1575 matches found
CVE-2024-50274
In the Linux kernel, the following vulnerability has been resolved: idpf: avoid vport access in idpfgetlinkksettings When the device control plane is removed or the platform running device control plane is rebooted, a reset is detected on the driver. On driver reset, it releases the resources and...
CVE-2024-50289
In the Linux kernel, the following vulnerability has been resolved: media: av7110: fix a spectre vulnerability As warned by smatch: drivers/staging/media/av7110/av7110ca.c:270 dvbcaioctl warn: potential spectre issue 'av7110-cislot' w local cap There is a spectre-related vulnerability at the code...
CVE-2024-50290
In the Linux kernel, the following vulnerability has been resolved: media: cx24116: prevent overflows on SNR calculus as reported by Coverity, if reading SNR registers fail, a negative number will be returned, causing an underflow when reading SNR registers. Prevent that...
CVE-2024-50279
In the Linux kernel, the following vulnerability has been resolved: dm cache: fix out-of-bounds access to the dirty bitset when resizing dm-cache checks the dirty bits of the cache blocks to be dropped when shrinking the fast device, but an index bug in bitset iteration causes out-of-bounds acces...
CVE-2024-50296
In the Linux kernel, the following vulnerability has been resolved: net: hns3: fix kernel crash when uninstalling driver When the driver is uninstalled and the VF is disabled concurrently, a kernel crash occurs. The reason is that the two actions call function pcidisablesriov. The numVFs is check...
CVE-2024-50265
In the Linux kernel, the following vulnerability has been resolved: ocfs2: remove entry once instead of null-ptr-dereference in ocfs2xaremove Syzkaller is able to provoke null-ptr-dereference in ocfs2xaremove: 57.319872 a.out,1161,7:ocfs2xaremove:2028 ERROR: status = -12 57.320420...
GHSA-8495-4G3G-X7PR
creationtimestamp| type| source ---|---|--- 2024-11-18 20:23:14+00:00| seen| https://infosec.exchange/users/cve/statuses/113505821932526019...
CVE-2024-10390
creationtimestamp| type| source ---|---|--- 2024-11-18 16:38:37+00:00| seen| https://infosec.exchange/users/cve/statuses/113504938721653052 2024-11-18 19:03:54+00:00| seen| https://t.me/cvedetector/11369...
CVE-2024-52317
Incorrect object re-cycling and re-use vulnerability in Apache Tomcat. Incorrect recycling of the request and response used by HTTP/2 requests could lead to request and/or response mix-up between users. This issue affects Apache Tomcat: from 11.0.0-M23 through 11.0.0-M26, from 10.1.27 through...
CVE-2024-52867
guix-daemon in GNU Guix before 5ab3c4c allows privilege escalation because build outputs are accessible by local users before file metadata concerns e.g., for setuid and setgid programs are properly addressed. The vulnerability can be remediated within the product via certain pull, reconfigure, a...
CVE-2024-52522
Rclone is a command-line program to sync files and directories to and from different cloud storage providers. Insecure handling of symlinks with --links and --metadata in rclone while copying to local disk allows unprivileged users to indirectly modify ownership and permissions on symlink target...
Fedora 37 : expat (2022-c8c2e402fb)
The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-c8c2e402fb advisory. Rebase to 2.5.0 ---- Rebase to 2.4.9 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has n...
CVE-2024-50306
Unchecked return value can allow Apache Traffic Server to retain privileges on startup. This issue affects Apache Traffic Server: from 9.2.0 through 9.2.5, from 10.0.0 through 10.0.1. Users are recommended to upgrade to version 9.2.6 or 10.0.2, which fixes the issue...
Mozilla Thunderbird ESR Security Update (MFSA2024-61) - Windows
Mozilla Thunderbird ESR is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Fedora 41 : rust-hyper-rustls / rust-reqwest / rust-rustls-native-certs / etc (2024-347164df1c)
The remote Fedora 41 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2024-347164df1c advisory. - Update the hyper-rustls crate to version 0.27.3. - Update the reqwest crate to version 0.12.8. - Update the rustls-native-certs crate to version 0.8.0 and...
Fedora 41 : mingw-libxml2 (2024-6ac71752a4)
The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-6ac71752a4 advisory. Automatic update for mingw-libxml2-2.12.7-1.fc41. Changelog Thu May 16 2024 Richard W.M. Jones - 2.12.7-1 - Update to 2.12.7 RHBZ2280535, CVE-2024-34459...
Fedora 37 : firefox (2022-25e330a435)
The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-25e330a435 advisory. - Update to latest upstream 105.0.1 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has no...
Fedora 37 : rust-capnp / rust-sequoia-octopus-librnp (2022-7002ec8b22)
The remote Fedora 37 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2022-7002ec8b22 advisory. Update the capnp crate to version 0.14.11 to address CVE-2022-46149 / RUSTSEC-2022-0068. This update also includes a rebuild of the only affected application...