OpenSSL Buffer Overread in CMS Password Decryption (CVE-2024-9143)
CVE-2024-9143 is a buffer overread in OpenSSL's CMS Authenticated Enveloped Data decryption path. Applications call…
Latest Posts
xz/liblzma Supply-Chain Backdoor (CVE-2024-3094) — Critical Linux Vulnerability
CVE-2024-3094 is a malicious backdoor inserted into upstream xz / liblzma tarballs (versions 5.6.0 and 5.6.1 ). On syste…
Linux Kernel nf_tables Double-Free Local Privilege Escalation (CVE-2024-1086)
CVE-2024-1086 is a use-after-free/double-free flaw in the Linux kernel netfilter nf_tables subsystem. A local user can …
OpenSSH regreSSHion (CVE-2024-6387) Unauthenticated RCE on glibc Linux
CVE-2024-6387 (nicknamed regreSSHion ) is a signal-handler race in OpenSSH's server ( sshd ) on glibc-based systems. U…