24590 matches found
A vulnerability was found in DPDK versions 18.11 and above
...
atm: clip: Fix NULL pointer dereference in vcc_sendmsg()
...
OS Command injection vulnerability in sleuthkit fls tool 4.11.1 allows attackers to execute arbitrary commands via a crafted value to the m parameter. NOTE: third parties have disputed this because there is no analysis showing that the backtick command executes outside the context of the user account that entered the command line.
...
md/raid1,raid10: don't ignore IO flags
...
drm/amd/display: Check denominator crb_pipes before used
...
GNU GRUB (aka GRUB2) through 2.12 has a heap-based buffer overflow in fs/hfs.c via crafted sblock data in an HFS filesystem.
...
bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT
...
rose: fix dangling neighbour pointers in rose_rt_device_down()
...
libtiff tiff2ps tiff2ps.c PS_Lvl2page null pointer dereference
...
drm/amd/display: Initialize denominators' default to 1
...
HDF5 H5Cimage.c H5C__reconstruct_cache_entry heap-based overflow
...
net: fix NULL pointer dereference in l3mdev_l3_rcv
...
Stack exhaustion in Parse in go/build/constraint
...
In Emacs before 29.3, LaTeX preview is enabled by default for e-mail attachments.
...
ksmbd: fix potential use-after-free in oplock/lease break ack
...
LibTIFF tiffcmp tiffcmp.c InitCCITTFax3 memory leak
...
shadow-utils (aka shadow) 4.4 through 4.17.0 establishes a default /etc/subuid behavior (e.g., uid 100000 through 165535 for the first user account) that can realistically conflict with the uids of users defined on locally administered networks, potentially leading to account takeover, e.g., by leveraging newuidmap for access to an NFS home directory (or same-host resources in the case of remote logins by these local network users). NOTE: it may also be argued that system administrators should not have assigned uids, within local networks, that are within the range that can occur in /etc/subuid.
...
mm/khugepaged: fix ->anon_vma race
...
bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
...
Mbed TLS before 2.28.10 and 3.x before 3.6.3, on the client side, accepts servers that have trusted certificates for arbitrary hostnames unless the TLS client application calls mbedtls_ssl_set_hostname.
...
perf: Revert to requiring CAP_SYS_ADMIN for uprobes
...
bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
...
xdp: fix invalid wait context of page_pool_destroy()
...
Denial of Service through Data corruption in gRPC-C++
...
webpack-dev-server users' source code may be stolen when they access a malicious web site
...
virtio_net: Fix napi_skb_cache_put warning
...
HDF5 H5Faccum.c H5F__accum_free heap-based overflow
...
x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
...
erofs: handle overlapped pclusters out of crafted images properly
...
Segmentation fault in fax3encode in libtiff/tif_fax3.c
...
media: pvrusb2: fix uaf in pvr2_context_set_notify
...
net: dsa: improve shutdown sequence
...
Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets
...
An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with a failed length check at nfs_read_reply when calling store_block in the NFSv2 case.
...
watchdog: Fix possible use-after-free in wdt_startup()
...
hw/pci/pcie_sriov.c in QEMU through 10.0.3 has a migration state inconsistency, a related issue to CVE-2024-26327.
...
MariaDB Server 10.4 through 10.5.*, 10.6 through 10.6.*, 10.7 through 10.11.*, and 11.0 through 11.0.* can sometimes crash with an empty backtrace log. This may be related to make_aggr_tables_info and optimize_stage2.
...
serial: sc16is7xx: fix invalid FIFO access with special register set
...
hw/pci/pcie_sriov.c in QEMU through 10.0.3 mishandles the VF Enable bit write mask, a related issue to CVE-2024-26327.
...
MariaDB Server 10.4 through 10.5.*, 10.6 through 10.6.*, 10.7 through 10.11.*, 11.0 through 11.0.*, and 11.1 through 11.4.* crashes in Item_direct_view_ref::derived_field_transformer_for_where.
...
HDF5 H5FScache.c H5FS__sinfo_Srialize_Sct_cb heap-based overflow
...
ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find()
...
Insufficient validation in the Drag and Drop API in conjunction with social engineering, may have allowed an attacker to trick end-users into creating a shortcut to local system files. This could have been leveraged to execute arbitrary code. This vulnerability affects Firefox < 115.
...
An issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this nfs_handler reply helper function: nfs_lookup_reply.
...
HDF5 H5HLcache.c H5HL__fl_deserialize heap-based overflow
...
ipv6: Fix signed integer overflow in __ip6_append_data
...
memcg: fix soft lockup in the OOM process
...
An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy when parsing a UDP packet due to a net_process_received_packet integer underflow during an *udp_packet_handler call.
...