High WID-SEC-2024-1415 2 CVEs

IGEL OS: Mehrere Schwachstellen ermöglichen Codeausführung

Published Jun 19, 2024 · Updated Jun 19, 2024 · de-DE

Vendor: IGEL Product: OS

Summary

Ein lokaler Angreifer kann mehrere Schwachstellen in IGEL OS ausnutzen, um beliebigen Programmcode auszuführen.

Product

IGEL OS ist das Linux basierte Betriebssystem von IGEL Computern.

Vulnerabilities 2

Critical 10.0

CVE-2024-5171

heap buffer overflow in libaom

Integer overflow in libaom internal function img_alloc_helper can lead to heap buffer overflow. This function can be reached via 3 callers: * Calling aom_img_alloc() with a large value of the d_w, d_h, or align parameter may result in integer overflows in the…

libaom libaom aom aom Debian Ubuntu Azure Linux Alpine

Jun 5, 2024
High 7.8

CVE-2024-26256 EPSS 88%

Libarchive Remote Code Execution Vulnerability

Libarchive Remote Code Execution Vulnerability

Microsoft Windows 11 version 23H2 Windows 11 version 22H2 Windows Server 2022, 23H2 Edition (Server Core installation) Windows Debian Ubuntu Azure Linux Alpine Wolfi

Apr 9, 2024

Revision history

2024-06-19 #1
Initiale Fassung

References

IGEL Product Security Information vom 2024-06-19
https://kb.igel.com/securitysafety/en/isn-2024-15-libaom-vulnerability-129829641.html
IGEL Product Security Information vom 2024-06-19
https://kb.igel.com/securitysafety/en/isn-2024-16-libarchive-vulnerability-129829640.html