Security Warnings — Week: 2024-W37

Red Hat Quarkus: Mehrere Schwachstellen ermöglichen Denial of Service

2024-09-10 CVE-2023-39410

mediumRed Hat 2024-W37

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

2024-09-10 CVE-2024-44952

mediumMicrosoft MSRC 2024-W37

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

2024-09-10 CVE-2024-46756

highMicrosoft MSRC 2024-W37

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

2024-09-10 CVE-2024-46757

highMicrosoft MSRC 2024-W37

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

2024-09-10 CVE-2024-46758

highMicrosoft MSRC 2024-W37

rtla/osnoise: Prevent NULL dereference in error handling

2024-09-10 CVE-2024-45002

mediumMicrosoft MSRC 2024-W37

runc can be confused to create empty files/directories on the host

2024-09-10 CVE-2024-45310

lowMicrosoft MSRC 2024-W37

s390/dasd: fix error recovery leading to data corruption on ESE devices

2024-09-10 CVE-2024-45026

highMicrosoft MSRC 2024-W37

s390/sclp: Prevent release of buffer in I/O

2024-09-10 CVE-2024-44969

mediumMicrosoft MSRC 2024-W37

sched/smt: Fix unbalance sched_smt_present dec/inc

2024-09-10 CVE-2024-44958

mediumMicrosoft MSRC 2024-W37

scsi: aacraid: Fix double-free on probe failure

2024-09-10 CVE-2024-46673

highMicrosoft MSRC 2024-W37

selinuxsmack: don't bypass permissions check in inode_setsecctx hook

2024-09-10 CVE-2024-46695

mediumMicrosoft MSRC 2024-W37

send vulnerable to template injection that can lead to XSS

2024-09-10 CVE-2024-43799

mediumMicrosoft MSRC 2024-W37

serial: sc16is7xx: fix TX fifo corruption

2024-09-10 CVE-2024-44951

mediumMicrosoft MSRC 2024-W37

serve-static affected by template injection that can lead to XSS

2024-09-10 CVE-2024-43800

mediumMicrosoft MSRC 2024-W37

smb: client: fix double put of @cfile in smb2_set_path_size()

2024-09-10 CVE-2024-46796

highMicrosoft MSRC 2024-W37

smb/client: avoid dereferencing rdata=NULL in smb2_new_read_req()

2024-09-10 CVE-2024-46686

mediumMicrosoft MSRC 2024-W37

smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()

2024-09-10 CVE-2024-46742

mediumMicrosoft MSRC 2024-W37

soc: qcom: cmd-db: Map shared memory as WC not WB

2024-09-10 CVE-2024-46689

mediumMicrosoft MSRC 2024-W37

soc: qcom: pmic_glink: Fix race during initialization

2024-09-10 CVE-2024-46693

mediumMicrosoft MSRC 2024-W37

spi: nxp-fspi: fix the KASAN report out-of-bounds bug

2024-09-10 CVE-2024-46853

highMicrosoft MSRC 2024-W37

Squashfs: sanity check symbolic link size

2024-09-10 CVE-2024-46744

highMicrosoft MSRC 2024-W37

Stack exhaustion in all Parse functions in go/parser

2024-09-10 CVE-2024-34155

mediumMicrosoft MSRC 2024-W37

Stack exhaustion in Decoder.Decode in encoding/gob

2024-09-10 CVE-2024-34156

highMicrosoft MSRC 2024-W37

Stack exhaustion in Parse in go/build/constraint

2024-09-10 CVE-2024-34158

highMicrosoft MSRC 2024-W37

tcp: prevent concurrent execution of tcp_sk_exit_batch

2024-09-10 CVE-2024-44991

mediumMicrosoft MSRC 2024-W37

thunderbolt: Mark XDomain as unplugged when router is removed

2024-09-10 CVE-2024-46702

mediumMicrosoft MSRC 2024-W37

tty: serial: fsl_lpuart: mark last busy before uart_add_one_port

2024-09-10 CVE-2024-46706

mediumMicrosoft MSRC 2024-W37

ublk_drv: fix NULL pointer dereference in ublk_ctrl_start_recovery()

2024-09-10 CVE-2024-46735

mediumMicrosoft MSRC 2024-W37

uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind

2024-09-10 CVE-2024-46739

mediumMicrosoft MSRC 2024-W37

usb: dwc3: core: Prevent USB core invalid event buffer address access

2024-09-10 CVE-2024-46675

mediumMicrosoft MSRC 2024-W37

usb: dwc3: st: fix probed platform device ref count on probe error path

2024-09-10 CVE-2024-46674

highMicrosoft MSRC 2024-W37

usb: gadget: aspeed_udc: validate endpoint index for ast udc

2024-09-10 CVE-2024-46836

highMicrosoft MSRC 2024-W37

usb: gadget: core: Check for unset descriptor

2024-09-10 CVE-2024-44960

mediumMicrosoft MSRC 2024-W37

usb: typec: ucsi: Fix null pointer dereference in trace

2024-09-10 CVE-2024-46719

mediumMicrosoft MSRC 2024-W37

vfs: Don't evict inode under the inode lru traversing context

2024-09-10 CVE-2024-45003

mediumMicrosoft MSRC 2024-W37

VMCI: Fix use-after-free when removing resource in vmci_resource_remove()

2024-09-10 CVE-2024-46738

highMicrosoft MSRC 2024-W37

vsock: fix recursive ->recvmsg calls

2024-09-10 CVE-2024-44996

mediumMicrosoft MSRC 2024-W37

wifi: brcmfmac: cfg80211: Handle SSID based pmksa deletion

2024-09-10 CVE-2024-46672

mediumMicrosoft MSRC 2024-W37

wifi: mt76: mt7921: fix NULL pointer access in mt7921_ipv6_addr_change

2024-09-10 CVE-2024-46860

mediumMicrosoft MSRC 2024-W37

wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()

2024-09-10 CVE-2024-46755

mediumMicrosoft MSRC 2024-W37

wifi: rtw88: usb: schedule rx work after everything is set up

2024-09-10 CVE-2024-46760

mediumMicrosoft MSRC 2024-W37

x86/hyperv: fix kexec crash due to VP assist page corruption

2024-09-10 CVE-2024-46864

mediumMicrosoft MSRC 2024-W37

x86/mm: Fix pti_clone_pgtable() alignment assumption

2024-09-10 CVE-2024-44965

mediumMicrosoft MSRC 2024-W37

xen: privcmd: Switch from mutex to spinlock for irqfds

2024-09-10 CVE-2024-44957

mediumMicrosoft MSRC 2024-W37

xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration

2024-09-10 CVE-2024-45006

mediumMicrosoft MSRC 2024-W37

Cacti: Mehrere Schwachstellen

2024-09-09 CVE-2024-34340

highBSI 2024-W37

ImageMagick Improper Input Validation Vulnerability

2024-09-09 CVE-2016-3714

highImageMagick CVE 2024-W37

Linux Kernel PIE Stack Buffer Corruption Vulnerability

2024-09-09 CVE-2017-1000253

criticalLinux CVE 2024-W37

SonicWall SonicOS Improper Access Control Vulnerability

2024-09-09 CVE-2024-40766

criticalSonicWall CVE 2024-W37

Wireshark: Schwachstelle ermöglicht Offenlegung von Informationen

2024-09-09 CVE-2023-5371

mediumBSI 2024-W37