Oracle Linux 7 : Unbreakable Enterprise kernel (ELSA-2023-12566)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-12566 advisory. - firewire: fix potential uaf in outboundphypacketcallback Chengfeng Ye Orabug: 35493606 CVE-2023-3159 - ath9k: fix use-after-free in ath9khifusbrxcb...

Unbreakable Enterprise kernel security update

4.1.12-124.76.2 - firewire: fix potential uaf in outboundphypacketcallback Chengfeng Ye Orabug: 35493606 CVE-2023-3159 - ath9k: fix use-after-free in ath9khifusbrxcb Pavel Skripkin Orabug: 35448003 CVE-2022-1679 - dm ioctl: fix nested locking in tableclear to remove deadlock concern Mike Snitzer...

SUSE-SU-2023:2653-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-28410: Fixed improper restriction of operations within the bounds of a memory buffer in some IntelR i915 Graphics drivers that may have allowed an...

Important: kernel

Issue Overview: It was discovered that a nft object or expression could reference a nft set on a different nft table, leading to a use-after-free once that table was deleted. CVE-2022-2586 A heap buffer overflow flaw was found in the Linux kernel's Netfilter subsystem in the way a user provides...

Mageia: Security Advisory (MGASA-2023-0202)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2023-0201)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-6173-1 linux-oem-6.1 vulnerabilities

Gwangun Jung discovered that the Quick Fair Queueing scheduler implementation in the Linux kernel contained an out-of-bounds write vulnerability. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2023-31436 It was discovered that the...

SUSE: Security Advisory (SUSE-SU-2023:2507-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Amazon Linux 2023 : bpftool, kernel, kernel-devel (ALAS2023-2023-184)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2023-184 advisory. There is a potential deadlock in the eBPF subsystem in the Linux kernel. The default sysctl configuration kernel.unprivilegedbpfdisabled on Amazon Linux does not allow unprivileged users to use...

Fedora: Security Advisory for kernel (FEDORA-2023-dfd4a6e8f2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 37 : kernel (2023-dfd4a6e8f2)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-dfd4a6e8f2 advisory. The 6.2.15 stable kernel update contains a number of important fixes across the tree. Tenable has extracted the preceding description block directly...

CVE-2023-2269

creationtimestamp| type| source ---|---|--- 2023-04-26 00:25:24+00:00| seen| https://t.me/cibsecurity/62863...

CVE-2023-2269

The CVE-2023-2269 entry concerns a denial-of-service vulnerability in the Linux kernel Device Mapper-Multipathing, caused by a possible recursive locking scenario that can deadlock in table_clear() in drivers/md/dm-ioctl.c. Affected component: Linux kernel’s DM‑multipath subsystem. Impact per the...

CVE-2023-2269

A denial of service problem was found, due to a possible recursive locking scenario, resulting in a deadlock in tableclear in drivers/md/dm-ioctl.c in the Linux Kernel Device Mapper-Multipathing sub-component...

SUSE CVE-2005-2269

Firefox before 1.0.5, Mozilla before 1.7.9, and Netscape 8.0.2 does not properly verify the associated types of DOM node names within the context of their namespaces, which allows remote attackers to modify certain tag properties, possibly leading to execution of arbitrary script or code, as...

CVE-2022-2269

creationtimestamp| type| source ---|---|--- 2022-08-08 18:23:57+00:00| seen| https://t.me/cibsecurity/47743...

CVE-2022-2269

The Website File Changes Monitor WordPress plugin before 1.8.3 does not sanitise and escape user input before using it in a SQL statement via an action available to users with the manageoptions capability by default admins, leading to an SQL injection...

CVE-2022-2269

CVE-2022-2269 concerns the WordPress plugin “Website File Changes Monitor” (versions prior to 1.8.3). The issue is that the plugin does not sanitise or escape user input before using it in a SQL statement via an action accessible to users with the manage_options capability (typically admins). Thi...

Mageia: Security Advisory (MGASA-2015-0110)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2020:2269-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...