Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
core.c:3491 uart_handle_cts_change+0xa6/0xb0 ... Workqueue: max3100-0 max3100_work [max3100] RIP: 0010:uart_handle_cts_change+0xa6/0xb0 ... max3100_handlerx+0xc5/0x110 [max3100] max3100_work+0x12a/0x340 [max3100] Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/44b38924135d2093e2ec1812969464845dd66dc9 - https://git.kernel.org/stable/c/ea9b35372b58ac2931bfc1d5bc25e839d1221e30 - https://git.kernel.org/stable/c/cc121e3722a0a2c8f716ef991e5425b180a5fb94 - https://git.kernel.org/stable/c/78dbda51bb4241b88a52d71620f06231a341f9ba - https://git.kernel.org/stable/c/8296bb9e5925b6634259c5d4daee88f0cc0884ec - https://git.kernel.org
d71620f06231a341f9ba - https://git.kernel.org/stable/c/8296bb9e5925b6634259c5d4daee88f0cc0884ec - https://git.kernel.org/stable/c/93df2fba6c7dfa9a2f08546ea9a5ca4728758458 - https://git.kernel.org/stable/c/865b30c8661924ee9145f442bf32cea549faa869 - https://git.kernel.org/stable/c/77ab53371a2066fdf9b895246505f5ef5a4b5d47
CVE ID: CVE-2024-38635 State: PUBLISHED Published: 2024-06-21T10:18:24.244Z Last Updated: 2025-05-04T09:15:52.845Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: soundwire: cadence: fix invalid PDI offset For some reason, we add an offset to the PDI, presumably to skip the PDI0 and PDI1 which are reserved for BPT. This code is however completely wrong and leads to an out-of-bounds access. We were just lucky so far since we used only a couple of PDIs and remained within the PDI array bounds. A Fixes: tag is not provided since there are no known platforms where the out-of-bounds would be accessed, and the initial code had problem
provided since there are no known platforms where the out-of-bounds would be accessed, and the initial code had problems as well. A follow-up patch completely removes this useless offset. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/002364b2d594a9afc0385c09e00994c510b1d089 - https://git.kernel.org/stable/c/fd4bcb991ebaf0d1813d81d9983cfa99f9ef5328 - https://git.kernel.org/stable/c/902f6d656441a511ac25c6cffce74496db10a078 - https://git.kernel.org/stable/c/2ebcaa0e5db9b6044bb487ae1cf41bc601761567 - https://git.kernel.org/stable/c/7eeef1e935d23db5265233d92395bd5c648a4021 - https://git.kernel.org/stable/c/4e99103f757cdf
ttps://git.kernel.org/stable/c/7eeef1e935d23db5265233d92395bd5c648a4021 - https://git.kernel.org/stable/c/4e99103f757cdf636c6ee860994a19a346a11785 - https://git.kernel.org/stable/c/8ee1b439b1540ae543149b15a2a61b9dff937d91
CVE ID: CVE-2024-38636 State: PUBLISHED Published: 2024-06-21T10:18:24.900Z Last Updated: 2025-05-04T09:15:54.415Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: f2fs: multidev: fix to recognize valid zero block address As reported by Yi Zhang in mailing list [1], kernel warning was catched during zbd/010 test as below: ./check zbd/010 zbd/010 (test gap zone support with F2FS) [failed] runtime ... 3.752s something found in dmesg: [ 4378.146781] run blktests zbd/010 at 2024-02-18 11:31:13 [ 4378.192349] null_blk: module loaded [ 4378.209860] null_blk: disk nullb0 created [ 4378.413285] scsi_debug:sdebug_driver_probe: scsi_debug:
