Skip to contentDebian Linux vulnerabilities
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreRDMA/srpt: Do not register event handler until srpt device is fully setupCVE-2024-26872Fix available7.8 High
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreNFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102CVE-2024-26870Fix available7.8 High
- debian linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +3 more +5 morehsr: Fix uninit-value access in hsr_get_node()CVE-2024-26863Fix available5.5 Medium
- debian linux, linux kernel +1 morepacket: annotate data-races around ignore_outgoingCVE-2024-26862Fix available4.7 Medium
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morewireguard: receive: annotate data-race around receiving_counter.counterCVE-2024-26861Fix available4.7 Medium
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morenet/bnx2x: Prevent access to a freed page in page_poolCVE-2024-26859Fix available4.7 Medium
- debian linux, linux kernel +1 morewifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabledCVE-2023-52644Fix available6.3 Medium
- debian linux, linux kernel +1 moregeneve: make sure to pull inner header in geneve_rx()CVE-2024-26857Fix available7.3 High
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morenet: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()CVE-2024-26855Fix available5.5 Medium
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morenet/ipv6: avoid possible UAF in ip6_route_mpath_notify()CVE-2024-26852Fix available7.8 High
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morenetfilter: nf_conntrack_h323: Add protection for bmp length out of rangeCVE-2024-26851Fix available7.5 High
- debian linux, linux kernel +1 morenvme-fc: do not wait in vain when unloading moduleCVE-2024-26846Fix available4.4 Medium
- debian linux, linux kernel +1 morescsi: target: core: Add TMF to tmr_list handlingCVE-2024-26845Fix available7.5 High
- debian linux, linux kernel +1 moreefi: runtime: Fix potential overflow of soft-reserved region sizeCVE-2024-26843Fix available6.0 Medium
- debian linux, linux kernel +1 moreIB/hfi1: Fix a memleak in init_credit_returnCVE-2024-26839Fix available5.5 Medium
- debian linux, linux kernel, siemens ruggedcom rst2428p +5 more +7 morenetfilter: nf_tables: set dormant flag on hook register failureCVE-2024-26835Fix available5.5 Medium
- debian linux, linux kernel +1 moredrm/amd/display: Fix memory leak in dm_sw_fini()CVE-2024-26833Fix available5.5 Medium
- debian linux, linux kernel +1 morenfc: nci: free rx_data_reassembly skb on NCI device cleanupCVE-2024-26825Fix available5.5 Medium
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morehv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missedCVE-2024-26820Fix available5.5 Medium
- debian linux, linux kernel +1 moremedia: rc: bpf attach/detach requires write permissionCVE-2023-52642Fix available7.8 High
- debian linux, gnu glibc, netapp active iq unified manager +13 more +15 moreThe iconv() function in the GNU C Library versions 2.39 and older may overflow the output buffer...CVE-2024-2961Public exploitFix availableEPSS 88.3%7.3 High
- oracle mysql, oracle corporation mysql server, debian linux +5 more +7 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Client: mysqldump). ...CVE-2024-21096Fix available4.9 Medium
- oracle graalvm, graalvm for jdk, jdk +8 more +10 moreVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition...CVE-2024-21094Fix available3.7 Low
- oracle graalvm, debian linux, netapp active iq unified manager +7 more +9 moreVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE ...CVE-2024-21085Fix available3.7 Low
- oracle graalvm, graalvm for jdk, jdk +8 more +10 moreVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition...CVE-2024-21068Fix available3.7 Low
- oracle graalvm, graalvm for jdk, jdk +8 more +10 moreVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition...CVE-2024-21012Fix available3.7 Low
- oracle graalvm, graalvm for jdk, jdk +8 more +10 moreVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition...CVE-2024-21011Fix available3.7 Low
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreMemory safety bug present in Firefox 124, Firefox ESR 115.9, and Thunderbird 115.9. This bug...CVE-2024-3864Fix available8.1 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreIf an AlignedBuffer were assigned to itself, the subsequent self-move could result in an...CVE-2024-3861Fix available4.0 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreOn 32-bit versions there were integer-overflows that led to an out-of-bounds-read that...CVE-2024-3859Fix available5.9 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreThe JIT created incorrect code for arguments in certain cases. This led to potential use-after...CVE-2024-3857Fix available7.8 High
- debian linux, linux kernel +1 moreamdkfd: use calloc instead of kzalloc to avoid integer overflowCVE-2024-26817Public exploitFix available5.5 Medium
- greenwoodsoftware less, debian linux, netapp bootstrap os +2 more +4 moreless through 653 allows OS command execution via a newline character in the name of a file,...CVE-2024-32487Fix available8.6 High
- php, debian linux +1 morePHP function password_verify can erroneously return true when argument contains NULCVE-2024-3096Fix available6.5 Medium
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morex86, relocs: Ignore relocations in .notes sectionCVE-2024-26816Fix available5.5 Medium
- apache traffic server, debian linux, fedoraproject fedora +2 moreApache Traffic Server: HTTP/2 CONTINUATION frames can be utilized for DoS attackCVE-2024-31309Fix availableEPSS 92.5%7.5 High
- openssl, debian linux, netapp 500f firmware +79 more +81 moreUnbounded memory growth with session handling in TLSv1.3CVE-2024-2511Fix availableEPSS 59.3%5.9 Medium
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morevfio/pci: Disable auto-enable of exclusive INTx IRQCVE-2024-27437Fix available5.5 Medium
- debian linux, linux kernel +1 morevfio/fsl-mc: Block calling interrupt handler without triggerCVE-2024-26814Fix available5.5 Medium
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morevfio/pci: Create persistent INTx handlerCVE-2024-26812Fix available7.8 High
- apache http server, apple macos, broadcom fabric operating system +4 more +6 moreApache HTTP Server: HTTP Response Splitting in multiple modulesCVE-2024-24795Fix available6.3 Medium
- apache http server, apple macos, broadcom fabric operating system +4 more +6 moreApache HTTP Server: HTTP response splittingCVE-2023-38709Public exploitFix available7.3 High
- debian linux, linux kernel +1 morenetfilter: nft_set_pipapo: release elements in clone only from destroy pathCVE-2024-26809Fix available7.8 High
- debian linux, linux kernel +1 morenetfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechainCVE-2024-26808Fix available7.8 High
- debian linux, linux kernel, siemens ruggedcom rst2428p +5 more +7 morenetlink: Fix kernel-infoleak-after-free in __skb_datagram_iterCVE-2024-26805Fix available5.5 Medium
- debian linux, linux kernel +1 morenet: ip_tunnel: prevent perpetual headroom growthCVE-2024-26804Fix available7.8 High
- debian linux, linux kernel +1 moreriscv: Sparse-Memory/vmemmap out-of-bounds fixCVE-2024-26795Fix available7.8 High
- debian linux, linux kernel +1 moredmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned readCVE-2024-26790Fix available5.5 Medium
- debian linux, linux kernel +1 moredmaengine: fsl-qdma: init irq after reg initializationCVE-2024-26788Fix available5.5 Medium
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moremmc: mmci: stm32: fix DMA API overlapping mappings warningCVE-2024-26787Fix available5.5 Medium
- Show moreLoading…