Schwachstellen, die jetzt zählen.

Linux Kernel: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff

kernel: kernel: Denial of Service via uninitialized clock rate in Tegra PMC driver

Linux Kernel: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff

kernel: kernel: hyperv: Memory corruption via unallocated hypercall output page

Linux Kernel: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff

kernel: kernel: Denial of Service via null pointer dereference in shared GPIO lookup

Linux Kernel: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff

kernel: kernel: Denial of Service via improper lock ownership handling in dm-cache

Linux Kernel: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff

kernel: kernel: Denial of Service via race condition in io_uring task cancellation

Linux Kernel: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff

kernel: kernel: Denial of Service via task_work flood during cancellation in io_uring

Linux Kernel: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff

kernel: kernel: Denial of Service via race condition in io_uring cancellation

Linux Kernel: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff

kernel: kernel: Arbitrary code execution via use-after-free in TIPC subsystem

Linux Kernel: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff

kernel: kernel: Keyring restriction bypass via race condition in key_reject_and_link()

Linux Kernel: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff

kernel: kernel: Denial of Service via busy-wait loop during PID namespace cleanup

org.apache.jclouds/jclouds-core: Apache jclouds: Denial of Service via XML entity expansion

perl-catalyst-plugin-authentication: Catalyst::Plugin::Authentication: Information disclosure via timing attack in password verification

qt: qt: Denial of Service via malformed CoAP message

DSA-6606-1 squid - security update

DSA-6606-1 squid - security update

org.jboss.resteasy/resteasy-core: RESTEasy: Information disclosure through default exception mapper responses

DSA-6606-1 squid - security update

PyMuPDF: PyMuPDF: Arbitrary code execution via stack-based buffer overflow in JM_set_annot_callout_line

go.temporal.io/server: Temporal Server: Arbitrary command execution via untrusted Kubernetes client configuration

An unprivileged application can exploit a lack of package/signature validation in SystemUI's `RemoteQCController` when resolving a hardcoded `content://` URI.

An unprivileged application can exploit a lack of package/signature validation in SystemUI's `RemoteQCController` when resolving a hardcoded `content://` URI. This allows the attacker to squat on a specific authority if the legitimate package is absent, inject spoofed UI elements into the trusted SystemUI Quick Controls panel, and gain a Background Activity Launch (BAL) grant from SystemUI when the user interacts with the spoofed element.

The report details a heap Use-After-Free (UAF) vulnerability within the `android.hardware.automotive.evs-default` HAL service, stemming from unsynchronized…

The report details a heap Use-After-Free (UAF) vulnerability within the `android.hardware.automotive.evs-default` HAL service, stemming from unsynchronized access to an `std::unordered_map`. An unprivileged application with access to the EVS manager can trigger this UAF by making concurrent calls to `setExtendedInfo` and `getExtendedInfo`, potentially enabling code execution within the privileged HAL process.

The vulnerability is a heap out-of-bounds read in the EVS HAL's `getStreamList()` method.

The vulnerability is a heap out-of-bounds read in the EVS HAL's `getStreamList()` method. An attacker can craft a `CameraDesc.metadata` byte array, which is parsed without validation, leading to an out-of-bounds read at an attacker-controlled offset within the HAL process's heap. The read data is then exfiltrated back to the attacker, potentially leaking sensitive information like pointers and buffer handles.

ReadyMedia (formerly MiniDLNA) versions 1.3.0 through 1.3.3 contain a stack-based buffer overflow vulnerability that allows remote attackers to corrupt stack…

ReadyMedia (formerly MiniDLNA) versions 1.3.0 through 1.3.3 contain a stack-based buffer overflow vulnerability that allows remote attackers to corrupt stack memory by crafting a malicious DFF audio file with an oversized PROP chunk size value that is used unvalidated to allocate a variable-length stack array and read file data into it. Attackers can place a crafted DFF file in a directory monitored by ReadyMedia to trigger automatic parsing via inotify, achieving remote…

In multiple functions of base.c, there is a possible use-after-free due to a race condition.

In multiple functions of base.c, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

In multiple functions of dma-buf.c, there is a possible use after free due to a race condition.

In multiple functions of dma-buf.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

hdf5: hdf5: Denial of Service via uncontrolled recursion in B-tree processing

postgresql-odbc: postgresql-odbc: Denial of Service via stack-based buffer overflow in updatable cursors

postgresql-odbc: postgresql-odbc: Information disclosure via insecure temporary log file creation

postgresql-odbc: postgresql-odbc: SQL injection via unescaped column names in updatable cursors

psqlodbc: psqlodbc: Arbitrary code execution via unvalidated column and row indexes