PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2024 document archive · 80

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

4,167 documents · Identifier year 2024 · 80 / 84

  1. CVE-2024-6601Mozilla: Race condition in permission assignment
  2. CVE-2024-6600Mozilla: Memory corruption in WebGL API
  3. CVE-2024-6519qemu-kvm: lsi53c895a: use-after-free local privilege escalation vulnerability
  4. CVE-2024-6505qemu-kvm: virtio-net: queue index out-of-bounds access in software RSS
  5. CVE-2024-6501NetworkManager: Denial of Service
  6. CVE-2024-6485bootstrap: Cross-Site Scripting via button plugin on bootstrap
  7. CVE-2024-6472libreoffice: Ability to trust not validated macro signatures removed in high security mode
  8. CVE-2024-6409openssh: Possible remote code execution due to a race condition in signal handling affecting Red Hat Enterprise Linux 9
  9. CVE-2024-6387openssh: regreSSHion - race condition in SSH allows RCE/DoS
  10. CVE-2024-6345pypa/setuptools: Remote code execution via download functions in the package_index module in pypa/setuptools
  11. CVE-2024-6239poppler: pdfinfo: crash in broken documents when using -dests parameter
  12. CVE-2024-6237389-ds-base: unauthenticated user can trigger a DoS by sending a specific extended search request
  13. CVE-2024-6232python: cpython: tarfile: ReDos via excessive backtracking while parsing header values
  14. CVE-2024-6197curl: freeing stack buffer in utf8asn1str
  15. CVE-2024-6174cloud-init: Cloud init permissions flaw
  16. CVE-2024-6126cockpit: Authenticated user can kill any process when enabling pam_env's user_readenv option
  17. CVE-2024-6119openssl: Possible denial of service in X.509 name checks
  18. CVE-2024-6104go-retryablehttp: url might write sensitive information to log file
  19. CVE-2024-5953389-ds-base: Malformed userPassword hash may cause Denial of Service
  20. CVE-2024-5742nano: running `chmod` and `chown` on the filename allows malicious user to replace the emergency file with a malicious symlink to a root-owned file
  21. CVE-2024-5702Mozilla: Use-after-free in networking
  22. CVE-2024-5700Mozilla: Memory safety bugs fixed in Firefox 127, Firefox ESR 115.12, and Thunderbird 115.12
  23. CVE-2024-5696Mozilla: Memory Corruption in Text Fragments
  24. CVE-2024-5693Mozilla: Cross-Origin Image leak via Offscreen Canvas
  25. CVE-2024-5692Mozilla: Bypass of file name restrictions during saving
  26. CVE-2024-5691Mozilla: Sandboxed iframes were able to bypass sandbox restrictions to open a new window
  27. CVE-2024-5690Mozilla: External protocol handlers leaked by timing attack
  28. CVE-2024-5688Mozilla: Use-after-free in JavaScript object transplant
  29. CVE-2024-5642python: Invalid value for OpenSSL API may cause Buffer over-read when NPN is used
  30. CVE-2024-5629python-pymongo: Out-of-bounds read in bson module
  31. CVE-2024-5585php: Arguments execute arbitrary commands in Windows shell
  32. CVE-2024-5564libndp: buffer overflow in route information length field
  33. CVE-2024-5535openssl: SSL_select_next_proto buffer overread
  34. CVE-2024-5458php: Filter bypass in filter_var (FILTER_VALIDATE_URL)
  35. CVE-2024-5290wpa_supplicant: wpa_supplicant loading arbitrary shared objects allowing privilege escalation
  36. CVE-2024-5197libvpx: Integer overflow in vpx_img_alloc()
  37. CVE-2024-5171libaom: Integer overflow in internal function img_alloc_helper
  38. CVE-2024-5154cri-o: malicious container can create symlink on host
  39. CVE-2024-5148gnome-remote-desktop: inadequate validation of session agents using D-Bus methods may expose RDP TLS certificate
  40. CVE-2024-4855wireshark: Editcap secret injection crash
  41. CVE-2024-4854wireshark: MONGO and ZigBee TLV dissector infinite loops
  42. CVE-2024-4853wireshark: Editcap byte chopping crash
  43. CVE-2024-4777Mozilla: Memory safety bugs fixed in Firefox 126, Firefox ESR 115.11, and Thunderbird 115.11
  44. CVE-2024-4770Mozilla: Use-after-free could occur when printing to PDF
  45. CVE-2024-4769Mozilla: Cross-origin responses could be distinguished between script and non-script content-types
  46. CVE-2024-4768Mozilla: Potential permissions request bypass via clickjacking
  47. CVE-2024-4767Mozilla: IndexedDB files retained in private browsing mode
  48. CVE-2024-4741openssl: Use After Free with SSL_free_buffers
  49. CVE-2024-4693qemu-kvm: virtio-pci: improper release of configure vector leads to guest triggerable crash
  50. CVE-2024-4610hw:arm: Mali GPU Kernel Driver allows improper GPU memory processing operations
CVE 2024 document archive — Page 80 | PulseLinux