Allgemein – Seite 163 – Leibling.de

CVE-2024-22705 An issue was discovered in ksmbd in the Linux kernel before 6.6.10. smb2_get_data_area_len in fs/smb/server/smb2misc.c can cause an smb_strndup_from_utf16 out-of-bounds access because the relationship between Name data and CreateContexts data is mishandled.

Information published.

CVE-2024-0727 PKCS12 Decoding crashes

Information published.

CVE-2024-0607 Kernel: nf_tables: pointer math issue in nft_byteorder_eval()

Information published.

CVE-2023-51258 A memory leak issue discovered in YASM v.1.3.0 allows a local attacker to cause a denial of service via the new_Token function in the modules/preprocs/nasm/nasm-pp:1512.

Information published.

CVE-2024-0741 An out of bounds write in ANGLE could have allowed an attacker to corrupt memory leading to a potentially exploitable crash. This vulnerability affects Firefox < 122, Firefox ESR < 115.7, and Thunderbird < 115.7.

Information published.

CVE-2023-49568 Maliciously crafted Git server replies can cause DoS on go-git clients

Information published.

CVE-2023-49569 Maliciously crafted Git server replies can lead to path traversal and RCE on go-git clients

Information published.

CVE-2024-0646 Kernel: ktls overwrites readonly memory pages when using function splice with a ktls socket as destination

Information published.

CVE-2024-0639 Kernel: potential deadlock on &net->sctp.addr_wq_lock leading to dos

Information published.

CVE-2023-51043 In the Linux kernel before 6.4.5 drivers/gpu/drm/drm_atomic.c has a use-after-free during a race condition between a nonblocking atomic commit and a driver unload.

Information published.