Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
is not yet in conntrack table. 1. skb passes through bridge and fake-ip (br_netfilter)Prerouting. -> skb->_nfct now references a unconfirmed entry 2. skb is broad/mcast packet. bridge now passes clones out on each bridge interface. 3. skb gets passed up the stack. 4. In macvlan case, macvlan driver retains clone(s) of the mcast skb and schedules a work queue to send them out on the lower devices. The clone skb->_nfct is not a copy, it is the same entry as the original skb. The macvlan rx handler then returns RX_HANDLER_PASS. 5. Normal conntrack hooks (in NF_INET_LOCAL_IN) confirm the orig skb. The Macvlan broadcast worker and normal confirm path will race. This race will not happen if step
confirm the orig skb. The Macvlan broadcast worker and normal confirm path will race. This race will not happen if step 2 already confirmed a clone. In that case later steps perform skb_clone() with skb->_nfct already confirmed (in hash table). This works fine. But such confirmation won't happen when eb/ip/nftables rules dropped the packets before they reached the nf_confirm step in postrouting. Pablo points out that nf_conntrack_bridge doesn't allow use of stateful nat, so we can safely discard the nf_conn entry and let inet call conntrack again. This doesn't work for bridge netfilter: skb could have a nat transformation. Also bridge nf prevents re-invocation of inet prerouting via 'sabotag
ge netfilter: skb could have a nat transformation. Also bridge nf prevents re-invocation of inet prerouting via 'sabotage_in' hook. Work around this problem by explicit confirmation of the entry at LOCAL_IN time, before upper layer has a chance to clone the unconfirmed entry. The downside is that this disables NAT and conntrack helpers. Alternative fix would be to add locking to all code parts that deal with unconfirmed packets, but even if that could be done in a sane way this opens up other problems, for example: -m physdev --physdev-out eth0 -j SNAT --snat-to 1.2.3.4 -m physdev --physdev-out eth1 -j SNAT --snat-to 1.2.3.5 For multicast case, only one of such conflicting mappings will be c
physdev --physdev-out eth1 -j SNAT --snat-to 1.2.3.5 For multicast case, only one of such conflicting mappings will be created, conntrack only handles 1:1 NAT mappings. Users should set create a setup that explicitly marks such traffic NOTRACK (conntrack bypass) to avoid this, but we cannot auto-bypass them, ruleset might have accept rules for untracked traffic already, so user-visible behaviour would change. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/7c3f28599652acf431a2211168de4a583f30b6d5 - https://git.kernel.org/stable/c/2b1414d5e94e477edff1d2c79030f1d742625ea0 - https://git.kernel.org/stable/c/80cd0487f630b53
tps://git.kernel.org/stable/c/2b1414d5e94e477edff1d2c79030f1d742625ea0 - https://git.kernel.org/stable/c/80cd0487f630b5382734997c3e5e3003a77db315 - https://git.kernel.org/stable/c/cb734975b0ffa688ff6cc0eed463865bf07b6c01 - https://git.kernel.org/stable/c/62e7151ae3eb465e0ab52a20c941ff33bb6332e9
CVE ID: CVE-2024-27416 State: PUBLISHED Published: 2024-05-17T11:51:04.270Z Last Updated: 2025-05-04T12:55:43.652Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST If we received HCI_EV_IO_CAPA_REQUEST while HCI_OP_READ_REMOTE_EXT_FEATURES is yet to be responded assume the remote does support SSP since otherwise this event shouldn't be generated. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/afec8f772296dd8e5a2a6f83bbf99db1b9ca877f - https://git.kernel.org/stable/c/79820a7e1e057120c49be07cbe1064
