CVE 2024 document archive · 72
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
4,167 documents · Identifier year 2024 · 72 / 84
- CVE-2024-24814mod_auth_openidc: DoS when using `OIDCSessionType client-cookie` and manipulating cookies
- CVE-2024-24806libuv: Improper Domain Lookup that potentially leads to SSRF attacks
- CVE-2024-24795httpd: HTTP Response Splitting in multiple modules
- CVE-2024-24791net/http: Denial of service due to improper 100-continue handling in net/http
- CVE-2024-24790golang: net/netip: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses
- CVE-2024-24789golang: archive/zip: Incorrect handling of certain ZIP files
- CVE-2024-24788golang: net: malformed DNS message can cause infinite loop
- CVE-2024-24786google.golang.org/protobuf: golang-protobuf: Denial of Service via infinite loop when unmarshaling invalid JSON
- CVE-2024-24785golang: html/template: errors returned from MarshalJSON methods may break template escaping
- CVE-2024-24784golang: net/mail: comments in display names are incorrectly handled
- CVE-2024-24783golang: crypto/x509: Verify panics on certificates with an unknown public key algorithm
- CVE-2024-24582microcode_ctl: Improper input validation in XmlCli feature for UEFI firmware
- CVE-2024-24577libgit2: arbitrary code execution due to heap corruption in git_index_add
- CVE-2024-24576rust: Fail to Escape Arguments Properly in Microsoft Windows
- CVE-2024-24575libgit2: potential infiniate loop condition in git_revparse_single
- CVE-2024-24549Tomcat: HTTP/2 header handling DoS
- CVE-2024-24479wireshark: Buffer Overflow via wsutil/to_str.c and format_fractional_part_nsecs results in Denial of Service
- CVE-2024-24478wireshark: integer overflow in dissect_bgp_open() in epan/dissectors/packet-bgp.c
- CVE-2024-24476wireshark: Buffer Overflow via pan/addr_resolv.c and ws_manuf_lookup_str() results in Denial of Service
- CVE-2024-24474QEMU: esp: integer underflow leads to heap buffer overflow in esp_do_nodma()
- CVE-2024-24259freeglut: memory leak via glutAddMenuEntry() function
- CVE-2024-24258freeglut: memory leak via glutAddSubMenu() function
- CVE-2024-24246qpdf: Heap Buffer Overflow vulnerability in qpdf
- CVE-2024-23851kernel: copy_params can attempt to allocate more than INT_MAX bytes and crash
- CVE-2024-23850kernel: btrfs_get_root_ref has an assertion failure and crash because a subvolume can be read out too soon after its root item is inserted upon subvolume creation
- CVE-2024-23849kernel: off-by-one error for an RDS_MSG_RX_DGRAM_TRACE_MAX comparison, resulting in out-of-bounds access
- CVE-2024-23848kernel: use-after-free in cec_queue_msg_fh
- CVE-2024-23807xerces-c: duplicate CVE to announce correct fixed-in versions
- CVE-2024-23672Tomcat: WebSocket DoS with incomplete closing handshake
- CVE-2024-23651moby/buildkit: possible race condition with accessing subpaths from cache mounts
- CVE-2024-23650moby/buildkit: Possible race condition with accessing subpaths from cache mounts
- CVE-2024-23638squid: vulnerable to a Denial of Service attack against Cache Manager error responses
- CVE-2024-23337jq: jq has signed integer overflow in jv.c:jvp_array_write
- CVE-2024-23307kernel: Integer Overflow in raid5_cache_count
- CVE-2024-23301rear: creates a world-readable initrd
- CVE-2024-23284webkit: processing maliciously crafted web content prevents Content Security Policy from being enforced
- CVE-2024-23280webkit: maliciously crafted webpage may be able to fingerprint the user
- CVE-2024-23271webkitgtk: A malicious website may cause unexpected cross-origin behavior
- CVE-2024-23263webkit: processing malicious web content prevents Content Security Policy from being enforced
- CVE-2024-23254webkit: malicious website may exfiltrate audio data cross-origin
- CVE-2024-23222webkitgtk: type confusion may lead to arbitrary code execution
- CVE-2024-23213webkitgtk: Processing web content may lead to arbitrary code execution
- CVE-2024-23206webkitgtk: A maliciously crafted webpage may be able to fingerprint the user
- CVE-2024-23196kernel: Race condition in snd_hdac_regmap_sync() in sound/hda
- CVE-2024-23185dovecot: very large headers can cause resource exhaustion when parsing message
- CVE-2024-23184dovecot: using a large number of address headers may trigger a denial of service
- CVE-2024-23080joda-time: Null pointer exeption may lead to DoS
- CVE-2024-22705kernel: out-of-bounds access smb2_get_data_area_len
- CVE-2024-22667vim: Stack buffer over flow in did_set_langmap function in map.c
- CVE-2024-22653yasm: Null pointer dereference in yasm