PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2024 document archive · 79

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

4,167 documents · Identifier year 2024 · 79 / 84

  1. CVE-2024-8381mozilla: Type confusion when looking up a property name in a "with" block
  2. CVE-2024-8373angular: From NVD collector
  3. CVE-2024-8372angularjs: From NVD collector
  4. CVE-2024-8354qemu-kvm: usb: assertion failure in usb_ep_get()
  5. CVE-2024-8250wireshark: NTLMSSP dissector crash
  6. CVE-2024-8244golang:path/filepath: Golang Walk/WalkDir symlink race
  7. CVE-2024-8235libvirt: Crash of virtinterfaced via virConnectListInterfaces()
  8. CVE-2024-8198chromium: skia: chromium: skia: Heap buffer overflow in Skia
  9. CVE-2024-8193chromium: skia: chromium: skia: Heap buffer overflow in Skia
  10. CVE-2024-8176libexpat: expat: Improper Restriction of XML Entity Expansion Depth in libexpat
  11. CVE-2024-8118grafana: wrong permission is applied to the alert rule write API endpoint
  12. CVE-2024-8105linux-firmware: PKfail secure boot bypass
  13. CVE-2024-8096curl: OCSP stapling bypass with GnuTLS
  14. CVE-2024-8088python: cpython: Iterating over a malicious ZIP file may lead to Denial of Service
  15. CVE-2024-8006libpcap: NULL pointer derefence in pcap_findalldevs_ex() in pcap-new.c
  16. CVE-2024-7966chromium-browser: skia: chromium-browser: skia: Out of bounds memory access in Skia in Google Chrome allows a remote attacker who had compromised the renderer process to perform out of bounds memory access via a crafted HTML page
  17. CVE-2024-7883clang: CMSE secure state may leak from stack to floating-point registers
  18. CVE-2024-7788libreoffice: improper digital signature invalidation vulnerability
  19. CVE-2024-7730qemu-kvm: virtio-snd: heap buffer overflow in virtio_snd_pcm_in_cb()
  20. CVE-2024-7708jetty: Eclipse Jetty: Denial of Service due to buffer leak in handling certain HTTP requests
  21. CVE-2024-7652mozilla: Type Confusion in Async Generators in Javascript Engine
  22. CVE-2024-7592cpython: python: Uncontrolled CPU resource consumption when in http.cookies module
  23. CVE-2024-7589openssh: OpenSSH pre-authentication async signal safety issue
  24. CVE-2024-7532chromium-browser: angle: Out of bounds memory access in ANGLE
  25. CVE-2024-7531mozilla: nss: PK11_Encrypt using CKM_CHACHA20 can reveal plaintext on Intel Sandy Bridge machines
  26. CVE-2024-7529mozilla: Document content could partially obscure security prompts
  27. CVE-2024-7528mozilla: Use-after-free in IndexedDB
  28. CVE-2024-7527mozilla: Use-after-free in JavaScript garbage collection
  29. CVE-2024-7526mozilla: Uninitialized memory used by WebGL
  30. CVE-2024-7525mozilla: Missing permission check when creating a StreamFilter
  31. CVE-2024-7524mozilla: CSP strict-dynamic bypass using web-compatibility shims
  32. CVE-2024-7522mozilla: Out of bounds read in editor component
  33. CVE-2024-7521mozilla: Incomplete WebAssembly exception handing
  34. CVE-2024-7520mozilla: Type confusion in WebAssembly
  35. CVE-2024-7519mozilla: Out of bounds memory access in graphics shared memory handling
  36. CVE-2024-7518mozilla: Fullscreen notification dialog can be obscured by document content
  37. CVE-2024-7409QEMU: Denial of Service via Improper Synchronization in QEMU NBD Server During Socket Closure
  38. CVE-2024-7383libnbd: NBD server improper certificate validation
  39. CVE-2024-7348postgresql: PostgreSQL relation replacement during pg_dump executes arbitrary SQL
  40. CVE-2024-7347nginx: specially crafted MP4 file may cause denial of service
  41. CVE-2024-7264curl: libcurl: ASN.1 date parser overread
  42. CVE-2024-7254protobuf: StackOverflow vulnerability in Protocol Buffers
  43. CVE-2024-7246grpc: client communicating with a HTTP/2 proxy can poison the HPACK table between the proxy and the backend
  44. CVE-2024-7006libtiff: NULL pointer dereference in tif_dirinfo.c
  45. CVE-2024-6923cpython: python: email module doesn't properly quotes newlines in email headers, allowing header injection
  46. CVE-2024-6874curl: macidn punycode buffer overread
  47. CVE-2024-6655gtk3: gtk2: Library injection from CWD
  48. CVE-2024-6604Mozilla: Memory safety bugs fixed in Firefox 128, Firefox ESR 115.13, and Thunderbird 115.13
  49. CVE-2024-6603Mozilla: Memory corruption in thread creation
  50. CVE-2024-6602Mozilla: Memory corruption in NSS
CVE 2024 document archive — Page 79 | PulseLinux