CVE 2024 document archive · 83
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
4,167 documents · Identifier year 2024 · 83 / 84
- CVE-2024-1312kernel: Race condition leads to use after free during VMA lock in lock_vma_under_rcu
- CVE-2024-1298edk2: Temporary DoS vulnerability
- CVE-2024-1151kernel: stack overflow problem in Open vSwitch kernel module leading to DoS
- CVE-2024-1135python-gunicorn: HTTP Request Smuggling due to improper validation of Transfer-Encoding headers
- CVE-2024-1086kernel: nf_tables: use-after-free vulnerability in the nft_verdict_init() function
- CVE-2024-1085kernel: nf_tables: use-after-free vulnerability in the nft_setelem_catchall_deactivate() function
- CVE-2024-1062389-ds-base: a heap overflow leading to denail-of-servce while writing a value larger than 256 chars (in log_entry_attr)
- CVE-2024-1048grub2: grub2-set-bootflag can be abused by local (pseudo-)users
- CVE-2024-1013unixODBC: out of bounds stack write due to pointer-to-integer types conversion
- CVE-2024-0985postgresql: non-owner 'REFRESH MATERIALIZED VIEW CONCURRENTLY' executes arbitrary SQL
- CVE-2024-0914opencryptoki: timing side-channel in handling of RSA PKCS#1 v1.5 padded ciphertexts (Marvin)
- CVE-2024-0911indent: heap-based buffer overflow in set_buf_break()
- CVE-2024-0853curl: OCSP verification bypass with TLS session reuse
- CVE-2024-0841kernel: hugetlbfs: Null pointer dereference in hugetlbfs_fill_super function
- CVE-2024-0775kernel: use-after-free while changing the mount option in __ext4_remount leading
- CVE-2024-0760bind: bind9: A flood of DNS messages over TCP may make the server unstable
- CVE-2024-0755Mozilla: Memory safety bugs fixed in Firefox 122, Firefox ESR 115.7, and Thunderbird 115.7
- CVE-2024-0754firefox: WASM source files could have caused a crash when loaded in devtools
- CVE-2024-0753Mozilla: HSTS policy on subdomain could bypass policy of upper domain
- CVE-2024-0752firefox: use-after-free crash could have occurred on macOS if a Firefox update were being applied on a very busy system
- CVE-2024-0751Mozilla: Privilege escalation through devtools
- CVE-2024-0750Mozilla: Potential permissions request bypass via clickjacking
- CVE-2024-0749Mozilla: Phishing site popup could show local origin in address bar
- CVE-2024-0748firefox: an arbitrary URI in the address bar or history
- CVE-2024-0747Mozilla: Bypass of Content Security Policy when directive unsafe-inline was set
- CVE-2024-0746Mozilla: Crash when listing printers on Linux
- CVE-2024-0745firefox: stack buffer overflow in WebAudio `OscillatorNode`
- CVE-2024-0744firefox: JIT compiled code could have dereferenced a wild pointer value
- CVE-2024-0743Mozilla: Crash in NSS TLS method
- CVE-2024-0742Mozilla: Failure to update user input timestamp
- CVE-2024-0741Mozilla: Out of bounds write in ANGLE
- CVE-2024-0727openssl: denial of service via null dereference
- CVE-2024-0690ansible-core: possible information leak in tasks that ignore ANSIBLE_NO_LOG configuration
- CVE-2024-0684coreutils: heap overflow in split --line-bytes with very long lines
- CVE-2024-0646kernel: ktls overwrites readonly memory pages when using function splice with a ktls socket as destination
- CVE-2024-0641kernel: deadlock leading to denial of service in tipc_crypto_key_revoke
- CVE-2024-0639kernel: potential deadlock on &net->sctp.addr_wq_lock leading to DOS
- CVE-2024-0607kernel: nf_tables: pointer math issue in nft_byteorder_eval()
- CVE-2024-0584kernel: refcnt uaf issue when receiving igmp query packet in igmp_start_timer
- CVE-2024-0582kernel: io_uring: page use-after-free vulnerability via buffer ring mmap
- CVE-2024-0567gnutls: rejects certificate chain with distributed trust
- CVE-2024-0565kernel: CIFS Filesystem Decryption Improper Input Validation Remote Code Execution Vulnerability in function receive_encrypted_standard of client
- CVE-2024-0564kernel: max page sharing of Kernel Samepage Merging (KSM) may cause memory deduplication
- CVE-2024-0562kernel: use-after-free after removing device in wb_inode_writeback_end in mm/page-writeback.c
- CVE-2024-0553gnutls: incomplete fix for CVE-2023-5981
- CVE-2024-0450python: The zipfile module is vulnerable to zip-bombs leading to denial of service
- CVE-2024-0444gstreamer: AV1 Video Parsing Stack-based Buffer Overflow
- CVE-2024-0443kernel: blkio memory leakage due to blkcg and some blkgs are not freed after they are made offline.
- CVE-2024-0409xorg-x11-server: SELinux context corruption
- CVE-2024-0408xorg-x11-server: SELinux unlabeled GLX PBuffer