Security Warnings — Week: 2024-W41

Fortinet FortiOS: Mehrere Schwachstellen ermöglichen Codeausführung

2024-10-09 CVE-2024-21762

criticalBSI 2024-W41

Fortinet Multiple Products Format String Vulnerability

2024-10-09 CVE-2024-23113

highFortinet CVE 2024-W41

Ivanti Cloud Services Appliance (CSA) OS Command Injection Vulnerability

2024-10-09 CVE-2024-9380

highIvanti CVE 2024-W41

Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerability

2024-10-09 CVE-2024-9379

highIvanti CVE 2024-W41

Linux Kernel: Mehrere Schwachstellen

2024-10-09 CVE-2024-0582

mediumBSI 2024-W41

Linux Kernel: Schwachstelle ermöglicht Denial of Service

2024-10-09 CVE-2023-7192

mediumRed Hat 2024-W41

Linux Kernel: Schwachstelle ermöglicht Denial of Service

2024-10-09 CVE-2024-26593

mediumBSI 2024-W41

Linux Kernel: Schwachstelle ermöglicht Privilegieneskalation

2024-10-09 CVE-2023-5197

mediumBSI 2024-W41

Linux Kernel: Schwachstelle ermöglicht Privilegieneskalation

2024-10-09 CVE-2023-6817

mediumBSI 2024-W41

sudo: Schwachstelle ermöglicht Privilegieneskalation

2024-10-09 CVE-2023-42465

mediumBSI 2024-W41

.NET and Visual Studio Denial of Service Vulnerability

2024-10-08 CVE-2024-43485

highMicrosoft MSRC 2024-W41

.NET and Visual Studio Remote Code Execution Vulnerability

2024-10-08 CVE-2024-38229

highMicrosoft MSRC 2024-W41

.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability

2024-10-08 CVE-2024-43483

highMicrosoft MSRC 2024-W41

.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability

2024-10-08 CVE-2024-43484

highMicrosoft MSRC 2024-W41

ACPI: PAD: fix crash in exit_round_robin()

2024-10-08 CVE-2024-49935

mediumMicrosoft MSRC 2024-W41

ACPI: sysfs: validate return type of _STR method

2024-10-08 CVE-2024-49860

highMicrosoft MSRC 2024-W41

ALSA: asihpi: Fix potential OOB array access

2024-10-08 CVE-2024-50007

highMicrosoft MSRC 2024-W41

An issue was discovered in libexpat before 2.6.4. There is a crash within the XML_ResumeParser function because XML_StopParser can stop/suspend an unstarted parser.

2024-10-08 CVE-2024-50602

mediumMicrosoft MSRC 2024-W41

Apache Commons IO: Possible denial of service attack on untrusted input to XmlStreamReader

2024-10-08 CVE-2024-47554

mediumMicrosoft MSRC 2024-W41

Apache Subversion: Command line argument injection on Windows platforms

2024-10-08 CVE-2024-45720

highMicrosoft MSRC 2024-W41

Asio C++ Library lacks a fallback error code in the case of SSL_ERROR_SYSCALL

2024-10-08 CVE-2019-25219

highMicrosoft MSRC 2024-W41

Azure Command Line Integration (CLI) Elevation of Privilege Vulnerability

2024-10-08 CVE-2024-43591

highMicrosoft MSRC 2024-W41

Azure Monitor Agent Elevation of Privilege Vulnerability

2024-10-08 CVE-2024-38097

highMicrosoft MSRC 2024-W41

Azure Service Fabric for Linux Remote Code Execution Vulnerability

2024-10-08 CVE-2024-43480

mediumMicrosoft MSRC 2024-W41

Azure Stack Hyperconverged Infrastructure (HCI) Elevation of Privilege Vulnerability

