PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2024 document archive · 71

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

4,167 documents · Identifier year 2024 · 71 / 84

  1. CVE-2024-26598kernel: kvm: Avoid potential UAF in LPI translation cache
  2. CVE-2024-26595kernel: mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
  3. CVE-2024-26594kernel: ksmbd: validate mech token in session setup
  4. CVE-2024-26593kernel: i2c: i801: Fix block process call transactions
  5. CVE-2024-26592kernel: ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
  6. CVE-2024-26591kernel: bpf: Fix re-attachment branch in bpf_tracing_prog_attach
  7. CVE-2024-26589kernel: bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
  8. CVE-2024-26588kernel: bpf: Prevent out-of-bounds memory access on LoongArch
  9. CVE-2024-26587kernel: netdevsim: don't try to destroy PHC on VFs
  10. CVE-2024-26586kernel: mlxsw: spectrum_acl_tcam: Fix stack corruption
  11. CVE-2024-26585kernel: tls: race between tx work scheduling and socket close
  12. CVE-2024-26584kernel: tls: handle backlogging of crypto requests
  13. CVE-2024-26583kernel: tls: race between async notify and socket close
  14. CVE-2024-26582kernel: tls: use-after-free with partial reads and async decrypt
  15. CVE-2024-26581kernel: nftables: nft_set_rbtree skip end interval element from gc
  16. CVE-2024-26464net-snmp: memory leak DoS
  17. CVE-2024-26462krb5: Memory leak at /krb5/src/kdc/ndr.c
  18. CVE-2024-26461krb5: Memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c
  19. CVE-2024-26458krb5: Memory leak at /krb5/src/lib/rpc/pmap_rmt.c
  20. CVE-2024-26328QEMU: NVMe: out-of-bounds memory access in nvme_sriov_pre_write_ctrl()
  21. CVE-2024-26327qemu-kvm: pcie: improper validation of NumVFs leads to buffer overflow
  22. CVE-2024-26306iperf3: vulnerable to marvin attack if the authentication option is used
  23. CVE-2024-26256libarchive: Heap based buffer overflow in rar e8 filter
  24. CVE-2024-26146rubygem-rack: Possible Denial of Service Vulnerability in Rack Header Parsing
  25. CVE-2024-26141rubygem-rack: Possible DoS Vulnerability with Range Header in Rack
  26. CVE-2024-26130python-cryptography: NULL pointer dereference with pkcs12.serialize_key_and_certificates when called with a non-matching certificate and private key and an hmac_hash override
  27. CVE-2024-25744kernel: untrusted VMM can trigger int80 syscall handling
  28. CVE-2024-25743hw: amd: Instruction raise #VC exception at exit
  29. CVE-2024-25741kernel: f_printer: crash leading to denial of service
  30. CVE-2024-25740kernel: memory leak in ubi driver
  31. CVE-2024-25739kernel: crash due to a missing check for leb_size
  32. CVE-2024-25629c-ares: Out of bounds read in ares__read_line()
  33. CVE-2024-25621github.com/containerd/containerd: containerd local privilege escalation
  34. CVE-2024-25617squid: denial of service in HTTP header parser
  35. CVE-2024-25580qtbase: potential buffer overflow when reading KTX images
  36. CVE-2024-25260elfutils: global-buffer-overflow exists in the function ebl_machine_flag_name in eblmachineflagname.c
  37. CVE-2024-25126rubygem-rack: Denial of Service Vulnerability in Rack Content-Type Parsing
  38. CVE-2024-25112Exiv2: Denial of service due to unbounded recursion in QuickTimeVideo::multipleEntriesDecoder
  39. CVE-2024-25111squid: Denial of Service in HTTP Chunked Decoding
  40. CVE-2024-25082fontforge: command injection via crafted archives or compressed files
  41. CVE-2024-25081fontforge: command injection via crafted filenames
  42. CVE-2024-25062libxml2: use-after-free in XMLReader
  43. CVE-2024-24990nginx: Use-after-free in HTTP/3
  44. CVE-2024-24989nginx: NULL pointer dereference in HTTP/3
  45. CVE-2024-24968microcode_ctl: Denial of Service
  46. CVE-2024-24859kernel: bluetooth: race condition in sniff_{min,max}_interval_set()
  47. CVE-2024-24858kernel: net/bluetooth: race condition in {conn,adv}_{min,max}_interval_set() function
  48. CVE-2024-24857kernel: net/bluetooth: race condition in conn_info_{min,max}_age_set()
  49. CVE-2024-24855kernel: Race condition in lpfc_unregister_fcf_rescan() in scsi/lpfc/lpfc_hbadisc.c
  50. CVE-2024-24826exiv2: Out-of-bounds read in QuickTimeVideo::NikonTagsDecoder
CVE 2024 document archive — Page 71 | PulseLinux