PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2024 document archive · 28

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

4,167 documents · Identifier year 2024 · 28 / 84

  1. CVE-2024-47671kernel: USB: usbtmc: prevent kernel-usb-infoleak
  2. CVE-2024-47670kernel: ocfs2: add bounds checking to ocfs2_xattr_find_entry()
  3. CVE-2024-47669kernel: nilfs2: fix state management in error path of log writing function
  4. CVE-2024-47668kernel: lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
  5. CVE-2024-47667kernel: PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
  6. CVE-2024-47666kernel: scsi: pm80xx: Set phy->enable_completion only when we wait for it
  7. CVE-2024-47665kernel: i3c: mipi-i3c-hci: Error out instead on BUG_ON() in IBI DMA setup
  8. CVE-2024-47664kernel: spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
  9. CVE-2024-47663kernel: staging: iio: frequency: ad9834: Validate frequency parameter value
  10. CVE-2024-47662kernel: drm/amd/display: Remove register from DCN35 DMCUB diagnostic collection
  11. CVE-2024-47661kernel: drm/amd/display: Avoid overflow from uint32_t to uint8_t
  12. CVE-2024-47660kernel: fsnotify: clear PARENT_WATCHED flags lazily
  13. CVE-2024-47659kernel: smack: tcp: ipv4, fix incorrect labeling
  14. CVE-2024-47658kernel: crypto: stm32/cryp - call finalize with bh disabled
  15. CVE-2024-47615gstreamer1-plugins-base: out-of-bounds write in Ogg demuxer
  16. CVE-2024-47613gstreamer1-plugins-good: null pointer dereference in gst_gdk_pixbuf_dec_flush
  17. CVE-2024-47611xz: XZ Utils on Microsoft Windows platform are vulnerable to argument injection
  18. CVE-2024-47607gstreamer1-plugins-base: stack-buffer overflow in gst_opus_dec_parse_header
  19. CVE-2024-47606gstreamer1-plugins-good: integer overflows in MP4/MOV demuxer and memory allocator that can lead to out-of-bounds writes
  20. CVE-2024-47603gstreamer1-plugins-good: NULL-pointer dereference in Matroska/WebM demuxer
  21. CVE-2024-47602gstreamer1-plugins-good: NULL-pointer dereferences and out-of-bounds reads in Matroska/WebM demuxer
  22. CVE-2024-47601gstreamer1-plugins-good: NULL-pointer dereference in Matroska/WebM demuxer
  23. CVE-2024-47600gstreamer1-plugins-base: GStreamer has an OOB-read in format_channel_mask
  24. CVE-2024-47599gstreamer1-plugins-good: insufficient error handling in JPEG decoder that can lead to NULL-pointer dereferences
  25. CVE-2024-47598gstreamer1-plugins-good: OOB-read in qtdemux_merge_sample_table
  26. CVE-2024-47597gstreamer1-plugins-good: OOB-read in qtdemux_parse_samples
  27. CVE-2024-47596gstreamer1-plugins-good: OOB-read in FOURCC_SMI_ parsing
  28. CVE-2024-47554apache-commons-io: Possible denial of service attack on untrusted input to XmlStreamReader
  29. CVE-2024-47546gstreamer1-plugins-good: integer underflow in extract_cc_from_data leading to OOB-read
  30. CVE-2024-47545gstreamer1-plugins-good: integer underflow in FOURCC_strf parsing leading to OOB-read
  31. CVE-2024-47544gstreamer1-plugins-good: NULL-pointer dereferences in MP4/MOV demuxer CENC handling
  32. CVE-2024-47543gstreamer1-plugins-good: OOB-read in qtdemux_parse_container
  33. CVE-2024-47542gstreamer1-plugins-base: ID3v2 parser out-of-bounds read and NULL-pointer dereference
  34. CVE-2024-47541gstreamer1-plugins-base: GStreamer has an out-of-bounds write in SSA subtitle parser
  35. CVE-2024-47540gstreamer1-plugins-good: uninitialized stack memory in Matroska/WebM demuxer
  36. CVE-2024-47539gstreamer1-plugins-good: OOB-write in convert_to_s334_1a
  37. CVE-2024-47538gstreamer1-plugins-base: GStreamer has a stack-buffer overflow in vorbis_handle_identification_packet
  38. CVE-2024-47537gstreamer1-plugins-good: OOB-write in isomp4/qtdemux.c
  39. CVE-2024-47408kernel: net/smc: check smcd_v2_ext_offset when receiving proposal msg
  40. CVE-2024-47252httpd: insufficient escaping of user-supplied data in mod_ssl
  41. CVE-2024-47220WEBrick: HTTP request smuggling
  42. CVE-2024-47176cups-browsed: cups-browsed binds on UDP INADDR_ANY:631 trusting any packet from any source
  43. CVE-2024-47175cups: libppd: remote command injection via attacker controlled data in PPD file
  44. CVE-2024-47143kernel: dma-debug: fix a possible deadlock on radix_lock
  45. CVE-2024-47141kernel: pinmux: Use sequential access to access desc->pinmux data
  46. CVE-2024-47081requests: Requests vulnerable to .netrc credentials leak via malicious URLs
  47. CVE-2024-47076cups-filters: libcupsfilters: `cfGetPrinterAttributes` API does not perform sanitization on returned IPP attributes
  48. CVE-2024-47068rollup: DOM Clobbering Gadget found in rollup bundled scripts that leads to XSS
  49. CVE-2024-46981redis: Redis' Lua library commands may lead to remote code execution
  50. CVE-2024-46956ghostscript: Out-of-Bounds Data Access in Ghostscript Leads to Arbitrary Code Execution
CVE 2024 document archive — Page 28 | PulseLinux