WebMay 3, 2024 · CVE-2024-1292. Public on 2024-05-03. Modified on 2024-01-18. Description. The c_rehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary … WebMar 16, 2024 · CVE-2024-28466. Public on 2024-03-16. Modified on 2024-03-21. Description. do_tls_getsockopt in net/tls/tls_main.c in the Linux kernel through 6.2.6 lacks a lock_sock call, leading to a race condition (with a resultant use-after-free or NULL pointer dereference). Severity. Important. See what this means.
NVD - CVE-2024-8912 - NIST
WebDec 26, 2024 · The patches are included in efs-utils version v1.34.4 and newer, and in aws-efs-csi-driver v1.4.8 and newer. Workarounds. There is no recommended work around. We recommend affected users update the installed version of efs-utils to v1.34.4+ or aws-efs-csi-driver to v1.4.8+ to address this issue. References. aws/efs-utils@f3a8f88 aws/efs … WebApr 12, 2024 · information. ( CVE-2024-4203) It was discovered that the file system quotas implementation in the Linux. kernel did not properly validate the quota block number. An attacker could. use this to construct a malicious file system image that, when mounted and. operated on, could cause a denial of service (system crash). current account with cash incentive
CVE-2024-38112: AWS WorkSpaces Remote Code Execution
WebThe CVE List is built by CVE Numbering Authorities (CNAs). Every CVE Record added to the list is assigned and published by a CNA. The CVE List feeds the U.S. National Vulnerability Database (NVD) — learn more. What would you like to do? Search By CVE ID or keyword. Downloads WebDec 7, 2024 · CVE-2024-3643. Public on 2024-12-07. Modified on 2024-02-09. Description. Guests can trigger NIC interface reset/abort/crash via netback It is possible for a guest to trigger a NIC interface reset/abort/crash in a Linux based network backend by sending certain kinds of packets. It appears to be an (unwritten?) assumption in the rest of the ... WebFeb 17, 2024 · CVE-2024-41723. Public on 2024-02-17. Modified on 2024-02-17. Description. http2/hpack: avoid quadratic complexity in hpack decoding. Severity. Important. See what this means. CVSS v3 Base Score. 7.5. See breakdown. Affected Packages. Platform Package Release Date Advisory; Amazon Linux 2024: golang: current account with overdraft for bad credit