k: module loaded [ 4378.209860] null_blk: disk nullb0 created [ 4378.413285] scsi_debug:sdebug_driver_probe: scsi_debug: trim poll_queues to 0. poll_q/nr_hw = (0/1) [ 4378.422334] scsi host15: scsi_debug: version 0191 [20210520] dev_size_mb=1024, opts=0x0, submit_queues=1, statistics=0 [ 4378.434922] scsi 15:0:0:0: Direct-Access-ZBC Linux scsi_debug 0191 PQ: 0 ANSI: 7 [ 4378.443343] scsi 15:0:0:0: Power-on or device reset occurred [ 4378.449371] sd 15:0:0:0: Attached scsi generic sg5 type 20 [ 4378.449418] sd 15:0:0:0: [sdf] Host-managed zoned block device ... (See '/mnt/tests/gitlab.com/api/v4/projects/19168116/repository/archive.zip/storage/blktests/blk/blktests/results/nodev/zbd/010.dmesg
sts/gitlab.com/api/v4/projects/19168116/repository/archive.zip/storage/blktests/blk/blktests/results/nodev/zbd/010.dmesg' WARNING: CPU: 22 PID: 44011 at fs/iomap/iter.c:51 CPU: 22 PID: 44011 Comm: fio Not tainted 6.8.0-rc3+ #1 RIP: 0010:iomap_iter+0x32b/0x350 Call Trace: <TASK> __iomap_dio_rw+0x1df/0x830 f2fs_file_read_iter+0x156/0x3d0 [f2fs] aio_read+0x138/0x210 io_submit_one+0x188/0x8c0 __x64_sys_io_submit+0x8c/0x1a0 do_syscall_64+0x86/0x170 entry_SYSCALL_64_after_hwframe+0x6e/0x76 Shinichiro Kawasaki helps to analyse this issue and proposes a potential fixing patch in [2]. Quoted from reply of Shinichiro Kawasaki: "I confirmed that the trigger commit is dbf8e63f48af as Yi reported. I took
]. Quoted from reply of Shinichiro Kawasaki: "I confirmed that the trigger commit is dbf8e63f48af as Yi reported. I took a look in the commit, but it looks fine to me. So I thought the cause is not in the commit diff. I found the WARN is printed when the f2fs is set up with multiple devices, and read requests are mapped to the very first block of the second device in the direct read path. In this case, f2fs_map_blocks() and f2fs_map_blocks_cached() modify map->m_pblk as the physical block address from each block device. It becomes zero when it is mapped to the first block of the device. However, f2fs_iomap_begin() assumes that map->m_pblk is the physical block address of the whole f2fs, acro
f the device. However, f2fs_iomap_begin() assumes that map->m_pblk is the physical block address of the whole f2fs, across the all block devices. It compares map->m_pblk against NULL_ADDR == 0, then go into the unexpected branch and sets the invalid iomap->length. The WARN catches the invalid iomap->length. This WARN is printed even for non-zoned block devices, by following steps. - Create two (non-zoned) null_blk devices memory backed with 128MB size each: nullb0 and nullb1. # mkfs.f2fs /dev/nullb0 -c /dev/nullb1 # mount -t f2fs /dev/nullb0 "${mount_dir}" # dd if=/dev/zero of="${mount_dir}/test.dat" bs=1M count=192 # dd if="${mount_dir}/test.dat" of=/dev/null bs=1M count=192 iflag=direct ..
