1299 matches found
CVE-2024-53251
REJECT DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used...
CVE-2024-53250
REJECT DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used...
CVE-2024-53249
REJECT DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used...
CVE-2024-53248
REJECT DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used...
Security Bulletin: Multiple Vulnerabilities in IBM Event Endpoint Management
Summary Multiple vulnerabilities were addressed in IBM Event Endpoint Management version 11.3.2 Vulnerability Details CVEID:CVE-2024-47176 DESCRIPTION: OpenPrinting cups-browsed could allow a remote attacker to obtain sensitive information, caused by the binding on UDP INADDRANY:631 and trusting...
kernel: zsmalloc: move LRU update from zs_map_object() to zs_malloc()
A flaw was found in the Linux kernel zsmalloc memory allocator. Under certain memory pressure and reclaim conditions, zsmalloc updated its LRU lists in an unsafe context, which could lead to list corruption due to a race between object mapping and allocation paths. A local user able to trigger...
vfs: Don't evict inode under the inode lru traversing context
...
Medium: c-ares
Issue Overview: Insufficient randomness in generation of DNS query IDs When /dev/urandom or RtlGenRandom are unavailable, c-ares uses rand to generate random numbers used for DNS query ids. This is not a CSPRNG, and it is also not seeded by srand so will generate predictable output. Input from th...
mozilla: Internal event interfaces were exposed to web content when browser EventHandler listener callbacks ran
The Mozilla Foundation's Security Advisory: Internal browser event interfaces were exposed to web content when privileged EventHandler listener callbacks ran for those events. Web content that tried to use those interfaces would not be able to use them with elevated privileges, but their presence...
mozilla: Internal event interfaces were exposed to web content when browser EventHandler listener callbacks ran
The Mozilla Foundation's Security Advisory: Internal browser event interfaces were exposed to web content when privileged EventHandler listener callbacks ran for those events. Web content that tried to use those interfaces would not be able to use them with elevated privileges, but their presence...
UBUNTU-CVE-2024-46711
In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: fix ID 0 endp usage after multiple re-creations 'localaddrused' and 'addaddraccepted' are decremented for addresses not related to the initial subflow ID0, because the source and destination addresses of the initial...
AZL-49182 CVE-2024-45010 affecting package kernel 5.15.200.1-1
In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: only mark 'subflow' endp as available Adding the following warning ... WARNONONCEmsk-pm.localaddrused == 0 ... before decrementing the localaddrused counter helped to find a bug when running the "remove single address"...
UBUNTU-CVE-2024-45010
In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: only mark 'subflow' endp as available Adding the following warning ... WARNONONCEmsk-pm.localaddrused == 0 ... before decrementing the localaddrused counter helped to find a bug when running the "remove single address"...
CVE-2024-45743
REJECT DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used...
CVE-2024-45742
REJECT DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used...
CVE-2024-45729
REJECT DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used...
CVE-2024-45728
REJECT DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used...
CVE-2024-45727
REJECT DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used...