PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2024 document archive · 50

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

4,167 documents · Identifier year 2024 · 50 / 84

  1. CVE-2024-38554kernel: ax25: Fix reference count leak issue of net_device
  2. CVE-2024-38553kernel: net: fec: remove .ndo_poll_controller to avoid deadlocks
  3. CVE-2024-38552kernel: drm/amd/display: Fix potential index out of bounds in color transformation function
  4. CVE-2024-38551kernel: ASoC: mediatek: Assign dummy when codec not specified for a DAI link
  5. CVE-2024-38550kernel: ASoC: kirkwood: Fix potential NULL dereference
  6. CVE-2024-38549kernel: drm/mediatek: Add 0 size check to mtk_drm_gem_obj
  7. CVE-2024-38548kernel: drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
  8. CVE-2024-38547kernel: media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
  9. CVE-2024-38546kernel: drm: vc4: Fix possible null pointer dereference
  10. CVE-2024-38545kernel: RDMA/hns: Fix UAF for cq async event
  11. CVE-2024-38544kernel: RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
  12. CVE-2024-38543kernel: lib/test_hmm.c: handle src_pfns and dst_pfns allocation failure
  13. CVE-2024-38542kernel: RDMA/mana_ib: boundary check before installing cq callbacks
  14. CVE-2024-38541kernel: of: module: add buffer overflow check in of_modalias()
  15. CVE-2024-38540kernel: bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
  16. CVE-2024-38539kernel: RDMA/cma: Fix kmemleak in rdma_core observed during blktests nvme/rdma use siw
  17. CVE-2024-38538kernel: net: bridge: xmit: make sure we have at least eth header len bytes
  18. CVE-2024-38477httpd: NULL pointer dereference in mod_proxy
  19. CVE-2024-38476httpd: Security issues via backend applications whose response headers are malicious or exploitable
  20. CVE-2024-38475httpd: Improper escaping of output in mod_rewrite
  21. CVE-2024-38474httpd: Substitution encoding issue in mod_rewrite
  22. CVE-2024-38473httpd: Encoding problem in mod_proxy
  23. CVE-2024-38472httpd: SSRF in Apache HTTP Server on Windows
  24. CVE-2024-38428wget: Misinterpretation of input may lead to improper behavior
  25. CVE-2024-38394gnome-settings-daemon: USBGuard bypass
  26. CVE-2024-38390kernel: drm/msm/a6xx: Avoid a nullptr dereference when speedbin setting fails
  27. CVE-2024-38388kernel: ALSA: hda/cs_dsp_ctl: Use private_free for control cleanup
  28. CVE-2024-38385kernel: genirq/irqdesc: Prevent use-after-free in irq_find_at_or_after()
  29. CVE-2024-38384kernel: blk-cgroup: fix list corruption from reorder of WRITE ->lqueued
  30. CVE-2024-38381kernel: nfc: nci: Fix uninit-value in nci_rx_work
  31. CVE-2024-38306kernel: btrfs: protect folio::private when attaching extent buffer folios
  32. CVE-2024-38286tomcat: Denial of Service in Tomcat
  33. CVE-2024-38229dotnet: kestrel: closing an HTTP/3 stream can cause a race condition and lead to remote code execution
  34. CVE-2024-38168dotnet8.0: (DoS) Attacker influenced crash in Http.Sys
  35. CVE-2024-38167dotnet8.0: Information disclosure vulnerability in TlsStream
  36. CVE-2024-38095dotnet: DoS when parsing X.509 Content and ObjectIdentifiers
  37. CVE-2024-38081dotnet: Elevation of Privilege in VS Installer via NuGet config file
  38. CVE-2024-37894squid: Out-of-bounds write error may lead to Denial of Service
  39. CVE-2024-37891urllib3: proxy-authorization request header is not stripped during cross-origin redirects
  40. CVE-2024-37890nodejs-ws: denial of service when handling a request with many HTTP headers
  41. CVE-2024-37535vte: Denial of service via window resize escape sequence
  42. CVE-2024-37408fprintd: unexpected actions might be authorized with fingerprint reader
  43. CVE-2024-37407libarchive: Out of bounds access in slurp_central_directory at archive_read_support_format_zip.c
  44. CVE-2024-37372nodejs: Permission model improperly processes UNC paths
  45. CVE-2024-37371krb5: GSS message token handling
  46. CVE-2024-37370krb5: GSS message token handling
  47. CVE-2024-37356kernel: tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
  48. CVE-2024-37354kernel: btrfs: fix crash on racing fsync and size-extending write into prealloc
  49. CVE-2024-37353kernel: virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
  50. CVE-2024-37298gorilla/schema: Potential memory exhaustion attack due to sparse slice deserialization
CVE 2024 document archive — Page 50 | PulseLinux