of="${mount_dir}/test.dat" bs=1M count=192 # dd if="${mount_dir}/test.dat" of=/dev/null bs=1M count=192 iflag=direct ..." So, the root cause of this issue is: when multi-devices feature is on, f2fs_map_blocks() may return zero blkaddr in non-primary device, which is a verified valid block address, however, f2fs_iomap_begin() treats it as an invalid block address, and then it triggers the warning in iomap framework code. Finally, as discussed, we decide to use a more simple and direct way that checking (map.m_flags & F2FS_MAP_MAPPED) condition instead of (map.m_pblk != NULL_ADDR) to fix this issue. Thanks a lot for the effort of Yi Zhang and Shinichiro Kawasaki on this issue. [1] https://lor
_ADDR) to fix this issue. Thanks a lot for the effort of Yi Zhang and Shinichiro Kawasaki on this issue. [1] https://lore.kernel.org/linux-f2fs-devel/CAHj4cs-kfojYC9i0G73PRkYzcxCTex=-vugRFeP40g_URGvnfQ@mail.gmail.com/ [2] https://lore.kernel.org/linux-f2fs-devel/gngdj77k4picagsfdtiaa7gpgnup6fsgwzsltx6milmhegmjff@iax2n4wvrqye/ Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/1a9225fdd0ec95fcf32936bcea9ceef0cf1512dc - https://git.kernel.org/stable/c/2b2611a42462c6c685d40b5f3aedcd8d21c27065 - https://git.kernel.org/stable/c/e8b485e39b4d17afa9a2821fc778d5a67abfc03a - https://git.kernel.org/stable/c/33e62cd7b4c281cd737c62e5d
kernel.org/stable/c/e8b485e39b4d17afa9a2821fc778d5a67abfc03a - https://git.kernel.org/stable/c/33e62cd7b4c281cd737c62e5d8c4f0e602a8c5c5
CVE ID: CVE-2024-38637 State: PUBLISHED Published: 2024-06-21T10:18:25.560Z Last Updated: 2025-11-04T17:21:54.586Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: greybus: lights: check return of get_channel_from_mode If channel for the given node is not found we return null from get_channel_from_mode. Make sure we validate the return pointer before using it in two of the missing places. This was originally reported in [0]: Found by Linux Verification Center (linuxtesting.org) with SVACE. [0] https://lore.kernel.org/all/20240301190425.120605-1-m.lobanov@rosalinux.ru Additional Analyst Notes: - CVE Program Container: - CISA ADP V
l.org/all/20240301190425.120605-1-m.lobanov@rosalinux.ru Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/8f4a76d477f0cc3c54d512f07f6f88c8e1c1e07b - https://git.kernel.org/stable/c/e2c64246e5dc8c0d35ec41770b85e2b4cafdff21 - https://git.kernel.org/stable/c/eac10cf3a97ffd4b4deb0a29f57c118225a42850 - https://git.kernel.org/stable/c/330f6bcdcef03f70f81db5f2ed6747af656a09f2 - https://git.kernel.org/stable/c/9b41a9b9c8be8c552f10633453fdb509e83b66f8 - https://git.kernel.org/stable/c/518e2c46b5dbce40b1aa0100001d03c3ceaa7d38 - https://git.kernel.org/stable/c/895cdd9aa9546523df839f9cc1488a0ecc1e0731 - https://git.kernel.org/stabl
1d03c3ceaa7d38 - https://git.kernel.org/stable/c/895cdd9aa9546523df839f9cc1488a0ecc1e0731 - https://git.kernel.org/stable/c/a1ba19a1ae7cd1e324685ded4ab563e78fe68648
CVE ID: CVE-2024-38638 State: PUBLISHED Published: 2025-03-07T16:12:47.551Z Last Updated: 2025-03-07T17:58:55.587Z Vendors: QNAP Systems Inc. Products: QTS, QuTS hero Problem Types: CWE-787 Description: An out-of-bounds write vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to modify or corrupt memory. QTS 5.2.x/QuTS hero h5.2.x are not affected. We have already fixed the vulnerability in the following versions: QTS 5.1.9.2954 build 20241120 and later QuTS hero h5.1.9.2954 build 20241120 and later Additional Analyst Notes: - CISA ADP Vulnrichment: References: - h
later QuTS hero h5.1.9.2954 build 20241120 and later Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.qnap.com/en/security-advisory/qsa-24-52
CVE ID: CVE-2024-38640 State: PUBLISHED Published: 2024-09-06T16:29:50.479Z Last Updated: 2024-09-06T16:57:49.449Z Vendors: QNAP Systems Inc. Products: Download Station Problem Types: CWE-79 Description: A cross-site scripting (XSS) vulnerability has been reported to affect Download Station. If exploited, the vulnerability could allow authenticated users to inject malicious code via a network. We have already fixed the vulnerability in the following version: Download Station 5.8.6.283 ( 2024/06/21 ) and later Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.qnap.com/en/security-advisory/qsa-24-35
