CVE-2024-26458

The Kerberos 5 (krb5) library, specifically version 1.21.2 , is affected by a memory leak vulnerability located in the /krb5/src/lib/rpc/pmap_rmt.c file. This issue can lead to resource exhaustion over time. Several distributions have released patches to address this vulnerability: Amazon Linux 2...

CVE-2024-26461

The Kerberos 5 (krb5) 1.21.2 software contains a memory leak vulnerability in the file /krb5/src/lib/gssapi/krb5/k5sealv3.c. This issue impacts various distributions, including Astra Linux , AlmaLinux , and Amazon Linux 2/2023 . Practical remediation involves updating the krb5 package to a patche...

CVE-2024-38475

CVE-2024-38475 affects Apache HTTP Server 2.4.59 and earlier, where improper escaping of output in mod_rewrite can map URLs to filesystem locations that are served but not directly reachable, enabling remote code execution or source code disclosure. The issue also involves substitutions in server...

CVE-2024-6119

OpenSSL CVE-2024-6119 causes a denial of service when applications perform certificate name checks (e.g., TLS server name validation). The issue stems from reading an invalid memory address during name comparison (e.g., otherName in X.509) and may terminate the process. Multiple connected advisor...

CVE-2022-42915

CVE-2022-42915 affects curl. A double-free can occur in curl 7.77.0 and later when using an HTTP proxy for non-HTTP(S) URLs, if the proxy returns a non-200 status and the URL uses schemes such as dict, gopher, gophers, ldap, ldaps, rtmp, rtmps, or telnet. The error/cleanup path may trigger the me...

CVE-2023-27535

CVE-2023-27535 affects libcurl

CVE-2024-53580

The iperf network performance tool (specifically iperf3 ) is vulnerable to a denial of service (DoS) condition due to improper JSON handling and a segmentation violation within the iperf_exchange_parameters() function. This vulnerability can cause the server process to stop responding or crash. A...