l.org/stable/c/afec8f772296dd8e5a2a6f83bbf99db1b9ca877f - https://git.kernel.org/stable/c/79820a7e1e057120c49be07cbe10643d0706b259 - https://git.kernel.org/stable/c/df193568d61234c81de7ed4d540c01975de60277 - https://git.kernel.org/stable/c/c3df637266df29edee85e94cab5fd7041e5753ba - https://git.kernel.org/stable/c/30a5e812f78e3d1cced90e1ed750bf027599205f - https://git.kernel.org/stable/c/fba268ac36ab19f9763ff90d276cde0ce6cd5f31 - https://git.kernel.org/stable/c/8e2758cc25891d2b76717aaf89b40ed215de188c - https://git.kernel.org/stable/c/7e74aa53a68bf60f6019bd5d9a9a1406ec4d4865
CVE ID: CVE-2024-27417 State: PUBLISHED Published: 2024-05-17T11:51:07.803Z Last Updated: 2025-05-04T09:04:42.491Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: ipv6: fix potential "struct net" leak in inet6_rtm_getaddr() It seems that if userspace provides a correct IFA_TARGET_NETNSID value but no IFA_ADDRESS and IFA_LOCAL attributes, inet6_rtm_getaddr() returns -EINVAL with an elevated "struct net" refcount. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/9d4ffb5b9d879a75e4f7460e8b10e756b4dfb132 - https://git.kernel.org/stable/c/810fa7d5e5202fcfb227203
t.kernel.org/stable/c/9d4ffb5b9d879a75e4f7460e8b10e756b4dfb132 - https://git.kernel.org/stable/c/810fa7d5e5202fcfb22720304b755f1bdfd4c174 - https://git.kernel.org/stable/c/8a54834c03c30e549c33d5da0975f3e1454ec906 - https://git.kernel.org/stable/c/1b0998fdd85776775d975d0024bca227597e836a - https://git.kernel.org/stable/c/44112bc5c74e64f28f5a9127dc34066c7a09bd0f - https://git.kernel.org/stable/c/33a1b6bfef6def2068c8703403759024ce17053e - https://git.kernel.org/stable/c/10bfd453da64a057bcfd1a49fb6b271c48653cdb
CVE ID: CVE-2024-27418 State: PUBLISHED Published: 2024-05-17T11:51:11.270Z Last Updated: 2025-05-04T09:04:43.806Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: net: mctp: take ownership of skb in mctp_local_output Currently, mctp_local_output only takes ownership of skb on success, and we may leak an skb if mctp_local_output fails in specific states; the skb ownership isn't transferred until the actual output routing occurs. Instead, make mctp_local_output free the skb on all error paths up to the route action, so it always consumes the passed skb. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Re
on, so it always consumes the passed skb. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/a3c8fa54e904b0ddb52a08cc2d8ac239054f61fd - https://git.kernel.org/stable/c/cbebc55ceacef1fc0651e80e0103cc184552fc68 - https://git.kernel.org/stable/c/a639441c880ac479495e5ab37e3c29f21ae5771b - https://git.kernel.org/stable/c/3773d65ae5154ed7df404b050fd7387a36ab5ef3
CVE ID: CVE-2024-27419 State: PUBLISHED Published: 2024-05-17T12:01:27.871Z Last Updated: 2025-05-04T09:04:45.518Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: netrom: Fix data-races around sysctl_net_busy_read We need to protect the reader reading the sysctl value because the value can be changed concurrently. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/d623fd5298d95b65d27ef5a618ebf39541074856 - https://git.kernel.org/stable/c/f9055fa2b2931261d5f89948ee5bc315b6a22d4a - https://git.kernel.org/stable/c/bbf950a6e96a91cf8cf0c71117b94ed3fafc9dd3 - https
55fa2b2931261d5f89948ee5bc315b6a22d4a - https://git.kernel.org/stable/c/bbf950a6e96a91cf8cf0c71117b94ed3fafc9dd3 - https://git.kernel.org/stable/c/0866afaff19d8460308b022345ed116a12b1d0e1 - https://git.kernel.org/stable/c/43464808669ba9d23996f0b6d875450191687caf - https://git.kernel.org/stable/c/34cab94f7473e7b09f5205d4583fb5096cb63b5b - https://git.kernel.org/stable/c/16d71319e29d5825ab53f263b59fdd8dc2d60ad4 - https://git.kernel.org/stable/c/d380ce70058a4ccddc3e5f5c2063165dc07672c6
CVE ID: CVE-2024-27420 State: REJECTED Published: 2024-05-17T12:01:31.361Z Last Updated: 2024-05-25T13:24:14.034Z Description: No description available.