CVE ID: CVE-2024-38641 State: PUBLISHED Published: 2024-09-06T16:27:46.814Z Last Updated: 2024-09-06T17:04:38.717Z Vendors: QNAP Systems Inc. Products: QTS, QuTS hero Problem Types: CWE-77, CWE-78 Description: An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow local network users to execute commands via unspecified vectors. We have already fixed the vulnerability in the following versions: QTS 5.1.8.2823 build 20240712 and later QuTS hero h5.1.8.2823 build 20240712 and later Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.qnap.com/en/security-advisory/qsa-24-33
CVE ID: CVE-2024-38642 State: PUBLISHED Published: 2024-09-06T16:29:44.378Z Last Updated: 2024-09-06T16:58:21.953Z Vendors: QNAP Systems Inc. Products: QuMagie Problem Types: CWE-295 Description: An improper certificate validation vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow local network users to compromise the security of the system via unspecified vectors. We have already fixed the vulnerability in the following version: QuMagie 2.3.1 and later Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.qnap.com/en/security-advisory/qsa-24-34
CVE ID: CVE-2024-38643 State: PUBLISHED Published: 2024-11-22T15:32:38.356Z Last Updated: 2024-11-22T16:51:35.154Z Vendors: QNAP Systems Inc. Products: Notes Station 3 Problem Types: CWE-306 Description: A missing authentication for critical function vulnerability has been reported to affect Notes Station 3. If exploited, the vulnerability could allow remote attackers to gain access to and execute certain functions. We have already fixed the vulnerability in the following version: Notes Station 3 3.9.7 and later Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.qnap.com/en/security-advisory/qsa-24-36
CVE ID: CVE-2024-38644 State: PUBLISHED Published: 2024-11-22T15:32:31.923Z Last Updated: 2024-11-22T16:50:56.156Z Vendors: QNAP Systems Inc. Products: Notes Station 3 Problem Types: CWE-77, CWE-78 Description: An OS command injection vulnerability has been reported to affect Notes Station 3. If exploited, the vulnerability could allow remote authenticated attackers to execute commands. We have already fixed the vulnerability in the following version: Notes Station 3 3.9.7 and later Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.qnap.com/en/security-advisory/qsa-24-36
CVE ID: CVE-2024-38645 State: PUBLISHED Published: 2024-11-22T15:32:26.439Z Last Updated: 2024-11-22T16:52:01.922Z Vendors: QNAP Systems Inc. Products: Notes Station 3 Problem Types: CWE-918 Description: A server-side request forgery (SSRF) vulnerability has been reported to affect Notes Station 3. If exploited, the vulnerability could allow remote authenticated attackers to read application data. We have already fixed the vulnerability in the following version: Notes Station 3 3.9.7 and later Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.qnap.com/en/security-advisory/qsa-24-36
CVE ID: CVE-2024-38646 State: PUBLISHED Published: 2024-11-22T15:32:20.386Z Last Updated: 2024-11-22T16:49:50.421Z Vendors: QNAP Systems Inc. Products: Notes Station 3 Problem Types: CWE-732 Description: An incorrect permission assignment for critical resource vulnerability has been reported to affect Notes Station 3. If exploited, the vulnerability could allow local authenticated attackers who have gained administrator access to read or modify the resource. We have already fixed the vulnerability in the following version: Notes Station 3 3.9.7 and later Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.qnap.com/en/security-advisory/qsa-24-36
CVE ID: CVE-2024-38647 State: PUBLISHED Published: 2024-11-22T15:32:14.440Z Last Updated: 2024-11-22T16:53:39.495Z Vendors: QNAP Systems Inc. Products: QNAP AI Core Problem Types: CWE-540, CWE-200 Description: An exposure of sensitive information vulnerability has been reported to affect QNAP AI Core. If exploited, the vulnerability could allow remote attackers to compromise the security of the system. We have already fixed the vulnerability in the following version: QNAP AI Core 3.4.1 and later Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.qnap.com/en/security-advisory/qsa-24-40
