CVE 2024 document archive · 82
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
4,167 documents · Identifier year 2024 · 82 / 84
- CVE-2024-2610Mozilla: Improper handling of html and body tags enabled CSP nonce leakage
- CVE-2024-2609Mozilla: Permission prompt input delay could expire when not in focus
- CVE-2024-2608Mozilla: Integer overflow could have led to out of bounds write
- CVE-2024-2607Mozilla: JIT code failed to save return registers on Armv7-A
- CVE-2024-2605Mozilla: Windows Error Reporter could be used as a Sandbox escape vector
- CVE-2024-2511openssl: Unbounded memory growth with session handling in TLSv1.3
- CVE-2024-2496libvirt: NULL pointer dereference in udevConnectListAllInterfaces()
- CVE-2024-2494libvirt: negative g_new0 length can lead to unbounded memory allocation
- CVE-2024-2467perl-Crypt-OpenSSL-RSA: side-channel attack in PKCS#1 v1.5 padding mode (Marvin Attack)
- CVE-2024-2466curl: TLS certificate check bypass with mbedTLS
- CVE-2024-2410protobuf: Use-after-free in JsonToBinaryStream()
- CVE-2024-2408php: potential exposure to Marvin attack via unsafe implementation of RSA decryption API
- CVE-2024-2398curl: HTTP/2 push headers memory-leak
- CVE-2024-2397tcpdump: Crafted .pcap file may lead to Denial of Service
- CVE-2024-2379curl: QUIC certificate check bypass with wolfSSL
- CVE-2024-2357libreswan: Missing PreSharedKey for connection can cause crash
- CVE-2024-2314bcc: unprivileged users can force loading of compromised linux headers
- CVE-2024-2313bpftrace: unprivileged users can force loading of compromised linux headers
- CVE-2024-2312grub2: grub-efi crashes upon `exit`
- CVE-2024-2307osbuild-composer: race condition may disable GPG verification for package repositories
- CVE-2024-2236libgcrypt: vulnerable to Marvin Attack
- CVE-2024-2201hw: cpu: intel: Native Branch History Injection (BHI)
- CVE-2024-2199389-ds-base: Malformed userPassword may cause crash at do_modify in slapd/modify.c
- CVE-2024-2193hw: Spectre-SRC that is Speculative Race Conditions (SRCs) for synchronization primitives similar like Spectre V1 with possibility to bypass software features (e.g., IPIs, high-precision timers, etc)
- CVE-2024-2182ovn: insufficient validation of BFD packets may lead to denial of service
- CVE-2024-2169udp: Implementations of UDP protocol are vulnerable to network loops
- CVE-2024-2004curl: Usage of disabled protocol
- CVE-2024-2002libdwarf: crashes randomly on fuzzed object
- CVE-2024-1975bind9: bind: SIG(0) can be used to exhaust CPU resources
- CVE-2024-1936Mozilla: Leaking of encrypted email subjects to other conversations
- CVE-2024-1931unbound: Infinite loop due to improper EDE message size check
- CVE-2024-1874php: Fail to Escape Arguments Properly in Microsoft Windows
- CVE-2024-1753buildah: Buildah: Container escape via improper bind mount validation
- CVE-2024-1737bind: bind9: BIND's database will be slow if a very large number of RRs exist at the same nam
- CVE-2024-1597pgjdbc: PostgreSQL JDBC Driver allows attacker to inject SQL if using PreferQueryMode=SIMPLE
- CVE-2024-1553Mozilla: Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8, and Thunderbird 115.8
- CVE-2024-1552Mozilla: Incorrect code generation on 32-bit ARM devices
- CVE-2024-1551Mozilla: Multipart HTTP Responses would accept the Set-Cookie header in response parts
- CVE-2024-1550Mozilla: Mouse cursor re-positioned unexpectedly could have led to unintended permission grants
- CVE-2024-1549Mozilla: Custom cursor could obscure the permission dialog
- CVE-2024-1548Mozilla: Fullscreen Notification could have been hidden by select element
- CVE-2024-1547Mozilla: Alert dialog could have been spoofed on another site
- CVE-2024-1546Mozilla: Out-of-bounds memory read in networking channels
- CVE-2024-1488unbound: unrestricted reconfiguration enabled to anyone that may lead to local privilege escalation
- CVE-2024-1481freeipa: specially crafted HTTP requests potentially lead to denial of service
- CVE-2024-1454opensc: Memory use after free in AuthentIC driver when updating token info
- CVE-2024-1442grafana: Improper priviledge managent for users with data source permissions
- CVE-2024-1441libvirt: off-by-one error in udevListInterfacesByStatus()
- CVE-2024-1394golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads
- CVE-2024-1313grafana: vulnerable to authorization bypass