🚨 EUVD-2024-45936 📊 9.8/10 📝 gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant buffer overflow because SOCKS4_CONN_MSG_LEN is not sufficient for a trailing '... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-45936 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2024-50473 📊 7.8/10 🏢 Linux 📝 In the Linux kernel, the following vulnerability has been resolved: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT In qdisc_tree_reduce_backlog, Q... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-50473 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2024-50475 📊 7.1/10 🏢 Linux 📝 In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd() 1. The size o... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-50475 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2024-50517 📊 5.5/10 🏢 Linux 📝 In the Linux kernel, the following vulnerability has been resolved: fs: Fix uninitialized value issue in from_kuid and from_kgid ocfs2_setattr() uses attr... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-50517 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2024-53142 📊 3.6/10 🏢 shadow-maint 📝 shadow-utils (aka shadow) 4.4 through 4.17.0 establishes a default /etc/subuid behavior (e.g., uid 100000 through 165535 for the first user account) ... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-53142 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2024-53217 📊 5.5/10 🏢 Linux 📝 In the Linux kernel, the following vulnerability has been resolved: ftrace: Fix regression with module command in stack_trace_filter When executing the fo... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-53217 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2024-53218 📊 n/a 🏢 Linux 📝 In the Linux kernel, the following vulnerability has been resolved: ovl: Filter invalid inodes with missing lookup function Add a check to the ovl_dentry_wei... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-53218 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2023-36491 📊 7.8/10 📝 In the Linux kernel through 6.3.1, a use-after-free in Netfilter nf_tables when processing batch requests can be abused to perform arbitrary read and write operatio... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-36491 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2023-36854 📊 5.5/10 📝 A flaw was found in GLib. GVariant deserialization is vulnerable to a slowdown issue where a crafted GVariant can cause excessive processing, leading to denial of s... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-36854 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2023-36879 📊 4.7/10 🏢 glib 📝 A flaw was found in glib, where the gvariant deserialization code is vulnerable to a denial of service introduced by additional input validation added to res... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-36879 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2023-36886 📊 5.3/10 📝 A flaw was found in GLib. The GVariant deserialization code is vulnerable to a heap buffer overflow introduced by the fix for CVE-2023-32665. This bug does not affe... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-36886 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2023-36908 📊 5.5/10 📝 A flaw was found in GLib. GVariant deserialization is vulnerable to an exponential blowup issue where a crafted GVariant can cause excessive processing, leading to ... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-36908 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2023-38400 📊 7.8/10 📝 The fix for XSA-423 added logic to Linux'es netback driver to deal with a frontend splitting a packet in a way such that not all of the headers would come in one pi... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-38400 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2023-39008 📊 6.5/10 📝 D-Bus before 1.15.6 sometimes allows unprivileged users to crash dbus-daemon. If a privileged user with control over the dbus-daemon is using the org.freedesktop.DB... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-39008 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-101799 📊 5.3/10 🏢 sgl-project 📝 A security vulnerability has been detected in sgl-project SGLang up to 0.5.19. Affected by this issue is the function Session.create_req of the file... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-101799 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2023-39039 📊 7.8/10 🏢 Linux 📝 Linux Kernel nftables Out-Of-Bounds Read/Write Vulnerability; nft_byteorder poorly handled vm register contents when CAP_NET_ADMIN is in any user or network... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-39039 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2023-39822 📊 n/a 📝 An issue was discovered in the Linux kernel through 6.3.8. A use-after-free was found in ravb_remove in drivers/net/ethernet/renesas/ravb_main.c. 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-39822 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2023-39929 📊 7.5/10 🏢 envoyproxy 📝 Envoy is a cloud-native high-performance edge/middle/service proxy. Envoy’s HTTP/2 codec may leak a header map and bookkeeping structures upon receivin... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-39929 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2023-40604 📊 n/a 📝 The OCB feature in libnettle in Nettle 3.9 before 3.9.1 allows memory corruption. 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-40604 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2023-41353 📊 4.6/10 📝 An issue was discovered in the USB subsystem in the Linux kernel through 6.4.2. There is an out-of-bounds and crash in read_descriptors in drivers/usb/core/sysfs.c. 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-41353 #cybersecurity #infosec #cve #euvd