CVE ID: CVE-2024-38648 State: PUBLISHED Published: 2025-07-12T03:30:40.276Z Last Updated: 2025-07-14T16:12:29.434Z Severity: CRITICAL (CVSS 9 CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Ivanti Products: DSM Description: A hardcoded secret in Ivanti DSM before 2024.2 allows an authenticated attacker on an adjacent network to decrypt sensitive data including user credentials. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://forums.ivanti.com/s/article/SA-2024-07-12-CVE-2024-38648
CVE ID: CVE-2024-38649 State: PUBLISHED Published: 2024-11-13T01:54:45.457Z Last Updated: 2024-11-23T21:06:04.739Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Ivanti Products: Connect Secure Description: An out-of-bounds write in IPsec of Ivanti Connect Secure before version 22.7R2.1(Not Applicable to 9.1Rx) allows a remote unauthenticated attacker to cause a denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Connect-Secure-ICS-Ivanti-Policy-Secure-IPS-Ivanti-Secure-Access-Client-ISAC-Multiple-CVEs
CVE ID: CVE-2024-38650 State: PUBLISHED Published: 2024-09-07T16:11:22.353Z Last Updated: 2024-09-09T13:29:12.838Z Severity: CRITICAL (CVSS 9.9 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Veeam Products: Veeam Service Provider Console Description: An authentication bypass vulnerability can allow a low privileged attacker to access the NTLM hash of service account on the VSPC server. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.veeam.com/kb4649
CVE ID: CVE-2024-38651 State: PUBLISHED Published: 2024-09-07T16:11:22.198Z Last Updated: 2024-09-09T16:20:59.132Z Severity: HIGH (CVSS 8.5 CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Veeam Products: Veeam Service Provider Console Description: A code injection vulnerability can allow a low-privileged user to overwrite files on that VSPC server, which can lead to remote code execution on VSPC server. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.veeam.com/kb4649
CVE ID: CVE-2024-38652 State: PUBLISHED Published: 2024-08-14T02:38:00.686Z Last Updated: 2024-08-14T13:28:51.173Z Severity: HIGH (CVSS 8.2 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H) Vendors: Ivanti Products: Avalanche Description: Path traversal in the skin management component of Ivanti Avalanche 6.3.1 allows a remote unauthenticated attacker to achieve denial of service via arbitrary file deletion. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Avalanche-6-4-4-CVE-2024-38652-CVE-2024-38653-CVE-2024-36136-CVE-2024-37399-CVE-2024-37373
CVE ID: CVE-2024-38653 State: PUBLISHED Published: 2024-08-14T02:38:00.149Z Last Updated: 2024-08-14T13:47:52.793Z Severity: HIGH (CVSS 8.2 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L) Vendors: Ivanti Products: Avalanche Description: XXE in SmartDeviceServer in Ivanti Avalanche 6.3.1 allows a remote unauthenticated attacker to read arbitrary files on the server. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Avalanche-6-4-4-CVE-2024-38652-CVE-2024-38653-CVE-2024-36136-CVE-2024-37399-CVE-2024-37373
CVE ID: CVE-2024-38654 State: PUBLISHED Published: 2024-11-13T01:54:45.470Z Last Updated: 2024-11-13T17:01:06.962Z Severity: MEDIUM (CVSS 4.4 CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H) Vendors: Ivanti Products: Secure Access Client Description: Improper bounds checking in Ivanti Secure Access Client before version 22.7R3 allows a local authenticated attacker with admin privileges to cause a denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Connect-Secure-ICS-Ivanti-Policy-Secure-IPS-Ivanti-Secure-Access-Client-ISAC-Multiple-CVEs
CVE ID: CVE-2024-38655 State: PUBLISHED Published: 2024-11-13T01:54:45.595Z Last Updated: 2024-11-23T21:06:07.435Z Severity: CRITICAL (CVSS 9.1 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Ivanti Products: Connect Secure, Policy Secure Description: Argument injection in Ivanti Connect Secure before version 22.7R2.1 and 9.1R18.9 and Ivanti Policy Secure before version 22.7R1.1 and 9.1R18.9 allows a remote authenticated attacker with admin privileges to achieve remote code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Connect-Secure-ICS-Ivanti-Policy-Secure-IPS-Ivanti-Secure-Access-Client-ISAC-
