PT-2022-32404

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v3.18 through v5.18.14 Description A refcount leak was found in the versatile reboot probe function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions v3.18...

PT-2022-32390

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.15 Description The issue is related to a data-race around sysctl tcp probe threshold. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2022-32939

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.208 Description The issue is related to a data-race around sysctl tcp probe threshold. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2022-32612

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.58 Description The issue is related to a data-race around sysctl tcp probe threshold. The actual impact and attack plausibility have not yet been proven. It was introduced in version v4.1 and fixed in Linux...

PT-2022-32610

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.58 Description A data-race issue exists around sysctl tcp probe interval. The actual impact and attack plausibility have not yet been proven. This issue was introduced in version v4.1 and is fixed in Linux...

PT-2022-32794

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.134 Description A data-race issue exists around sysctl tcp probe threshold. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v5.10.134,...

PT-2022-33115

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.290 Description A data-race issue exists around sysctl tcp probe threshold. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v4.14.290,...

PT-2022-33042

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.254 Description The issue is related to a data-race around sysctl tcp probe threshold. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2022-33170

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.325 Description A data-race issue exists around sysctl tcp probe threshold. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v4.9.325,...

CVE-2022-36890

Jenkins Deployer Framework Plugin 85.v1d1888e8c021 and earlier does not restrict the name of files in methods implementing form validation, allowing attackers with Item/Read permission to check for the existence of an attacker-specified file path on the Jenkins controller file system...

SUSE SLED15 / SLES15 Security Update : kernel (SUSE-SU-2022:2422-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:2422-1 advisory. - Some AMD CPUs may transiently execute beyond unconditional direct branches, which may potentially result in...

[SECURITY] Fedora 35 Update: httprobe-0.1.2-6.fc35

Take a list of domains and probe for working HTTP and HTTPS servers...

PT-2022-38112

Уязвимость функции tegra eqos probe модуля drivers/net/ethernet/stmicro/stmmac/dwmac-dwc-qos-eth.c драйвера поддержки сетевых адаптеров Ethernet STMicroelectronics ядра операционной системы Linux связана с использованием недостаточно случайных значений. Эксплуатация уязвимости может позволить...

DEBIAN-CVE-2022-30591

quic-go through 0.27.0 allows remote attackers to cause a denial of service CPU consumption via a Slowloris variant in which incomplete QUIC or HTTP/3 requests are sent. This occurs because mtudiscoverer.go misparses the MTU Discovery service and consequently overflows the probe timer. NOTE: the...

CVE-2022-30591

quic-go through 0.27.0 allows remote attackers to cause a denial of service CPU consumption via a Slowloris variant in which incomplete QUIC or HTTP/3 requests are sent. This occurs because mtudiscoverer.go misparses the MTU Discovery service and consequently overflows the probe timer. NOTE: the...

CVE-2022-30591

quic-go through 0.27.0 allows remote attackers to cause a denial of service CPU consumption via a Slowloris variant in which incomplete QUIC or HTTP/3 requests are sent. This occurs because mtudiscoverer.go misparses the MTU Discovery service and consequently overflows the probe timer. NOTE: the...

CVE-2022-30591

quic-go through 0.27.0 allows remote attackers to cause a denial of service CPU consumption via a Slowloris variant in which incomplete QUIC or HTTP/3 requests are sent. This occurs because mtudiscoverer.go misparses the MTU Discovery service and consequently overflows the probe timer. NOTE: the...

CVE-2022-30591: Uncontrolled Resource Consumption

quic-go through 0.27.0 allows remote attackers to cause a denial of service CPU consumption via a Slowloris variant in which incomplete QUIC or HTTP/3 requests are sent. This occurs because mtudiscoverer.go misparses the MTU Discovery service and consequently overflows the probe timer. NOTE: the...

GSD-2022-1003983 phy: qcom-qmp: fix struct clk leak on probe errors

phy: qcom-qmp: fix struct clk leak on probe errors This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.283 by commit...

GSD-2022-1003980 phy: qcom-qmp: fix reset-controller leak on probe errors

phy: qcom-qmp: fix reset-controller leak on probe errors This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.283 by commit...