PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2024 document archive · 33

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

4,167 documents · Identifier year 2024 · 33 / 84

  1. CVE-2024-46673kernel: scsi: aacraid: Fix double-free on probe failure
  2. CVE-2024-46672kernel: wifi: brcmfmac: cfg80211: Handle SSID based pmksa deletion
  3. CVE-2024-46544mod_jk: information Disclosure / DoS
  4. CVE-2024-46292mod_security: denial of service via name paramter
  5. CVE-2024-45993giflib: heap buffer overflow via gif2rgb
  6. CVE-2024-45828kernel: i3c: mipi-i3c-hci: Mask ring interrupts before ring stop request
  7. CVE-2024-45802squid: Squid: Denial of Service via crafted ESI response content
  8. CVE-2024-45801dompurify: XSS vulnerability via prototype pollution
  9. CVE-2024-45783grub2: fs/hfs+: refcount can be decremented twice
  10. CVE-2024-45782grub2: fs/hfs: strcpy() using the volume name (fs/hfs.c:382)
  11. CVE-2024-45781grub2: fs/ufs: OOB write in the heap
  12. CVE-2024-45780grub2: fs/tar: Integer Overflow causes Heap OOB Write
  13. CVE-2024-45779grub2: fs/bfs: Integer overflow leads to Heap OOB Read in the BFS parser
  14. CVE-2024-45778grub2: fs/bfs: Integer overflow in the BFS parser.
  15. CVE-2024-45777grub2: grub-core/gettext: Integer overflow leads to Heap OOB Write.
  16. CVE-2024-45776grub2: grub-core/gettext: Integer overflow leads to Heap OOB Write and Read.
  17. CVE-2024-45775grub2: commands/extcmd: Missing check for failed allocation
  18. CVE-2024-45774grub2: reader/jpeg: Heap OOB Write during JPEG parsing
  19. CVE-2024-45770pcp: pmpost symlink attack allows escalating pcp to root user
  20. CVE-2024-45769pcp: pmcd heap corruption through metric pmstore operations
  21. CVE-2024-45620libopensc: Incorrect handling of the length of buffers or files in pkcs15init
  22. CVE-2024-45619libopensc: Incorrect handling length of buffers or files in libopensc
  23. CVE-2024-45618libopensc: Uninitialized values after incorrect or missing checking return values of functions in pkcs15init
  24. CVE-2024-45617libopensc: Uninitialized values after incorrect or missing checking return values of functions in libopensc
  25. CVE-2024-45616libopensc: Uninitialized values after incorrect check or usage of APDU response values in libopensc
  26. CVE-2024-45615libopensc: pkcs15init: Usage of uninitialized values in libopensc and pkcs15init
  27. CVE-2024-45614rubygem-puma: Header normalization allows for client to clobber proxy set headers
  28. CVE-2024-45590body-parser: Denial of Service Vulnerability in body-parser
  29. CVE-2024-45506haproxy: potential infinite loop condition in the h2_send() may trigger a DoS
  30. CVE-2024-45492libexpat: integer overflow
  31. CVE-2024-45491libexpat: Integer Overflow or Wraparound
  32. CVE-2024-45490libexpat: Negative Length Parsing Vulnerability in libexpat
  33. CVE-2024-45341golang: crypto/x509: crypto/x509: usage of IPv6 zone IDs can bypass URI name constraints
  34. CVE-2024-45338golang.org/x/net/html: Non-linear parsing of case-insensitive content in golang.org/x/net/html
  35. CVE-2024-45337golang.org/x/crypto/ssh: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto
  36. CVE-2024-45336golang: net/http: net/http: sensitive headers incorrectly sent after cross-domain redirect
  37. CVE-2024-45332microcode_ctl: Exposure of sensitive information
  38. CVE-2024-45321perl-App-cpanminus: Insecure HTTP in App::cpanminus Allows Code Execution Vulnerability
  39. CVE-2024-45310runc: runc can be tricked into creating empty files/directories on host
  40. CVE-2024-45306vim: heap-buffer-overflow in Vim
  41. CVE-2024-45296path-to-regexp: Backtracking regular expressions cause ReDoS
  42. CVE-2024-45030kernel: igb: cope with large MAX_SKB_FRAGS
  43. CVE-2024-45029kernel: i2c: tegra: Do not mark ACPI devices as irq safe
  44. CVE-2024-45028kernel: mmc: mmc_test: Fix NULL dereference on allocation failure
  45. CVE-2024-45027kernel: usb: xhci: Check for xhci->interrupters being allocated in xhci_mem_clearup()
  46. CVE-2024-45026kernel: s390/dasd: fix error recovery leading to data corruption on ESE devices
  47. CVE-2024-45025kernel: fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
  48. CVE-2024-45024kernel: mm/hugetlb: fix hugetlb vs. core-mm PT locking
  49. CVE-2024-45023kernel: md/raid1: Fix data corruption for degraded array with slow disk
  50. CVE-2024-45022kernel: mm/vmalloc: fix page mapping if vm_area_alloc_pages() with high order fallback to order 0
CVE 2024 document archive — Page 33 | PulseLinux