Buffer Over-read

Overview tornado is a Python web framework and asynchronous networking library, originally developed at FriendFeed. Affected versions of this package are vulnerable to Buffer Over-read via the websocketmask function in the speedups component. An attacker can trigger a read past the end of the mas...

Excessive Iteration

Overview tornado is a Python web framework and asynchronous networking library, originally developed at FriendFeed. Affected versions of this package are vulnerable to Excessive Iteration in the parseparam function. An attacker can cause the server to become unresponsive and consume excessive CPU...

PT-2024-32200

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.5 Description The vulnerability is related to the userfaultfd feature in the Linux kernel, specifically with the pmd trans huge code in mfill atomic. The issue arises from a racy check that can lead to a BUG ON...

OESA-2024-1162 squid security update

Squid is a high-performance proxy caching server. It handles all requests in a single, non-blocking, I/O-driven process and keeps meta data and implements negative caching of failed requests. Security Fixes: Squid is an open source caching proxy for the Web supporting HTTP, HTTPS, FTP, and more...