PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2024 document archive · 76

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

4,167 documents · Identifier year 2024 · 76 / 84

  1. CVE-2024-20952OpenJDK: RSA padding issue and timing side-channel attack against TLS (8317547)
  2. CVE-2024-20945OpenJDK: logging of digital signature private keys (8316976)
  3. CVE-2024-20932OpenJDK: incorrect handling of ZIP files with duplicate entries (8276123)
  4. CVE-2024-20926OpenJDK: arbitrary Java code execution in Nashorn (8314284)
  5. CVE-2024-20921OpenJDK: range check loop optimization issue (8314307)
  6. CVE-2024-20919OpenJDK: JVM class file verifier flaw allows unverified bytecode execution (8314295)
  7. CVE-2024-20918OpenJDK: array out-of-bounds access due to missing range check in C1 compiler (8314468)
  8. CVE-2024-20697libarchive: Heap based buffer overflow in rar e8 filter
  9. CVE-2024-20696libarchive: out-of-bounds access in copy_from_lzss_window_to_unp()
  10. CVE-2024-20672dotnet: dotnet core Denial of Service Vulnerability
  11. CVE-2024-14041bouncycastle: Bouncy Castle for Java: Private key recovery via timing side-channel in ML-KEM (CRYSTALS-Kyber) routines
  12. CVE-2024-14040kernel: net: nexthop: Increase weight to u16
  13. CVE-2024-14029python-tornado: Tornado before 6.4.1 HTTP Request Smuggling via Transfer-Encoding
  14. CVE-2024-14027kernel: xattr: switch to CLASS(fd)
  15. CVE-2024-13978libtiff: LibTIFF Null Pointer Dereference
  16. CVE-2024-13176openssl: Timing side-channel in ECDSA signature computation
  17. CVE-2024-13009jetty-server: Jetty: Gzip Request Body Buffer Corruption
  18. CVE-2024-12801logback-core: SaxEventRecorder vulnerable to Server-Side Request Forgery (SSRF) attacks
  19. CVE-2024-12797openssl: RFC7250 handshakes with unauthenticated servers don't abort as expected
  20. CVE-2024-12747rsync: Race Condition in rsync Handling Symbolic Links
  21. CVE-2024-12718cpython: python: Bypass extraction filter to modify file metadata outside extraction directory
  22. CVE-2024-12705bind: bind9: DNS-over-HTTPS implementation suffers from multiple issues under heavy query load
  23. CVE-2024-12455glibc: glibc in Fedora 41 ships a broken getrandom/arc4random for ppc64le platform
  24. CVE-2024-12426LibreOffice: URL fetching can be used to exfiltrate arbitrary INI file values and environment variables
  25. CVE-2024-12425LibreOffice: Path traversal leading to arbitrary .ttf file write
  26. CVE-2024-12254python: Unbounded memory buffering in SelectorSocketTransport.writelines()
  27. CVE-2024-12243gnutls: GnuTLS Impacted by Inefficient DER Decoding in libtasn1 Leading to Remote DoS
  28. CVE-2024-12224idna: idna accepts Punycode labels that do not produce any non-ASCII when decoded
  29. CVE-2024-12133libtasn1: Inefficient DER Decoding in libtasn1 Leading to Potential Remote DoS
  30. CVE-2024-12088rsync: --safe-links option bypass leads to path traversal
  31. CVE-2024-12087rsync: Path traversal vulnerability in rsync
  32. CVE-2024-12086rsync: rsync server leaks arbitrary client files
  33. CVE-2024-12085rsync: Info Leak via Uninitialized Stack Contents
  34. CVE-2024-12084rsync: Heap Buffer Overflow in Rsync due to Improper Checksum Length Handling
  35. CVE-2024-11831npm-serialize-javascript: Cross-site Scripting (XSS) in serialize-javascript
  36. CVE-2024-11741grafana: From CVEorg collector
  37. CVE-2024-11708firefox: thunderbird: Data race with PlaybackParams
  38. CVE-2024-11706firefox: thunderbird: Null Pointer Dereference in PKCS#12 Utility
  39. CVE-2024-11705firefox: thunderbird: Null Pointer Dereference in NSC_DeriveKey
  40. CVE-2024-11704firefox: thunderbird: Potential Double-Free Vulnerability in PKCS#7 Decryption Handling
  41. CVE-2024-11703firefox: thunderbird: Password access without authentication via PIN bypass on Android
  42. CVE-2024-11702firefox: thunderbird: Inadequate Clipboard Protection in Private Browsing Mode on Android
  43. CVE-2024-11701firefox: thunderbird: Misleading Address Bar State During Navigation Interruption
  44. CVE-2024-11700firefox: thunderbird: Potential Tapjacking Exploit for Intent Confirmation on Android
  45. CVE-2024-11699firefox: thunderbird: Memory safety bugs fixed in Firefox 133, Thunderbird 133, Firefox ESR 128.5, and Thunderbird 128.5
  46. CVE-2024-11698firefox: thunderbird: Fullscreen Lock-Up When Modal Dialog Interrupts Transition on macOS
  47. CVE-2024-11697firefox: thunderbird: Improper Keypress Handling in Executable File Confirmation Dialog
  48. CVE-2024-11696firefox: thunderbird: Unhandled Exception in Add-on Signature Verification
  49. CVE-2024-11695firefox: thunderbird: URL Bar Spoofing via Manipulated Punycode and Whitespace Characters
  50. CVE-2024-11694firefox: thunderbird: CSP Bypass and XSS Exposure via Web Compatibility Shims
CVE 2024 document archive — Page 76 | PulseLinux