PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2024 document archive · 60

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

4,167 documents · Identifier year 2024 · 60 / 84

  1. CVE-2024-29943Mozilla: Out-of-bounds access via Range Analysis bypass
  2. CVE-2024-29511ghostscript: ghostscript: arbitrary file read/write through Tesseract configuration
  3. CVE-2024-29510ghostscript: format string injection leads to shell command execution (SAFER bypass)
  4. CVE-2024-29509ghostscript: heap buffer overflow via the PDFPassword parameter
  5. CVE-2024-29508ghostscript: heap pointer leak in pdf_base_font_alloc()
  6. CVE-2024-29507ghostscript: stack-based buffer overflow via the CIDFSubstPath and CIDFSubstFont parameters
  7. CVE-2024-29506ghostscript: stack-based buffer overflow in the pdfi_apply_filter()
  8. CVE-2024-29415node-ip: Incomplete fix for CVE-2023-42282
  9. CVE-2024-29214microcode_ctl: Improper input validation in UEFI firmware CseVariableStorageSmm
  10. CVE-2024-29180webpack-dev-middleware: lack of URL validation may lead to file leak
  11. CVE-2024-29041express: cause malformed URLs to be evaluated
  12. CVE-2024-29040tpm2-tss: arbitrary quote data may go undetected by Fapi_VerifyQuote
  13. CVE-2024-29039tpm2-tools: pcr selection value is not compared with the attest
  14. CVE-2024-29038tpm2-tools: arbitrary quote data may go undetected by tpm2_checkquote
  15. CVE-2024-29018moby: external DNS requests from 'internal' networks could lead to data exfiltration
  16. CVE-2024-28956microcode_ctl: From CVEorg collector
  17. CVE-2024-28863node-tar: denial of service while parsing a tar file due to lack of folders depth validation
  18. CVE-2024-28849follow-redirects: Possible credential leak
  19. CVE-2024-28835gnutls: potential crash during chain building/verification
  20. CVE-2024-28834gnutls: vulnerable to Minerva side-channel information leak
  21. CVE-2024-28757expat: XML Entity Expansion
  22. CVE-2024-28219python-pillow: buffer overflow in _imagingcms.c
  23. CVE-2024-28182nghttp2: CONTINUATION frames DoS
  24. CVE-2024-28180jose-go: improper handling of highly compressed data
  25. CVE-2024-28176jose: resource exhaustion
  26. CVE-2024-28127microcode_ctl: Improper input validation in UEFI firmware
  27. CVE-2024-28102python-jwcrypto: malicious JWE token can cause denial of service
  28. CVE-2024-28085util-linux: CVE-2024-28085: wall: escape sequence injection
  29. CVE-2024-28047microcode_ctl: Improper input validation in UEFI firmware
  30. CVE-2024-27983nodejs: CONTINUATION frames DoS
  31. CVE-2024-27982nodejs: HTTP Request Smuggling via Content Length Obfuscation
  32. CVE-2024-27980Node.js: Fail to Escape Arguments Properly in Microsoft Windows
  33. CVE-2024-27913frr: Denial of service via malformed OSPF LSA packet
  34. CVE-2024-27856webkitgtk: Processing a file may lead to unexpected app termination or arbitrary code execution
  35. CVE-2024-27851webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution
  36. CVE-2024-27850webkitgtk: A maliciously crafted webpage may be able to fingerprint the user
  37. CVE-2024-27838webkitgtk: A maliciously crafted webpage may be able to fingerprint the user
  38. CVE-2024-27834webkit: pointer authentication bypass
  39. CVE-2024-27833webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution
  40. CVE-2024-27830webkitgtk: A maliciously crafted webpage may be able to fingerprint the user
  41. CVE-2024-27820webkitgtk: Processing web content may lead to arbitrary code execution
  42. CVE-2024-27808webkitgtk: Processing web content may lead to arbitrary code execution
  43. CVE-2024-27766mariadb: RCE via user defined function
  44. CVE-2024-27437kernel: vfio/pci: Disable auto-enable of exclusive INTx IRQ
  45. CVE-2024-27436kernel: ALSA: usb-audio: Stop parsing channels bits when all channels are found.
  46. CVE-2024-27435kernel: nvme: fix reconnection fail due to reserved tag allocation
  47. CVE-2024-27434kernel: wifi: iwlwifi: mvm: don't set the MFP flag for the GTK
  48. CVE-2024-27433kernel: clk: mediatek: mt7622-apmixedsys: Fix an error handling path in clk_mt8135_apmixed_probe()
  49. CVE-2024-27432kernel: net: ethernet: mtk_eth_soc: fix PPE hanging issue
  50. CVE-2024-27431kernel: cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
CVE 2024 document archive — Page 60 | PulseLinux