Bundesamt für Sicherheit in der Informationstechnik vulnerabilities and threats

Multiple vulnerabilities have been identified in Phoenix Contact FL MGUARD remote maintenance routers used in industrial environments. These issues affect versions prior to and including 8.9.3. A fixed version, 8.9.3, is available to address these vulnerabilities.

Multiple vulnerabilities in the Go programming language prior to version 1.23.1 can lead to denial of service conditions due to improper handling of deeply nested structures and HTTP 100-continue requests. These issues cause panics or stack exhaustion in various Go packages including net/http, go/parser, encoding/gob, and go/build/constraint. A fixed version 1.23.1 is available addressing these flaws.

CVE-2024-6119 is a vulnerability in OpenSSL where specially crafted X.509 certificates can cause the library to crash or potentially expose sensitive information. This issue affects OpenSSL versions prior to 13.2.3 and has been fixed in version 13.2.3. The vulnerability can lead to denial of service or information disclosure. Updates are available from major Linux distributions including Debian, Ubuntu, and Red Hat. Users are advised to apply the official patches and reboot their systems to mitigate the risk.

Multiple vulnerabilities affecting the Linux kernel have been identified and addressed in a security update. These issues involve various kernel components such as network drivers, memory management, filesystem handling, and BPF enforcement. The vulnerabilities have been rated with moderate severity by Red Hat and require applying updated kernel packages followed by a system reboot.

cURL ist eine Client-Software, die das Austauschen von Dateien mittels mehrerer Protokolle wie z. B. HTTP oder FTP erlaubt.

Two vulnerabilities (CVE-2024-29131 and CVE-2024-29133) in Apache Commons Configuration prior to version 2.10.1 can cause a StackOverflowError due to recursive calls in ListDelimiterHandler methods when handling cyclical object trees. These issues may lead to denial of service conditions by crashing affected applications.

Multiple vulnerabilities have been identified in the Linux kernel, which is the core component of the Linux operating system. The information provided does not specify the nature, impact, or affected versions of these vulnerabilities.