Skip to content
OpenAdvisories

Archive

2 December 2024

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Medium 6.5
    CVE-2024-53259 Public exploit

    quic-go affected by an ICMP Packet Too Large Injection Attack on Linux

    quic-go is an implementation of the QUIC protocol in Go. An off-path attacker can inject an ICMP Packet Too Large packet. Since affected quic-go versions used IP_PMTUDISC_DO, the kernel would then return a "message too large" error on sendmsg, i.e. when quic-…

  • Medium 4.8
    CVE-2024-53617 Public exploit

    A Cross Site Scripting vulnerability in LibrePhotos before commit 32237 allows attackers to takeover any account via up…