Security Warnings — Week: 2024-W46

fsl/fman: Fix refcount handling of fman-related devices

2024-11-12 CVE-2024-50166

mediumMicrosoft MSRC 2024-W46

gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant buffer overflow because SOCKS4_CONN_MSG_LEN is not sufficient for a trailing '\0' character.

2024-11-12 CVE-2024-52533

criticalMicrosoft MSRC 2024-W46

GNOME libsoup before 3.6.0 allows HTTP request smuggling in some configurations

2024-11-12 CVE-2024-52530

highMicrosoft MSRC 2024-W46

GNOME libsoup before 3.6.1 allows a buffer overflow in applications that perform conversion to UTF-8 in soup_header_parse_param_list_strict.

2024-11-12 CVE-2024-52531

highMicrosoft MSRC 2024-W46

GNOME libsoup before 3.6.1 has an infinite loop and memory consumption. during the reading of certain patterns of WebSocket data from clients.

2024-11-12 CVE-2024-52532

highMicrosoft MSRC 2024-W46

GNU Wget is vulnerable to an SSRF attack when accessing partially-user-controlled shorthand URLs

2024-11-12 CVE-2024-10524

mediumMicrosoft MSRC 2024-W46

go-gh `auth.TokenForHost` violates GitHub host security boundary within a codespace

2024-11-12 CVE-2024-53859

mediumMicrosoft MSRC 2024-W46

HID: amd_sfh: Switch to device-managed dmam_alloc_coherent()

2024-11-12 CVE-2024-50189

mediumMicrosoft MSRC 2024-W46

HID: core: zero-initialize the report buffer

2024-11-12 CVE-2024-50302

mediumMicrosoft MSRC 2024-W46

HSTS subdomain overwrites parent cache entry

2024-11-12 CVE-2024-9681

mediumMicrosoft MSRC 2024-W46

iio: gts-helper: Fix memory leaks for the error path of iio_gts_build_avail_scale_table()

2024-11-12 CVE-2024-53076

mediumMicrosoft MSRC 2024-W46

Improper validation of IPv6 and IPvFuture addresses

2024-11-12 CVE-2024-11168

lowMicrosoft MSRC 2024-W46

In elisp-mode.el in GNU Emacs before 30.1, a user who chooses to invoke elisp-completion-at-point (for code completion) on untrusted Emacs Lisp source code can trigger unsafe Lisp

2024-11-12 CVE-2024-53920

highMicrosoft MSRC 2024-W46

InfluxDB OSS 2.x through 2.7.11 stores the administrative operator token under the default organization which allows authorized users with read access to the authorization resource

2024-11-12 CVE-2024-30896

criticalMicrosoft MSRC 2024-W46

Insyde UEFI Firmware: Mehrere Schwachstellen ermöglichen Privilegieneskalation

2024-11-12 CVE-2024-25078

mediumBSI 2024-W46

Integer overflow in the firebird and dblib quoters causing OOB writes

2024-11-12 CVE-2024-11236

criticalMicrosoft MSRC 2024-W46

iov_iter: fix copy_page_from_iter_atomic() if KMAP_LOCAL_FORCE_MAP

2024-11-12 CVE-2024-50222

highMicrosoft MSRC 2024-W46

ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find()

