PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2024 document archive · 81

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

4,167 documents · Identifier year 2024 · 81 / 84

  1. CVE-2024-4603openssl: Excessive time spent checking DSA keys and parameters
  2. CVE-2024-4577php: Argument Injection in PHP-CGI
  3. CVE-2024-4558chromium-browser: Use after free in ANGLE
  4. CVE-2024-4467qemu-kvm: 'qemu-img info' leads to host file read/write
  5. CVE-2024-4453gstreamer: EXIF Metadata Parsing Integer Overflow
  6. CVE-2024-4418libvirt: stack use-after-free in virNetClientIOEventLoop()
  7. CVE-2024-4367Mozilla: Arbitrary JavaScript execution in PDF.js
  8. CVE-2024-4317postgresql: PostgreSQL pg_stats_ext and pg_stats_ext_exprs lack authorization checks
  9. CVE-2024-4076bind: bind9: Assertion failure when serving both stale cache data and authoritative zone content
  10. CVE-2024-4068braces: fails to limit the number of characters it can handle
  11. CVE-2024-4067micromatch: vulnerable to Regular Expression Denial of Service
  12. CVE-2024-4032python: incorrect IPv4 and IPv6 private ranges
  13. CVE-2024-3864Mozilla: Memory safety bug fixed in Firefox 125, Firefox ESR 115.10, and Thunderbird 115.10
  14. CVE-2024-3863Mozilla: Download Protections were bypassed by .xrm-ms files on Windows
  15. CVE-2024-3861Mozilla: Potential use-after-free due to AlignedBuffer self-move
  16. CVE-2024-3859Mozilla: Integer-overflow led to out-of-bounds-read in the OpenType sanitizer
  17. CVE-2024-3857Mozilla: Incorrect JITting of arguments led to use-after-free during garbage collection
  18. CVE-2024-3854Mozilla: Out-of-bounds-read after mis-optimized switch statement
  19. CVE-2024-3852Mozilla: GetBoundName in the JIT returned the wrong object
  20. CVE-2024-3727containers/image: digest type does not guarantee valid type
  21. CVE-2024-3661DHCP: DHCP routing options can manipulate interface-based VPN traffic
  22. CVE-2024-3657389-ds-base: potential denial of service via specially crafted kerberos AS-REQ request
  23. CVE-2024-3652libreswan: IKEv1 default AH/ESP responder can crash and restart
  24. CVE-2024-3651python-idna: potential DoS via resource consumption via specially crafted inputs to idna.encode()
  25. CVE-2024-3596freeradius: forgery attack
  26. CVE-2024-3567qemu-kvm: net: assertion failure in update_sctp_checksum()
  27. CVE-2024-3447QEMU: sdhci: heap buffer overflow in sdhci_write_dataport()
  28. CVE-2024-3446QEMU: virtio: DMA reentrancy issue leads to double free vulnerability
  29. CVE-2024-3302Mozilla: Denial of Service using HTTP/2 CONTINUATION frames
  30. CVE-2024-3296rust-openssl: timing based side-channel can lead to a Bleichenbacher style attack
  31. CVE-2024-3220python: Default mimetype known files writeable on Windows
  32. CVE-2024-3205libyaml: Heap-Based Buffer Overflow
  33. CVE-2024-3183freeipa: user can obtain a hash of the passwords of all domain users and perform offline brute force
  34. CVE-2024-3096php: password_verify can erroneously return true, opening ATO risk
  35. CVE-2024-3094xz: malicious code in distributed source
  36. CVE-2024-3056podman: kernel: containers in shared IPC namespace are vulnerable to denial of service attack
  37. CVE-2024-3049booth: specially crafted hash can lead to invalid HMAC being accepted by Booth server
  38. CVE-2024-3044libreoffice: create a document which without prompt will execute scripts built-into LibreOffice on clicking a graphic
  39. CVE-2024-3019pcp: exposure of the redis server backend allows remote command execution via pmproxy
  40. CVE-2024-2961glibc: Out of bounds write in iconv may lead to remote code execution
  41. CVE-2024-2955wireshark: T.38 dissector crash
  42. CVE-2024-2947cockpit: command injection when deleting a sosreport with a crafted name
  43. CVE-2024-2905rpm-ostree: world-readable /etc/shadow file
  44. CVE-2024-2757php: mb_encode_mimeheader runs endlessly for some inputs
  45. CVE-2024-2756php: host/secure cookie bypass due to partial CVE-2022-31629 fix
  46. CVE-2024-2698freeipa: delegation rules allow a proxy service to impersonate any user to access another target service
  47. CVE-2024-2616Mozilla: Improve handling of out-of-memory conditions in ICU
  48. CVE-2024-2614Mozilla: Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9, and Thunderbird 115.9
  49. CVE-2024-2612Mozilla: Self referencing object could have potentially led to a use-after-free
  50. CVE-2024-2611Mozilla: Clickjacking vulnerability could have led to a user accidentally granting permissions
CVE 2024 document archive — Page 81 | PulseLinux