Phones, including the 6970 Conference Unit, through R6.4.0.HF1 R6.4.0.136 could allow an unauthenticated attacker with physical access to the phone to conduct an argument injection attack, due to insufficient parameter...
PT-2024-29530
Name of the Vulnerable Software and Affected Versions Mitel 6800 Series, 6900 Series, and 6900w Series SIP Phones, including the 6970 Conference Unit, versions through R6.4.0.HF1 R6.4.0.136 Description A vulnerability in the Mitel SIP Phones could allow an unauthenticated attacker with physical...
CVE-2024-41710: Improper Neutralization of Argument Delimiters in a Command
A vulnerability in the Mitel 6800 Series, 6900 Series, and 6900w Series SIP Phones, including the 6970 Conference Unit, through R6.4.0.HF1 R6.4.0.136 could allow an authenticated attacker with administrative privilege to conduct an argument injection attack, due to insufficient parameter...
kernel: drm/ast: Fix soft lockup
CVE-2024-35952 describes an issue in the Linux kernel's AST graphics driver. The problem occurs in the astdpsetonoff function, where a lack of proper synchronization with the DisplayPort Microcontroller Unit DPMCU can result in an infinite loop. This can cause a "soft lockup" in the host system,...
kernel: wifi: cfg80211: check A-MSDU format more carefully
A flaw was found in the Linux kernel's cfg80211 wireless subsystem. When parsing an Aggregate MAC Service Data Unit A-MSDU, insufficient validation of subframe headers can cause an out-of-bounds memory read. An attacker within wireless network range transmitting specially crafted frames could...
kernel: drm/ast: Fix soft lockup
CVE-2024-35952 describes an issue in the Linux kernel's AST graphics driver. The problem occurs in the astdpsetonoff function, where a lack of proper synchronization with the DisplayPort Microcontroller Unit DPMCU can result in an infinite loop. This can cause a "soft lockup" in the host system,...
SUSE CVE-2024-42146
In the Linux kernel, the following vulnerability has been resolved: drm/xe: Add outer runtimepm protection to xelivektest@xedmabuf Any kunit doing any memory access should get their own runtimepm outer references since they don't use the standard driver API entries. In special this dmabuf from th...
DEBIAN-CVE-2024-7544
oFono SimToolKit Heap-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to execute arbitrary code on affected installations of oFono. An attacker must first obtain the ability to execute code on the target modem in order to exploit this...