Threat and Vulnerability Intelligence Database

Example Searches:

CVE-2024-9341	Podman: buildah: cri-o: fips crypto-policy directory mounting issue in containers/common go library Description: A flaw was found in Go. When FIPS mode is enabled on a system, container runtimes may incorrectly handle certain file paths due to improper validation in the containers/common Go library. This flaw allows an attacker to exploit symbolic links and trick the system into mounting sensitive host directories inside a container. This issue also allows attackers to access critical host files, bypassing the intended isolation between containers and the host system. EPSS Score: 0.13% Source: CVE November 27th, 2024 (5 months ago)
CVE-2024-8883	Keycloak: vulnerable redirect uri validation results in open redirec Description: A misconfiguration flaw was found in Keycloak. This issue can allow an attacker to redirect users to an arbitrary URL if a 'Valid Redirect URI' is set to http://localhost or http://127.0.0.1, enabling sensitive information such as authorization codes to be exposed to the attacker, potentially leading to session hijacking. EPSS Score: 0.24% Source: CVE November 27th, 2024 (5 months ago)
CVE-2024-8676	Cri-o: checkpoint restore can be triggered from different namespaces Description: A vulnerability was found in CRI-O, where it can be requested to take a checkpoint archive of a container and later be asked to restore it. When it does that restoration, it attempts to restore the mounts from the restore archive instead of the pod request. As a result, the validations run on the pod spec, verifying that the pod has access to the mounts it specifies are not applicable to a restored container. This flaw allows a malicious user to trick CRI-O into restoring a pod that doesn't have access to host mounts. The user needs access to the kubelet or cri-o socket to call the restore endpoint and trigger the restore. EPSS Score: 0.05% Source: CVE November 27th, 2024 (5 months ago)
CVE-2024-52337	Tuned: improper sanitization of `instance_name` parameter of the `instance_create()` method Description: A log spoofing flaw was found in the Tuned package due to improper sanitization of some API arguments. This flaw allows an attacker to pass a controlled sequence of characters; newlines can be inserted into the log. Instead of the 'evil' the attacker could mimic a valid TuneD log line and trick the administrator. The quotes '' are usually used in TuneD logs citing raw user input, so there will always be the ' character ending the spoofed input, and the administrator can easily overlook this. This logged string is later used in logging and in the output of utilities, for example, `tuned-adm get_instances` or other third-party programs that use Tuned's D-Bus interface for such operations. EPSS Score: 0.04% Source: CVE November 27th, 2024 (5 months ago)
CVE-2024-52336	Tuned: `script_pre` and `script_post` options allow to pass arbitrary scripts executed by root Description: A script injection vulnerability was identified in the Tuned package. The `instance_create()` D-Bus function can be called by locally logged-in users without authentication. This flaw allows a local non-privileged user to execute a D-Bus call with `script_pre` or `script_post` options that permit arbitrary scripts with their absolute paths to be passed. These user or attacker-controlled executable scripts or programs could then be executed by Tuned with root privileges that could allow attackers to local privilege escalation. EPSS Score: 0.05% Source: CVE November 27th, 2024 (5 months ago)
CVE-2024-51569	Apache NimBLE: Lack of input sanitization leading to out-of-bound reads in Number of Completed Packets HCI event handler Description: Out-of-bounds Read vulnerability in Apache NimBLE. Missing proper validation of HCI Number Of Completed Packets could lead to out-of-bound access when parsing HCI event and invalid read from HCI transport memory. This issue requires broken or bogus Bluetooth controller and thus severity is considered low. This issue affects Apache NimBLE: through 1.7.0. Users are recommended to upgrade to version 1.8.0, which fixes the issue. EPSS Score: 0.04% Source: CVE November 27th, 2024 (5 months ago)
CVE-2024-48288	Description: TP-Link TL-IPC42C V4.0_20211227_1.0.16 is vulnerable to command injection due to the lack of malicious code verification on both the frontend and backend. EPSS Score: 0.04% Source: CVE November 27th, 2024 (5 months ago)
CVE-2024-47250	Apache NimBLE: Lack of input validation in HCI advertising report could lead to potential out-of-bound access Description: Out-of-bounds Read vulnerability in Apache NimBLE. Missing proper validation of HCI advertising report could lead to out-of-bound access when parsing HCI event and thus bogus GAP 'device found' events being sent. This issue requires broken or bogus Bluetooth controller and thus severity is considered low. This issue affects Apache NimBLE: through 1.7.0. Users are recommended to upgrade to version 1.8.0, which fixes the issue. EPSS Score: 0.05% Source: CVE November 27th, 2024 (5 months ago)
CVE-2024-47249	Apache NimBLE: Lack of input sanitization leading to out-of-bound reads in multiple advertisement handler Description: Improper Validation of Array Index vulnerability in Apache NimBLE. Lack of input validation for HCI events from controller could result in out-of-bound memory corruption and crash. This issue requires broken or bogus Bluetooth controller and thus severity is considered low. This issue affects Apache NimBLE: through 1.7.0. Users are recommended to upgrade to version 1.8.0, which fixes the issue. EPSS Score: 0.04% Source: CVE November 27th, 2024 (5 months ago)
CVE-2024-47248	Apache NimBLE: Buffer overflow in NimBLE MESH Bluetooth stack Description: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in Apache NimBLE. Specially crafted MESH message could result in memory corruption when non-default build configuration is used. This issue affects Apache NimBLE: through 1.7.0. Users are recommended to upgrade to version 1.8.0, which fixes the issue. EPSS Score: 0.04% Source: CVE November 27th, 2024 (5 months ago)