nti.com/s/article/Security-Advisory-Ivanti-Connect-Secure-ICS-Ivanti-Policy-Secure-IPS-Ivanti-Secure-Access-Client-ISAC-Multiple-CVEs
CVE ID: CVE-2024-38656 State: PUBLISHED Published: 2024-11-13T01:54:45.445Z Last Updated: 2024-12-01T18:25:55.799Z Severity: CRITICAL (CVSS 9.1 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Ivanti Products: Connect Secure, Policy Secure Description: Argument injection in Ivanti Connect Secure before version 22.7R2.2 and 9.1R18.9 and Ivanti Policy Secure before version 22.7R1.2 allows a remote authenticated attacker with admin privileges to achieve remote code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Connect-Secure-ICS-Ivanti-Policy-Secure-IPS-Ivanti-Secure-Access-Client-ISAC-Multiple-CVEs
CVE ID: CVE-2024-38657 State: PUBLISHED Published: 2025-02-21T01:25:43.552Z Last Updated: 2025-02-21T15:51:34.076Z Severity: CRITICAL (CVSS 9.1 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Ivanti Products: Connect Secure, Policy Secure Description: External control of a file name in Ivanti Connect Secure before version 22.7R2.4 and Ivanti Policy Secure before version 22.7R1.3 allows a remote authenticated attacker with admin privileges to write arbitrary files. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://forums.ivanti.com/s/article/February-Security-Advisory-Ivanti-Connect-Secure-ICS-Ivanti-Policy-Secure-IPS-and-Ivanti-Secure-Access-Client-ISAC-Multiple
CVE ID: CVE-2024-38658 State: PUBLISHED Published: 2024-11-28T02:11:21.840Z Last Updated: 2024-11-29T20:46:17.613Z Vendors: FUJI ELECTRIC CO., LTD. and Hakko Electronics Co., Ltd. Products: V-Server, V-Server Lite Problem Types: CWE-125 Description: There is an Out-of-bounds read vulnerability in V-Server (v4.0.19.0 and earlier) and V-Server Lite (v4.0.19.0 and earlier). If a user opens a specially crafted file, information may be disclosed and/or arbitrary code may be executed. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://monitouch.fujielectric.com/site/download-e/03tellus_inf/index.php - https://jvn.jp/en/vu/JVNVU97531313/
CVE ID: CVE-2024-38659 State: PUBLISHED Published: 2024-06-21T10:28:15.337Z Last Updated: 2025-11-04T17:21:55.964Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: enic: Validate length of nl attributes in enic_set_vf_port enic_set_vf_port assumes that the nl attribute IFLA_PORT_PROFILE is of length PORT_PROFILE_MAX and that the nl attributes IFLA_PORT_INSTANCE_UUID, IFLA_PORT_HOST_UUID are of length PORT_UUID_MAX. These attributes are validated (in the function do_setlink in rtnetlink.c) using the nla_policy ifla_port_policy. The policy defines IFLA_PORT_PROFILE as NLA_STRING, IFLA_PORT_INSTANCE_UUID as NLA_BINARY and IFLA_PORT_
la_port_policy. The policy defines IFLA_PORT_PROFILE as NLA_STRING, IFLA_PORT_INSTANCE_UUID as NLA_BINARY and IFLA_PORT_HOST_UUID as NLA_STRING. That means that the length validation using the policy is for the max size of the attributes and not on exact size so the length of these attributes might be less than the sizes that enic_set_vf_port expects. This might cause an out of bands read access in the memcpys of the data of these attributes in enic_set_vf_port. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/2b649d7e0cb42a660f0260ef25fd55fdc9c6c600 - https://git.kernel.org/stable/c/ca63fb7af9d3e531aa25f7ae187bfc6c7166
stable/c/2b649d7e0cb42a660f0260ef25fd55fdc9c6c600 - https://git.kernel.org/stable/c/ca63fb7af9d3e531aa25f7ae187bfc6c7166ec2d - https://git.kernel.org/stable/c/3c0d36972edbe56fcf98899622d9b90ac9965227 - https://git.kernel.org/stable/c/25571a12fbc8a1283bd8380d461267956fd426f7 - https://git.kernel.org/stable/c/7077c22f84f41974a711604a42fd0e0684232ee5 - https://git.kernel.org/stable/c/f6638e955ca00c489894789492776842e102af9c - https://git.kernel.org/stable/c/aee1955a1509a921c05c70dad5d6fc8563dfcb31 - https://git.kernel.org/stable/c/e8021b94b0412c37bcc79027c2e382086b6ce449