PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2024 document archive · 11

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

4,167 documents · Identifier year 2024 · 11 / 84

  1. CVE-2024-56372kernel: net: tun: fix tun_napi_alloc_frags()
  2. CVE-2024-56369kernel: drm/modes: Avoid divide by zero harder in drm_mode_vrefresh()
  3. CVE-2024-56368kernel: ring-buffer: Fix overflow in __rb_map_vma
  4. CVE-2024-56337tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation
  5. CVE-2024-56332next.js: Next.js Vulnerable to Denial of Service (DoS) with Server Actions
  6. CVE-2024-56326jinja2: Jinja has a sandbox breakout through indirect reference to format method
  7. CVE-2024-56201jinja2: Jinja has a sandbox breakout through malicious filenames
  8. CVE-2024-56171libxml2: Use-After-Free in libxml2
  9. CVE-2024-56161kernel: hw:amd: Vulnerability in guest VM protected by SEV when loading malicious firmware
  10. CVE-2024-55916kernel: Drivers: hv: util: Avoid accessing a ringbuffer not initialized yet
  11. CVE-2024-55881kernel: KVM: x86: Play nice with protected guests in complete_hypercall_exit()
  12. CVE-2024-55642kernel: block: Prevent potential deadlocks in zone write plug error recovery
  13. CVE-2024-55641kernel: xfs: unlock inodes when erroring out of xfs_trans_alloc_dir
  14. CVE-2024-55639kernel: net: renesas: rswitch: avoid use-after-put for a device tree node
  15. CVE-2024-55565nanoid: nanoid mishandles non-integer values
  16. CVE-2024-55553frr: DoS via repeated RIB revalidation
  17. CVE-2024-55549libxslt: Use-After-Free in libxslt (xsltGetInheritedNsList)
  18. CVE-2024-54683kernel: netfilter: IDLETIMER: Fix for possible ABBA deadlock
  19. CVE-2024-54680kernel: smb: client: fix TCP timers deadlock after rmmod
  20. CVE-2024-54677tomcat: Apache Tomcat: DoS in examples web application
  21. CVE-2024-54661socat: arbitrary file overwrite via predictable /tmp directory
  22. CVE-2024-54658webkitgtk: Processing web content may lead to a denial-of-service
  23. CVE-2024-54551webkitgtk: Processing web content may lead to a denial-of-service
  24. CVE-2024-54543webkitgtk: Processing maliciously crafted web content may lead to memory corruption
  25. CVE-2024-54534webkit: Processing maliciously crafted web content may lead to memory corruption
  26. CVE-2024-54508webkit: Processing maliciously crafted web content may lead to an unexpected process crash
  27. CVE-2024-54505webkit: Processing maliciously crafted web content may lead to memory corruption
  28. CVE-2024-54502webkit: Processing maliciously crafted web content may lead to an unexpected process crash
  29. CVE-2024-54479WebKitGTK: Processing maliciously crafted web content may lead to an unexpected process crash
  30. CVE-2024-54467webkitgtk: A malicious website may exfiltrate data cross-origin
  31. CVE-2024-54460kernel: Bluetooth: iso: Fix circular lock in iso_listen_bis
  32. CVE-2024-54458kernel: scsi: ufs: bsg: Set bsg_queue to NULL after removal
  33. CVE-2024-54456kernel: NFS: Fix potential buffer overflowin nfs_sysfs_link_rpc_client()
  34. CVE-2024-54455kernel: accel/ivpu: Fix general protection fault in ivpu_bo_list()
  35. CVE-2024-54193kernel: accel/ivpu: Fix WARN in ivpu_ipc_send_receive_internal()
  36. CVE-2024-54191kernel: Bluetooth: iso: Fix circular lock in iso_conn_big_sync
  37. CVE-2024-54159stalld: denial of service
  38. CVE-2024-54031kernel: netfilter: nft_set_hash: unaligned atomic read on struct nft_set_ext
  39. CVE-2024-53920emacs: arbitrary code execution via Lisp macro expansion
  40. CVE-2024-53899virtualenv: potential command injection via virtual environment activation scripts
  41. CVE-2024-53861pyjwt: Issuer field partial matches allowed in pyjwt
  42. CVE-2024-53690kernel: nilfs2: prevent use of deleted inode
  43. CVE-2024-53689kernel: block: Fix potential deadlock while freezing queue and acquiring sysfs_lock
  44. CVE-2024-53687kernel: riscv: Fix IPIs usage in kfence_protect_page()
  45. CVE-2024-53685kernel: ceph: give up on paths longer than PATH_MAX
  46. CVE-2024-53682kernel: regulator: axp20x: AXP717: set ramp_delay
  47. CVE-2024-53681kernel: nvmet: Don't overflow subsysnqn
  48. CVE-2024-53680kernel: ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init()
  49. CVE-2024-53589binutils: objdump: buffer Overflow in the BFD library's handling of tekhex format files
  50. CVE-2024-53580iperf: Denial of Service in iperf Due to Improper JSON Handling
CVE 2024 document archive — Page 11 | PulseLinux