PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2024 document archive · 16

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

4,167 documents · Identifier year 2024 · 16 / 84

  1. CVE-2024-53042kernel: ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_init_flow()
  2. CVE-2024-53008HAProxy: HTTP request smuggling in HAProxy
  3. CVE-2024-52949iptraf-ng: buffer overflow via ifaces.c
  4. CVE-2024-52811ngtcp2: Acks not validated before logged to qlog leads to buffer overflow in ngtcp2
  5. CVE-2024-52804python-tornado: Tornado has HTTP cookie parsing DoS vulnerability
  6. CVE-2024-52798path-to-regexp: path-to-regexp Unpatched `path-to-regexp` ReDoS in 0.1.x
  7. CVE-2024-52616avahi: Avahi Wide-Area DNS Predictable Transaction IDs
  8. CVE-2024-52615avahi: Avahi Wide-Area DNS Uses Constant Source Port
  9. CVE-2024-52560kernel: fs/ntfs3: Mark inode as bad as soon as error detected in mi_enum_attr()
  10. CVE-2024-52559kernel: drm/msm/gem: prevent integer overflow in msm_ioctl_gem_submit()
  11. CVE-2024-52557kernel: drm: zynqmp_dp: Fix integer overflow in zynqmp_dp_rate_get()
  12. CVE-2024-52533glib: buffer overflow in set_connect_msg()
  13. CVE-2024-52532libsoup: infinite loop while reading websocket data
  14. CVE-2024-52531libsoup: buffer overflow via UTF-8 conversion in soup_header_parse_param_list_strict
  15. CVE-2024-52530libsoup: HTTP request smuggling via stripping null bytes from the ends of header names
  16. CVE-2024-52337tuned: improper sanitization of `instance_name` parameter of the `instance_create()` method
  17. CVE-2024-52336tuned: `script_pre` and `script_post` options allow to pass arbitrary scripts executed by root
  18. CVE-2024-52332kernel: igb: Fix potential invalid memory access in igb_init_module()
  19. CVE-2024-52319kernel: mm: use aligned address in clear_gigantic_page()
  20. CVE-2024-52318tomcat: incorrect JSP tag recycling leads to XSS
  21. CVE-2024-52317tomcat: Apache Tomcat: Request/response mix-up with HTTP/2
  22. CVE-2024-52316tomcat: Apache Tomcat: Authentication bypass when using Jakarta Authentication API
  23. CVE-2024-52006git: Newline confusion in credential helpers can lead to credential exfiltration in git
  24. CVE-2024-52005git: The sideband payload is passed unfiltered to the terminal in git
  25. CVE-2024-51744golang-jwt: Bad documentation of error handling in ParseWithClaims can lead to potentially dangerous situations in golang-jwt
  26. CVE-2024-51741redis: Redis allows denial-of-service due to malformed ACL selectors
  27. CVE-2024-51729kernel: mm: use aligned address in copy_user_gigantic_page()
  28. CVE-2024-51479next.js: next: authorization bypass in Next.js
  29. CVE-2024-50614tinyxml2: reachable assertion in GetCharacterRef()
  30. CVE-2024-50613libsndfile: Reachable assertion in mpeg_l3_encoder_close
  31. CVE-2024-50612libsndfile: Segmentation fault error in ogg_vorbis.c:417 vorbis_analysis_wrote()
  32. CVE-2024-50610gsl: integer overflow in gsl/siman/siman.c
  33. CVE-2024-50602libexpat: expat: DoS via XML_ResumeParser
  34. CVE-2024-50379tomcat: RCE due to TOCTOU issue in JSP compilation
  35. CVE-2024-50349git: Git does not sanitize URLs when asking for credentials interactively
  36. CVE-2024-50304kernel: ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find()
  37. CVE-2024-50303kernel: resource,kexec: walk_system_ram_res_rev must retain resource flags
  38. CVE-2024-50302kernel: HID: core: zero-initialize the report buffer
  39. CVE-2024-50301kernel: security/keys: fix slab-out-of-bounds in key_task_permission
  40. CVE-2024-50300kernel: regulator: rtq2208: Fix uninitialized use of regulator_config
  41. CVE-2024-50299kernel: sctp: properly validate chunk size in sctp_sf_ootb()
  42. CVE-2024-50298kernel: net: enetc: allocate vf_state during PF probes
  43. CVE-2024-50297kernel: net: xilinx: axienet: Enqueue Tx packets in dql before dmaengine starts
  44. CVE-2024-50296kernel: net: hns3: fix kernel crash when uninstalling driver
  45. CVE-2024-50295kernel: net: arc: fix the device for dma_map_single/dma_unmap_single
  46. CVE-2024-50294kernel: rxrpc: Fix missing locking causing hanging calls
  47. CVE-2024-50293kernel: net/smc: do not leave a dangling sk pointer in __smc_create()
  48. CVE-2024-50292kernel: ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
  49. CVE-2024-50291kernel: media: dvb-core: add missing buffer index check
  50. CVE-2024-50290kernel: media: cx24116: prevent overflows on SNR calculus
CVE 2024 document archive — Page 16 | PulseLinux