PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2024 document archive · 38

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

4,167 documents · Identifier year 2024 · 38 / 84

  1. CVE-2024-43485dotnet: Denial of Service in System.Text.Json
  2. CVE-2024-43484dotnet: System.IO.Packaging - Multiple DoS vectors in use of SortedList
  3. CVE-2024-43483dotnet: Multiple .NET components susceptible to hash flooding
  4. CVE-2024-43420microcode_ctl: Exposure of sensitive information
  5. CVE-2024-43402rust: Rust standard library did not properly escape arguments when invoking batch files on Windows using the Command API
  6. CVE-2024-43398rexml: DoS vulnerability in REXML
  7. CVE-2024-43394httpd: Apache HTTP Server: SSRF on Windows due to UNC paths
  8. CVE-2024-43374vim: use-after-free in alist_add() in src/arglist.c
  9. CVE-2024-43204httpd: SSRF in Apache HTTP Server with mod_proxy loaded
  10. CVE-2024-43168unbound: Heap-Buffer-Overflow in Unbound
  11. CVE-2024-43167unbound: NULL Pointer Dereference in Unbound
  12. CVE-2024-43098kernel: i3c: Use i3cdev->desc->info instead of calling i3c_device_get_info() to avoid deadlock
  13. CVE-2024-42934openipmi: missing check on the authorization type on incoming LAN messages in IPMI simulator
  14. CVE-2024-42861linuxptp: denial of service via a crafted Pdelay_Req message to the time synchronization function
  15. CVE-2024-42516httpd: incomplete fix for CVE-2023-38709
  16. CVE-2024-42472flatpak: Access to files outside sandbox for apps using persistent= (--persist)
  17. CVE-2024-42461elliptic: nodejs/elliptic: ECDSA implementation malleability due to BER-enconded signatures being allowed
  18. CVE-2024-42460elliptic: nodejs/elliptic: ECDSA signature malleability due to missing checks
  19. CVE-2024-42459elliptic: nodejs/elliptic: EDDSA signature malleability due to missing signature length check
  20. CVE-2024-42415libgsf: Compound Document Binary File Sector Allocation Table integer overflow vulnerability
  21. CVE-2024-42368bearertokenauthextension: Observable Timing Discrepancy in github.com/open-telemetry/opentelemetry-collector-contrib/extension/bearertokenauthextension
  22. CVE-2024-42353webob: WebOb's location header normalization during redirect leads to open redirect
  23. CVE-2024-42322kernel: ipvs: properly dereference pe in ip_vs_add_service
  24. CVE-2024-42321kernel: net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
  25. CVE-2024-42320kernel: s390/dasd: fix error checks in dasd_copy_pair_store()
  26. CVE-2024-42319kernel: mailbox: mtk-cmdq: Move devm_mbox_controller_register() after devm_pm_runtime_enable()
  27. CVE-2024-42318kernel: landlock: Don't lose track of restrictions on cred_transfer
  28. CVE-2024-42317kernel: mm/huge_memory: avoid PMD-size page cache if needed
  29. CVE-2024-42316kernel: mm/mglru: fix div-by-zero in vmpressure_calc_level()
  30. CVE-2024-42315kernel: exfat: fix potential deadlock on __exfat_get_dentry_set
  31. CVE-2024-42314kernel: btrfs: fix extent map use-after-free when adding pages to compressed bio
  32. CVE-2024-42313kernel: media: venus: fix use after free in vdec_close
  33. CVE-2024-42312kernel: sysctl: always initialize i_uid/i_gid
  34. CVE-2024-42311kernel: hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
  35. CVE-2024-42310kernel: drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
  36. CVE-2024-42309kernel: drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
  37. CVE-2024-42307kernel: cifs: fix potential null pointer use in destroy_workqueue in init_cifs error path
  38. CVE-2024-42306kernel: udf: Avoid using corrupted block bitmap buffer
  39. CVE-2024-42305kernel: ext4: check dot and dotdot of dx_root before making dir indexed
  40. CVE-2024-42304kernel: ext4: make sure the first directory block is not a hole
  41. CVE-2024-42303kernel: media: imx-pxp: Fix ERR_PTR dereference in pxp_probe()
  42. CVE-2024-42302kernel: PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
  43. CVE-2024-42301kernel: dev/parport: fix the array out-of-bounds risk
  44. CVE-2024-42300kernel: erofs: fix race in z_erofs_get_gbuf()
  45. CVE-2024-42299kernel: fs/ntfs3: Update log->page_{mask,bits} if log->page_size changed
  46. CVE-2024-42298kernel: ASoC: fsl: fsl_qmc_audio: Check devm_kasprintf() returned value
  47. CVE-2024-42297kernel: f2fs: fix to don't dirty inode for readonly filesystem
  48. CVE-2024-42296kernel: f2fs: fix return value of f2fs_convert_inline_inode()
  49. CVE-2024-42295kernel: nilfs2: handle inconsistent state in nilfs_btnode_create_block()
  50. CVE-2024-42294kernel: block: fix deadlock between sd_remove & sd_release
CVE 2024 document archive — Page 38 | PulseLinux