CVE 2024 document archive · 58
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
4,167 documents · Identifier year 2024 · 58 / 84
- CVE-2024-35801kernel: x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- CVE-2024-35800kernel: efi: fix panic in kdump kernel
- CVE-2024-35799kernel: drm/amd/display: Prevent crash when disable stream
- CVE-2024-35798kernel: btrfs: fix race in read_extent_buffer_pages()
- CVE-2024-35797kernel: mm: cachestat: fix two shmem bugs
- CVE-2024-35796kernel: net: ll_temac: platform_get_resource replaced by wrong function
- CVE-2024-35795kernel: drm/amdgpu: fix deadlock while reading mqd from debugfs
- CVE-2024-35794kernel: dm-raid: really frozen sync_thread during suspend
- CVE-2024-35793kernel: debugfs: fix wait/cancellation handling during remove
- CVE-2024-35792kernel: crypto: rk3288 - Fix use after free in unprepare
- CVE-2024-35791kernel: KVM: SVM: Flush pages under kvm->lock to fix UAF in svm_register_enc_region()
- CVE-2024-35790kernel: usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- CVE-2024-35789kernel: wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes
- CVE-2024-35787kernel: md/md-bitmap: fix incorrect usage for sb_index
- CVE-2024-35786kernel: drm/nouveau: fix stale locked mutex in nouveau_gem_ioctl_pushbuf
- CVE-2024-35785kernel: tee: optee: Fix kernel panic caused by incorrect error handling
- CVE-2024-35784kernel: btrfs: fix deadlock with fiemap and extent locking
- CVE-2024-35329libyaml: vulnerable to a heap-based Buffer Overflow in yaml_document_add_sequence in api.c
- CVE-2024-35325libyaml: double-free in yaml_event_delete in /src/libyaml/src/api.c
- CVE-2024-35264dotnet: DoS in ASP.NET Core 8
- CVE-2024-35247kernel: fpga: region: add owner module and take its refcount
- CVE-2024-35235cups: Cupsd Listen arbitrary chmod 0140777
- CVE-2024-35200nginx: undisclosed HTTP/3 requests can cause NGINX worker processes to terminate
- CVE-2024-35195requests: subsequent requests to the same host ignore cert verification
- CVE-2024-35176REXML: DoS parsing an XML with many ` < `s in an attribute value
- CVE-2024-34777kernel: dma-mapping: benchmark: fix node id validation
- CVE-2024-34750tomcat: Improper Handling of Exceptional Conditions
- CVE-2024-34459libxml2: buffer over-read in xmlHTMLPrintFileContext in xmllint.c
- CVE-2024-34403uriparser: integer overflow via a long string in ComposeQueryMallocExMm() in UriQuery.c
- CVE-2024-34402uriparser: integer overflow via long keys or values in ComposeQueryEngine() in UriQuery.c
- CVE-2024-34397glib2: Signal subscription vulnerabilities
- CVE-2024-34161nginx: undisclosed QUIC packets can cause NGINX worker processes to leak previously freed memory
- CVE-2024-34158go/build/constraint: golang: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion
- CVE-2024-34156encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion
- CVE-2024-34155go/parser: golang: Calling any of the Parse functions containing deeply nested literals can cause a panic/stack exhaustion
- CVE-2024-34088frr: null pointer via get_edge() function can trigger a denial of service
- CVE-2024-34069python-werkzeug: user may execute code on a developer's machine
- CVE-2024-34064jinja2: accepts keys containing non-attribute characters
- CVE-2024-34062python-tqdm: non-boolean CLI arguments may lead to local code execution
- CVE-2024-34055cyrus-imapd: unbounded memory allocation by sending many LITERALs in a single command
- CVE-2024-34030kernel: PCI: of_property: Return error for int_map allocation failure
- CVE-2024-34027kernel: f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- CVE-2024-33871ghostscript: OPVP device arbitrary code execution via custom Driver library
- CVE-2024-33870ghostscript: path traversal to arbitrary files if the current directory is in the permitted paths
- CVE-2024-33869ghostscript: path traversal and command execution due to path reduction
- CVE-2024-33847kernel: f2fs: compress: don't allow unaligned truncation on released compress inode
- CVE-2024-33655unbound: DNSBomb vulnerability
- CVE-2024-33621kernel: ipvlan: Dont Use skb->sk in ipvlan_process_v{4,6}_outbound
- CVE-2024-33619kernel: efi: libstub: only free priv.runtime_map when allocated
- CVE-2024-33602glibc: netgroup cache assumes NSS callback uses in-buffer strings