CVE-2024-35197 affects the gix-ref Git library on Windows systems, where references or file paths that match legacy Windows device names (e.g., CON, CONIN$, CONOUT$, COM1) can cause unintended device access. Cloning a malicious repository with such names can lead to indefinite blocking by reading from the console device or writing arbitrary attacker-controlled data to devices like the console or serial ports. This can result in denial of service or deceptive console messages that may facilitate social engineering. The vulnerability is fixed in gix-ref version 0.44.0.
CVE-2024-35186 is a path traversal vulnerability in gix-fs that allows a specially crafted repository to place files outside the intended working tree during checkout. This can lead to arbitrary code execution by installing malicious files such as Git hooks outside the repository directory. The issue arises because gix-fs and related components do not properly verify that paths remain within the working tree, allowing upward or downward traversal using specially named trees or blobs. The vulnerability affects versions before 0.11.0 and is fixed in 0.11.0.
A vulnerability in the Go programming language (golang) net module allows a malformed DNS message in response to a query to cause the Lookup functions to enter an infinite loop. This can result in a denial of service condition. The issue affects multiple Ubuntu package versions of golang prior to 1.22.2-2ubuntu0.1, with fixes available in version 1.22.2-2ubuntu0.1 and later.
A vulnerability in libcoap 4.3.4's coap_pdu.c allows attackers to trigger undefined behavior through a sequence of messages causing an unsigned integer overflow. This flaw can result in a denial of service due to application crash or instability. The issue affects multiple specific versions of libcoap2 and has a high severity rating with a CVSS score of 7.5.
Versions of the Python code formatter Black prior to 24.3.0 contain a Regular Expression Denial of Service (ReDoS) vulnerability in the lines_with_leading_tabs_expanded function within strings.py. This flaw allows an attacker to cause a denial of service by providing malicious input with many leading tab characters. The vulnerability is exploitable when Black processes untrusted input or docstrings with thousands of leading tabs. The issue has a medium severity rating with a CVSS score of 5.3. A fix is available in version 24.3.0.
CVE-2024-22394 is a critical improper authentication vulnerability in the SonicWall SonicOS SSL-VPN feature. It affects only SonicOS firmware version 7.1.1-7040 and could allow a remote attacker to bypass authentication under specific conditions.
A critical stack-based buffer overflow vulnerability exists in the get_split_entry function of the Configuration File Handler component in obgm libcoap version 4.3.4. This vulnerability allows remote attackers with limited privileges to cause a buffer overflow, potentially leading to full compromise of confidentiality, integrity, and availability. Multiple specific versions of libcoap3 are affected. A patch is recommended to address this issue.
A vulnerability in Wireshark's IEEE 1609.2 dissector in versions 4.2.0, 4.0.0 to 4.0.11, and 3.6.0 to 3.6.19 can cause a crash leading to denial of service. This can be triggered by packet injection or a crafted capture file. The flaw has a high severity with a CVSS score of 7.8.
The remove_dir_all Rust crate had a race condition vulnerability allowing an attacker to trick a privileged process into deleting unintended privileged files via symlink manipulation during recursive directory deletion. This Time-of-check Time-of-use (TOCTOU) flaw could cause deletion outside the intended directory tree. The issue is mitigated in version 0.8.0 by using file-handle relative operations to prevent directory hierarchy manipulation during deletion. However, the initial entry path remains a challenge and requires careful handling by calling code to avoid race conditions. Unprivileged processes are not affected beyond existing risks.
A use-of-uninitialized-value vulnerability was reported in the residual_coding function of the kimageformats component. The issue was identified by OSS-Fuzz and involves reading uninitialized memory during image processing.
A use-of-uninitialized-value vulnerability was reported in the kimageformats component, specifically in the function edge_filtering_chroma_internal<unsigned char>. The issue was identified by OSS-Fuzz and involves a crash due to uninitialized memory usage during image processing.
A use-of-uninitialized-value vulnerability was identified in the kimageformats library within the XCFImageFormat::mergeRGBToRGB function. This issue was reported by OSS-Fuzz and involves improper handling of uninitialized memory during image layer merging operations.
A use-of-uninitialized-value vulnerability was reported in the kimageformats component, specifically in the fetchARGB32ToRGBA64PM_avx2 function. The issue was identified through an OSS-Fuzz report and involves a crash due to uninitialized memory usage during image processing operations.