CVE ID: CVE-2024-27421 State: REJECTED Published: 2024-05-17T12:01:34.948Z Last Updated: 2024-05-25T13:24:44.612Z Description: No description available.
CVE ID: CVE-2024-27422 State: REJECTED Published: 2024-05-17T12:01:38.444Z Last Updated: 2024-05-25T13:25:06.710Z Description: No description available.
CVE ID: CVE-2024-27423 State: REJECTED Published: 2024-05-17T12:01:41.929Z Last Updated: 2024-05-25T13:25:28.926Z Description: No description available.
CVE ID: CVE-2024-27424 State: REJECTED Published: 2024-05-17T12:01:45.420Z Last Updated: 2024-05-25T13:25:52.121Z Description: No description available.
CVE ID: CVE-2024-27425 State: REJECTED Published: 2024-05-17T12:01:48.945Z Last Updated: 2024-05-25T13:26:15.134Z Description: No description available.
CVE ID: CVE-2024-27426 State: REJECTED Published: 2024-05-17T12:01:52.535Z Last Updated: 2024-05-25T13:26:34.082Z Description: No description available.
CVE ID: CVE-2024-27427 State: REJECTED Published: 2024-05-17T12:01:56.220Z Last Updated: 2024-05-25T13:26:54.774Z Description: No description available.
CVE ID: CVE-2024-27428 State: REJECTED Published: 2024-05-17T12:01:59.709Z Last Updated: 2024-05-25T13:27:17.346Z Description: No description available.
CVE ID: CVE-2024-27429 State: REJECTED Published: 2024-05-17T12:02:03.189Z Last Updated: 2024-05-21T14:40:53.598Z Description: No description available.
CVE ID: CVE-2024-27430 State: REJECTED Published: 2024-05-17T12:02:06.800Z Last Updated: 2024-05-25T13:27:52.744Z Description: No description available.
CVE ID: CVE-2024-27431 State: PUBLISHED Published: 2024-05-17T12:02:10.274Z Last Updated: 2025-05-04T09:04:51.900Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: cpumap: Zero-initialise xdp_rxq_info struct before running XDP program When running an XDP program that is attached to a cpumap entry, we don't initialise the xdp_rxq_info data structure being used in the xdp_buff that backs the XDP program invocation. Tobias noticed that this leads to random values being returned as the xdp_md->rx_queue_index value for XDP programs running in a cpumap. This means we're basically returning the contents of the uninitialised memory, whic
or XDP programs running in a cpumap. This means we're basically returning the contents of the uninitialised memory, which is bad. Fix this by zero-initialising the rxq data structure before running the XDP program. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/5f4e51abfbe6eb444fa91906a5cd083044278297 - https://git.kernel.org/stable/c/f0363af9619c77730764f10360e36c6445c12f7b - https://git.kernel.org/stable/c/3420b3ff1ff489c177ea1cb7bd9fbbc4e9a0be95 - https://git.kernel.org/stable/c/f562e4c4aab00986dde3093c4be919c3f2b85a4a - https://git.kernel.org/stable/c/eaa7cb836659ced2d9f814ac32aa3ec193803ed6 - https://git.kernel.o
e3093c4be919c3f2b85a4a - https://git.kernel.org/stable/c/eaa7cb836659ced2d9f814ac32aa3ec193803ed6 - https://git.kernel.org/stable/c/2487007aa3b9fafbd2cb14068f49791ce1d7ede5
CVE ID: CVE-2024-27432 State: PUBLISHED Published: 2024-05-17T12:08:43.564Z Last Updated: 2025-05-04T09:04:58.288Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mtk_eth_soc: fix PPE hanging issue A patch to resolve an issue was found in MediaTek's GPL-licensed SDK: In the mtk_ppe_stop() function, the PPE scan mode is not disabled before disabling the PPE. This can potentially lead to a hang during the process of disabling the PPE. Without this patch, the PPE may experience a hang during the reboot test. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.o