2024-10-08 CVE-2024-38179

highMicrosoft MSRC 2024-W41

BitLocker Security Feature Bypass Vulnerability

2024-10-08 CVE-2024-43513

mediumMicrosoft MSRC 2024-W41

block bfq: fix uaf for accessing waker_bfqq after splitting

2024-10-08 CVE-2024-49854

highMicrosoft MSRC 2024-W41

block: fix potential invalid pointer dereference in blk_add_partition

2024-10-08 CVE-2024-47705

mediumMicrosoft MSRC 2024-W41

Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync

2024-10-08 CVE-2024-50029

highMicrosoft MSRC 2024-W41

Bluetooth: ISO: Fix multiple init when debugfs is disabled

2024-10-08 CVE-2024-50077

mediumMicrosoft MSRC 2024-W41

Bluetooth: L2CAP: Fix uaf in l2cap_connect

2024-10-08 CVE-2024-49950

highMicrosoft MSRC 2024-W41

Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change

2024-10-08 CVE-2024-50044

lowMicrosoft MSRC 2024-W41

bpf: correctly handle malformed BPF_CORE_TYPE_ID_LOCAL relos

2024-10-08 CVE-2024-49850

mediumMicrosoft MSRC 2024-W41

bpf: Fail verification for sign-extension of packet data/data_end/data_meta

2024-10-08 CVE-2024-47702

mediumMicrosoft MSRC 2024-W41

bpf: Fix a sdiv overflow issue

2024-10-08 CVE-2024-49888

mediumMicrosoft MSRC 2024-W41

bpf: Fix helper writes to read-only maps

2024-10-08 CVE-2024-49861

highMicrosoft MSRC 2024-W41

bpf: Prevent tail call between progs attached to different hooks

2024-10-08 CVE-2024-50063

highMicrosoft MSRC 2024-W41

bpf: Zero former ARG_PTR_TO_{LONGINT} args in case of error

2024-10-08 CVE-2024-47728

mediumMicrosoft MSRC 2024-W41

BranchCache Denial of Service Vulnerability

2024-10-08 CVE-2024-38149

highMicrosoft MSRC 2024-W41

BranchCache Denial of Service Vulnerability

2024-10-08 CVE-2024-43506

highMicrosoft MSRC 2024-W41

btrfs: don't readahead the relocation inode on RST

2024-10-08 CVE-2024-49932

mediumMicrosoft MSRC 2024-W41

btrfs: fix uninitialized pointer free in add_inode_ref()

2024-10-08 CVE-2024-50088

mediumMicrosoft MSRC 2024-W41

btrfs: fix uninitialized pointer free on read_alloc_one_name() error

2024-10-08 CVE-2024-50087

mediumMicrosoft MSRC 2024-W41

Buildah: buildah allows arbitrary directory mount

2024-10-08 CVE-2024-9675

mediumMicrosoft MSRC 2024-W41

Buildah: podman: improper input validation in bind-propagation option of dockerfile run --mount instruction

2024-10-08 CVE-2024-9407

mediumMicrosoft MSRC 2024-W41

cachefiles: fix dentry leak in cachefiles_open_file()

2024-10-08 CVE-2024-49870

mediumMicrosoft MSRC 2024-W41

can: bcm: Clear bo->bcm_proc_read after remove_proc_entry().

2024-10-08 CVE-2024-47709

mediumMicrosoft MSRC 2024-W41

cgi.force_redirect configuration is bypassable due to the environment variable collision

2024-10-08 CVE-2024-8927

highMicrosoft MSRC 2024-W41

cifs: Fix buffer overflow when parsing NFS reparse points

2024-10-08 CVE-2024-49996

highMicrosoft MSRC 2024-W41

CMSE secure state may leak from stack to floating-point registers

2024-10-08 CVE-2024-7883

lowMicrosoft MSRC 2024-W41

Code Integrity Guard Security Feature Bypass Vulnerability

2024-10-08 CVE-2024-43585

mediumMicrosoft MSRC 2024-W41

Copilot Studio Information Disclosure Vulnerability

2024-10-08 CVE-2024-43610

highMicrosoft MSRC 2024-W41

cpufreq: amd-pstate: add check for cpufreq_cpu_get's return value

2024-10-08 CVE-2024-50009

mediumMicrosoft MSRC 2024-W41

crypto: hisilicon/qm - inject error before stopping queue

2024-10-08 CVE-2024-47730

highMicrosoft MSRC 2024-W41

CUPS cups-browsed before 2.5b1 will send an HTTP POST request to an arbitrary destination and port in response to a single IPP UDP packet requesting a printer to be added, a differ

2024-10-08 CVE-2024-47850

highMicrosoft MSRC 2024-W41

DeepSpeed Remote Code Execution Vulnerability

2024-10-08 CVE-2024-43497

highMicrosoft MSRC 2024-W41

Denial-of-service due to malformed ACL selectors in Redis

2024-10-08 CVE-2024-31227

mediumMicrosoft MSRC 2024-W41

Denial-of-service due to unbounded pattern matching in Redis

2024-10-08 CVE-2024-31228

mediumMicrosoft MSRC 2024-W41

device-dax: correct pgoff align in dax_set_mapping()

2024-10-08 CVE-2024-50022

mediumMicrosoft MSRC 2024-W41

drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error

2024-10-08 CVE-2024-47697

highMicrosoft MSRC 2024-W41