Ubuntu 20.04 LTS / 22.04 LTS : Linux kernel vulnerabilities (USN-6044-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6044-1 advisory. It was discovered that the Traffic-Control Index TCINDEX implementation in the Linux kernel did not properly perform filter deactivation in...

Mageia: Security Advisory (MGASA-2023-0149)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2023-1829 Use-after-free in tcindex (traffic control index filter) in the Linux Kernel

A use-after-free vulnerability in the Linux Kernel traffic control index filter tcindex can be exploited to achieve local privilege escalation. The tcindexdelete function which does not properly deactivate filters in case of a perfect hashes while deleting the underlying structure which can later...

CVE-2023-1829

CVE-2023-1829 affects the Linux kernel tcindex subsystem. A use-after-free can occur in tcindex_delete when filters are not properly deactivated for a perfect-hash underlying structure, potentially enabling local privilege escalation to root. The flaw is tied to the traffic control index filter (...

CVE-2023-1829 Use-after-free in tcindex (traffic control index filter) in the Linux Kernel

A use-after-free vulnerability in the Linux Kernel traffic control index filter tcindex can be exploited to achieve local privilege escalation. The tcindexdelete function which does not properly deactivate filters in case of a perfect hashes while deleting the underlying structure which can later...

Amazon Linux 2023 : bpftool, kernel, kernel-devel (ALAS2023-2023-138)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2023-138 advisory. In the Linux kernel, the following vulnerability has been resolved: drm: Fix potential null-ptr-deref due to drmmmodeconfiginit CVE-2022-50556 A double-free vulnerability was found in the...

Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.10-2023-028 (ALASKERNEL-5.10-2023-028)

The version of kernel installed on the remote host is prior to 5.10.173-154.642. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.10-2023-028 advisory. A regression exists in the Linux Kernel within KVM: nVMX that allowed for speculative execution attacks...

Amazon Linux AMI : kernel (ALAS-2023-1701)

The version of kernel installed on the remote host is prior to 4.14.309-159.529. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2023-1701 advisory. Detected a few exploitable gadgets that could leak secret memory through a side-channel such as MDS as well as...

Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.4-2023-043 (ALASKERNEL-5.4-2023-043)

The version of kernel installed on the remote host is prior to 5.4.235-144.344. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.4-2023-043 advisory. A regression exists in the Linux Kernel within KVM: nVMX that allowed for speculative execution attacks. L...

Security Bulletin: Potential denial of service may affect IBM HTTP Server on Windows (CVE-2015-1829), impacting Asset and Service Management

Summary There is a potential denial of service that may affect IBM HTTP Server on Windows CVE-2015-1829. To exploit the attack requires local access to the server system. The attack affects Maximo Asset Management, Maximo Asset Management Essentials, Maximo Industry Solutions including Maximo for...

Security Bulletin: Potential denial of service may affect IBM HTTP Server on Windows (CVE-2015-1829)

Summary There is a potential denial of service that may affect IBM HTTP Server on Windows CVE-2015-1829. To exploit the attack requires local access to the server system. Vulnerability Details CVEID: CVE-2015-1829 DESCRIPTION: Apache Portable Runtime is vulnerable to a denial of service, caused b...

Amazon Linux 2 : vim (ALAS-2022-1829)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2022-1829 advisory. Use after free in appendcommand in GitHub repository vim/vim prior to 8.2.4895. This vulnerability is capable of crashing software, Bypass Protection Mechanism, Modify Memory, and possible remote...

CVE-2022-1829 Inline Google Maps <= 5.11 - Arbitrary Settings Update to Stored XSS via CSRF

The Inline Google Maps WordPress plugin through 5.11 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack, and lead to Stored Cross-Site Scripting due to the lack of sanitisation and escaping...

CVE-2022-1829

CVE-2022-1829 affects the Inline Google Maps WordPress plugin (versions up to 5.11). The root cause is missing CSRF checks when updating plugin settings, allowing an authenticated attacker to modify settings via CSRF and potentially trigger a stored XSS due to insufficient sanitisation/escaping. ...

openSUSE: Security Advisory for go1.18 (SUSE-SU-2022:1829-1)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Mageia: Security Advisory (MGASA-2014-0409)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-1829

creationtimestamp| type| source ---|---|--- 2021-09-15 16:02:53+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/535...

CVE-2021-1829

CVE-2021-1829 is a type confusion vulnerability in macOS Big Sur’s Wi‑Fi subsystem. The issue could allow an attacker to execute arbitrary code with kernel privileges. It is fixed in macOS Big Sur 11.3. The NVD notes a critical impact (CVSSv3.1: 9.8) with network vector, no user interaction requi...

SUSE: Security Advisory (SUSE-SU-2021:1829-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-1829

CVE-2020-1829 affects Huawei NIP6800 (V500R001C30, V500R001C60SPC500) and Secospace USG6600/USG9500 (V500R001C30SPC200, V500R001C30SPC600, V500R001C60SPC500). The IPSec module may improperly process a message, leading to a double-free condition and potential disruption of service. The issue is ad...