oot test. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/9fcadd125044007351905d40c405fadc2d3bb6d6 - https://git.kernel.org/stable/c/f78807362828ad01db2a9ed005bf79501b620f27 - https://git.kernel.org/stable/c/943c14ece95eb1cf98d477462aebcbfdfd714633 - https://git.kernel.org/stable/c/49202a8256fc50517ef06fd5e2084c4febde6369 - https://git.kernel.org/stable/c/09a1907433865b7c8ee6777e507f5126bdd38c0f - https://git.kernel.org/stable/c/ea80e3ed09ab2c2b75724faf5484721753e92c31
CVE ID: CVE-2024-27433 State: PUBLISHED Published: 2024-05-17T12:08:47.184Z Last Updated: 2025-05-04T09:04:59.622Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: clk: mediatek: mt7622-apmixedsys: Fix an error handling path in clk_mt8135_apmixed_probe() 'clk_data' is allocated with mtk_devm_alloc_clk_data(). So calling mtk_free_clk_data() explicitly in the remove function would lead to a double-free. Remove the redundant call. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/de3340533bd68a7b3d6be1841b8eb3fa6c762fe6 - https://git.kernel.org/stable/c/f3633fed
s: - https://git.kernel.org/stable/c/de3340533bd68a7b3d6be1841b8eb3fa6c762fe6 - https://git.kernel.org/stable/c/f3633fed984f1db106ff737a0bb52fadb2d89ac7 - https://git.kernel.org/stable/c/fa761ce7a1d15cca1a306b3635f81a22b15fee5b - https://git.kernel.org/stable/c/a32e88f2b20259f5fe4f8eed598bbc85dc4879ed
CVE ID: CVE-2024-27434 State: PUBLISHED Published: 2024-05-17T12:08:50.896Z Last Updated: 2025-05-04T09:05:01.411Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: don't set the MFP flag for the GTK The firmware doesn't need the MFP flag for the GTK, it can even make the firmware crash. in case the AP is configured with: group cipher TKIP and MFPC. We would send the GTK with cipher = TKIP and MFP which is of course not possible. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/b4f1b0b3b91762edd19bf9d3b2e4c3a0740501f8 - https://git.kernel.
Container: References: - https://git.kernel.org/stable/c/b4f1b0b3b91762edd19bf9d3b2e4c3a0740501f8 - https://git.kernel.org/stable/c/40405cbb20eb6541c603e7b3d54ade0a7be9d715 - https://git.kernel.org/stable/c/60f6d5fc84a9fd26528a24d8a267fc6a6698b628 - https://git.kernel.org/stable/c/e35f316bce9e5733c9826120c1838f4c447b2c4c
CVE ID: CVE-2024-27435 State: PUBLISHED Published: 2024-05-17T12:12:36.439Z Last Updated: 2025-05-04T09:05:03.088Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: nvme: fix reconnection fail due to reserved tag allocation We found a issue on production environment while using NVMe over RDMA, admin_q reconnect failed forever while remote target and network is ok. After dig into it, we found it may caused by a ABBA deadlock due to tag allocation. In my case, the tag was hold by a keep alive request waiting inside admin_q, as we quiesced admin_q while reset ctrl, so the request maked as idle and will not process before reset succes
admin_q, as we quiesced admin_q while reset ctrl, so the request maked as idle and will not process before reset success. As fabric_q shares tagset with admin_q, while reconnect remote target, we need a tag for connect command, but the only one reserved tag was held by keep alive command which waiting inside admin_q. As a result, we failed to reconnect admin_q forever. In order to fix this issue, I think we should keep two reserved tags for admin queue. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/149afee5c7418ec5db9d7387b9c9a5c1eb7ea2a8 - https://git.kernel.org/stable/c/ff2f90f88d78559802466ad1c84ac5bda4416b3a - h
/149afee5c7418ec5db9d7387b9c9a5c1eb7ea2a8 - https://git.kernel.org/stable/c/ff2f90f88d78559802466ad1c84ac5bda4416b3a - https://git.kernel.org/stable/c/6851778504cdb49431809b4ba061903d5f592c96 - https://git.kernel.org/stable/c/262da920896e2f2ab0e3947d9dbee0aa09045818 - https://git.kernel.org/stable/c/de105068fead55ed5c07ade75e9c8e7f86a00d1d
