PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2024 document archive · 59

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

4,167 documents · Identifier year 2024 · 59 / 84

  1. CVE-2024-33601glibc: netgroup cache may terminate daemon on memory allocation failure
  2. CVE-2024-33600glibc: null pointer dereferences after failed netgroup cache insertion
  3. CVE-2024-33599glibc: stack-based buffer overflow in netgroup cache
  4. CVE-2024-33427squid: buffer overread leading to denial of service
  5. CVE-2024-32936kernel: media: ti: j721e-csi2rx: Fix races while restarting DMA
  6. CVE-2024-32760nginx: undisclosed HTTP/3 encoder instructions terminate or cause or other potential impact
  7. CVE-2024-32662freerdp: out-of-bounds read
  8. CVE-2024-32661freerdp: rdp_write_logon_info_v1 NULL access
  9. CVE-2024-32660freerdp: zgfx_decompress out of memory
  10. CVE-2024-32659freerdp: freerdp_image_copy out of bound read
  11. CVE-2024-32658FreeRDP: ExtractRunLengthRegular* out of bound read
  12. CVE-2024-32487less: OS command injection
  13. CVE-2024-32465git: additional local RCE
  14. CVE-2024-32462flatpak: sandbox escape via RequestBackground portal
  15. CVE-2024-32460freerdp: OutOfBound Read in interleaved_decompress
  16. CVE-2024-32459freerdp: out-of-bounds read in ncrush_decompress
  17. CVE-2024-32458freerdp: OutOfBound Read in planar_skip_plane_rle
  18. CVE-2024-32041freerdp: OutOfBound Read in zgfx_decompress_segment
  19. CVE-2024-32040freerdp: integer underflow in nsc_rle_decode
  20. CVE-2024-32039freerdp: Integer overflow & OutOfBound Write in clear_decompress_residual_data
  21. CVE-2024-32021git: symlink bypass
  22. CVE-2024-32020git: insecure hardlinks
  23. CVE-2024-32004git: RCE while cloning local repos
  24. CVE-2024-32002git: Recursive clones RCE
  25. CVE-2024-31951frr: buffer overflow in ospf_te_parse_ext_link
  26. CVE-2024-31950frr: buffer overflow and daemon crash in ospf_te_parse_ri
  27. CVE-2024-31949frr: infinite loop
  28. CVE-2024-31948frr: bgpd daemon crash
  29. CVE-2024-31852llvm: LR register can be overwritten without data being saved to the stack on ARM
  30. CVE-2024-31449redis: Lua library commands may lead to stack overflow and RCE in Redis
  31. CVE-2024-31228redis: Denial-of-service due to unbounded pattern matching in Redis
  32. CVE-2024-31227redis: Denial-of-service due to malformed ACL selectors in Redis
  33. CVE-2024-31157microcode_ctl: Improper initialization in UEFI firmware OutOfBandXML module
  34. CVE-2024-31083xorg-x11-server: Use-after-free in ProcRenderAddGlyphs
  35. CVE-2024-31082xorg-x11-server: Heap buffer overread/data leakage in ProcAppleDRICreatePixmap
  36. CVE-2024-31081xorg-x11-server: Heap buffer overread/data leakage in ProcXIPassiveGrabDevice
  37. CVE-2024-31080xorg-x11-server: Heap buffer overread/data leakage in ProcXIGetSelectedEvents
  38. CVE-2024-31079nginx: undisclosed HTTP/3 requests can cause NGINX worker processes to terminate
  39. CVE-2024-31076kernel: genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
  40. CVE-2024-31068kernel: microcode_ctl: From CVEorg collector
  41. CVE-2024-30875jquery-ui: XSS via window.addEventListener
  42. CVE-2024-30205emacs: Org mode considers contents of remote files to be trusted
  43. CVE-2024-30204emacs: LaTeX preview is enabled by default for e-mail attachments
  44. CVE-2024-30203emacs: Gnus treats inline MIME contents as trusted
  45. CVE-2024-30202emacs: arbitrary Lisp code is evaluated as part of turning on Org mode
  46. CVE-2024-30156varnish: HTTP/2 Broken Window Attack may result in denial of service
  47. CVE-2024-30105dotnet: DoS in System.Text.Json
  48. CVE-2024-30046dotnet: denial of service in ASP.NET Core due to deadlock in Http2OutputProducer.Stop()
  49. CVE-2024-30045dotnet: stack buffer overrun in Double Parse
  50. CVE-2024-29944Mozilla: Privileged JavaScript Execution via Event Handlers
CVE 2024 document archive — Page 59 | PulseLinux