2024-11-12 CVE-2024-50304

mediumMicrosoft MSRC 2024-W46

Kernel: ksmbd: smb2_open out-of-bounds read information disclosure vulnerability

2024-11-12 CVE-2023-4458

mediumMicrosoft MSRC 2024-W46

ksmbd: fix slab-use-after-free in ksmbd_smb2_session_create

2024-11-12 CVE-2024-50286

highMicrosoft MSRC 2024-W46

ksmbd: fix slab-use-after-free in smb3_preauth_hash_rsp

2024-11-12 CVE-2024-50283

highMicrosoft MSRC 2024-W46

ksmbd: Fix the missing xa_store error check

2024-11-12 CVE-2024-50284

mediumMicrosoft MSRC 2024-W46

KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory

2024-11-12 CVE-2024-50115

highMicrosoft MSRC 2024-W46

Leak partial content of the heap through heap buffer over-read in mysqlnd

2024-11-12 CVE-2024-8929

mediumMicrosoft MSRC 2024-W46

LightGBM Remote Code Execution Vulnerability

2024-11-12 CVE-2024-43598

highMicrosoft MSRC 2024-W46

LoongArch: Don't crash in stack_top() for tasks without vDSO

2024-11-12 CVE-2024-50133

mediumMicrosoft MSRC 2024-W46

LoongArch: Enable IRQ if do_ale() triggered in irq-enabled context

2024-11-12 CVE-2024-50111

mediumMicrosoft MSRC 2024-W46

LoongArch: KVM: Mark hrtimer to expire in hard interrupt context

2024-11-12 CVE-2024-53089

mediumMicrosoft MSRC 2024-W46

macsec: Fix use-after-free while sending the offloading packet

2024-11-12 CVE-2024-50261

highMicrosoft MSRC 2024-W46

Mariner

2024-11-12 CVE-2020-28458

highMicrosoft MSRC 2024-W46

Mariner

2024-11-12 CVE-2021-36647

mediumMicrosoft MSRC 2024-W46

Mariner

2024-11-12 CVE-2022-0529

mediumMicrosoft MSRC 2024-W46

Mariner

2024-11-12 CVE-2022-0530

mediumMicrosoft MSRC 2024-W46

Mariner

2024-11-12 CVE-2022-48303

mediumMicrosoft MSRC 2024-W46

Mariner

2024-11-12 CVE-2023-0466

mediumMicrosoft MSRC 2024-W46

Mariner

2024-11-12 CVE-2023-1981

mediumMicrosoft MSRC 2024-W46

Mariner

2024-11-12 CVE-2023-23916

mediumMicrosoft MSRC 2024-W46

Mariner

2024-11-12 CVE-2023-27535

mediumMicrosoft MSRC 2024-W46

Mariner

2024-11-12 CVE-2023-27536

mediumMicrosoft MSRC 2024-W46

Mariner

2024-11-12 CVE-2023-27538

mediumMicrosoft MSRC 2024-W46

Mariner

2024-11-12 CVE-2023-2975

mediumMicrosoft MSRC 2024-W46

Mariner

2024-11-12 CVE-2023-3446

mediumMicrosoft MSRC 2024-W46

Mariner

2024-11-12 CVE-2023-39128

mediumMicrosoft MSRC 2024-W46

Mariner

2024-11-12 CVE-2023-39129

mediumMicrosoft MSRC 2024-W46

Mariner

2024-11-12 CVE-2023-39130

mediumMicrosoft MSRC 2024-W46

Mariner

2024-11-12 CVE-2023-39325

highMicrosoft MSRC 2024-W46

Mariner

2024-11-12 CVE-2023-39804

mediumMicrosoft MSRC 2024-W46

Mariner

2024-11-12 CVE-2023-42366

mediumMicrosoft MSRC 2024-W46

Mariner

2024-11-12 CVE-2023-43615

highMicrosoft MSRC 2024-W46

Mariner

2024-11-12 CVE-2023-45866

mediumMicrosoft MSRC 2024-W46

Mariner

2024-11-12 CVE-2023-48795

mediumMicrosoft MSRC 2024-W46

Mariner

2024-11-12 CVE-2023-49582

mediumMicrosoft MSRC 2024-W46

Mariner

2024-11-12 CVE-2023-52353

highMicrosoft MSRC 2024-W46

Mariner

2024-11-12 CVE-2023-5363

highMicrosoft MSRC 2024-W46

Mariner

2024-11-12 CVE-2023-5870

mediumMicrosoft MSRC 2024-W46

Mariner

2024-11-12 CVE-2023-5981

mediumMicrosoft MSRC 2024-W46

Mariner

2024-11-12 CVE-2023-6129

mediumMicrosoft MSRC 2024-W46

Mariner

2024-11-12 CVE-2023-7256

mediumMicrosoft MSRC 2024-W46

Mariner

2024-11-12 CVE-2024-22365

mediumMicrosoft MSRC 2024-W46

Mariner

2024-11-12 CVE-2024-23170

mediumMicrosoft MSRC 2024-W46