CVE ID: CVE-2024-27436 State: PUBLISHED Published: 2024-05-17T12:12:40.017Z Last Updated: 2025-05-04T09:05:04.457Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Stop parsing channels bits when all channels are found. If a usb audio device sets more bits than the amount of channels it could write outside of the map array. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/7e2c1b0f6dd9abde9e60f0f9730026714468770f - https://git.kernel.org/stable/c/6d5dc96b154be371df0d62ecb07efe400701ed8a - https://git.kernel.org/stable/c/5cd466673b34bac369334f
it.kernel.org/stable/c/6d5dc96b154be371df0d62ecb07efe400701ed8a - https://git.kernel.org/stable/c/5cd466673b34bac369334f66cbe14bb77b7d7827 - https://git.kernel.org/stable/c/9af1658ba293458ca6a13f70637b9654fa4be064 - https://git.kernel.org/stable/c/629af0d5fe94a35f498ba2c3f19bd78bfa591be6 - https://git.kernel.org/stable/c/22cad1b841a63635a38273b799b4791f202ade72 - https://git.kernel.org/stable/c/c8a24fd281dcdf3c926413dafbafcf35cde517a9 - https://git.kernel.org/stable/c/6d88b289fb0a8d055cb79d1c46a56aba7809d96d - https://git.kernel.org/stable/c/a39d51ff1f52cd0b6fe7d379ac93bd8b4237d1b7
CVE ID: CVE-2024-27437 State: PUBLISHED Published: 2024-04-05T08:24:44.561Z Last Updated: 2025-05-04T09:05:06.189Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Disable auto-enable of exclusive INTx IRQ Currently for devices requiring masking at the irqchip for INTx, ie. devices without DisINTx support, the IRQ is enabled in request_irq() and subsequently disabled as necessary to align with the masked status flag. This presents a window where the interrupt could fire between these events, resulting in the IRQ incrementing the disable depth twice. This would be unrecoverable for a user since the masked flag prevents n
in the IRQ incrementing the disable depth twice. This would be unrecoverable for a user since the masked flag prevents nested enables through vfio. Instead, invert the logic using IRQF_NO_AUTOEN such that exclusive INTx is never auto-enabled, then unmask as required. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/26389925d6c2126fb777821a0a983adca7ee6351 - https://git.kernel.org/stable/c/561d5e1998d58b54ce2bbbb3e843b669aa0b3db5 - https://git.kernel.org/stable/c/b7a2f0955ffceffadfe098b40b50307431f45438 - https://git.kernel.org/stable/c/139dfcc4d723ab13469881200c7d80f49d776060 - https://git.kernel.org/stable/c/2a4a666c45
- https://git.kernel.org/stable/c/139dfcc4d723ab13469881200c7d80f49d776060 - https://git.kernel.org/stable/c/2a4a666c45107206605b7b5bc20545f8aabc4fa2 - https://git.kernel.org/stable/c/3b3491ad0f80d913e7d255941d4470f4a4d9bfda - https://git.kernel.org/stable/c/bf0bc84a20e6109ab07d5dc072067bd01eb931ec - https://git.kernel.org/stable/c/fe9a7082684eb059b925c535682e68c34d487d43
CVE ID: CVE-2024-27438 State: PUBLISHED Published: 2024-03-21T09:39:21.894Z Last Updated: 2025-02-13T17:46:29.362Z Vendors: Apache Software Foundation Products: Apache Doris Problem Types: CWE-494 Description: Download of Code Without Integrity Check vulnerability in Apache Doris. The jdbc driver files used for JDBC catalog is not checked and may resulting in remote command execution. Once the attacker is authorized to create a JDBC catalog, he/she can use arbitrary driver jar file with unchecked code snippet. This code snippet will be run when catalog is initializing without any check. This issue affects Apache Doris: from 1.2.0 through 2.0.4. Users are recommended to upgrade to version 2.0
ut any check. This issue affects Apache Doris: from 1.2.0 through 2.0.4. Users are recommended to upgrade to version 2.0.5 or 2.1.x, which fixes the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://lists.apache.org/thread/h95h82b0svlnwcg6c2xq4b08j6gwgczh - http://www.openwall.com/lists/oss-security/2024/03/21/1
CVE ID: CVE-2024-27439 State: PUBLISHED Published: 2024-03-19T11:07:47.648Z Last Updated: 2025-02-13T17:46:30.000Z Vendors: Apache Software Foundation Products: Apache Wicket Problem Types: CWE-352, CWE-444 Description: An error in the evaluation of the fetch metadata headers could allow a bypass of the CSRF protection in Apache Wicket. This issue affects Apache Wicket: from 9.1.0 through 9.16.0, and the milestone releases for the 10.0 series. Apache Wicket 8.x does not support CSRF protection via the fetch metadata headers and as such is not affected. Users are recommended to upgrade to version 9.17.0 or 10.0.0, which fixes the issue. Additional Analyst Notes: - CVE Program Container: - CIS
to upgrade to version 9.17.0 or 10.0.0, which fixes the issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lists.apache.org/thread/o825rvjjtmz3qv21ps5k7m2w9193g1lo - http://www.openwall.com/lists/oss-security/2024/03/19/2
CVE ID: CVE-2024-27440 State: PUBLISHED Published: 2024-03-13T05:40:22.838Z Last Updated: 2024-08-05T13:41:39.271Z Vendors: Toyoko Inn IT Solution Co., Ltd. Products: Toyoko Inn official App for iOS, Toyoko Inn official App for Android Problem Types: Improper server certificate verification Description: The Toyoko Inn official App for iOS versions prior to 1.13.0 and Toyoko Inn official App for Android versions prior 1.3.14 don't properly verify server certificates, which allows a man-in-the-middle attacker to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://apps.apple.c
tificate. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://apps.apple.com/jp/app/%E3%83%9B%E3%83%86%E3%83%AB%E6%9D%B1%E6%A8%AAinn-%E6%9D%B1%E6%A8%AA%E3%82%A4%E3%83%B3-%E5%85%AC%E5%BC%8F%E3%82%A2%E3%83%97%E3%83%AA/id1439388270 - https://play.google.com/store/apps/details?id=com.toyoko_inn.toyokoandroid - https://jvn.jp/en/jp/JVN52919306/
CVE ID: CVE-2024-27441 State: REJECTED Published: N/A Last Updated: 2024-03-13T14:23:32.859180 Description: No description available.
CVE ID: CVE-2024-27442 State: PUBLISHED Published: 2024-08-12T00:00:00 Last Updated: 2024-08-13T14:44:13.521Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 10.0. The zmmailboxdmgr binary, a component of ZCS, is intended to be executed by the zimbra user with root privileges for specific mailbox operations. However, an attacker can escalate privileges from the zimbra user to root, because of improper handling of input arguments. An attacker can execute arbitrary commands with elevated privileges, leading to local privilege escalation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wiki.zimbra.
ing to local privilege escalation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wiki.zimbra.com/wiki/Zimbra_Releases/10.0.7#Security_Fixes - https://wiki.zimbra.com/wiki/Zimbra_Releases/9.0.0/P39#Security_Fixes
CVE ID: CVE-2024-27443 State: PUBLISHED Published: 2024-08-12T00:00:00.000Z Last Updated: 2025-10-21T22:55:48.688Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 10.0. A Cross-Site Scripting (XSS) vulnerability exists in the CalendarInvite feature of the Zimbra webmail classic user interface, because of improper input validation in the handling of the calendar header. An attacker can exploit this via an email message containing a crafted calendar header with an embedded XSS payload. When a victim views this message in the Zimbra webmail classic interface, the payload is executed in the context of the victim's session,