SUSE SLES15: cluster-md-kmp-azure / dlm-kmp-azure / gfs2-kmp-azure / etc (SUSE-SU-2023:1802-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:1802-1 advisory. The SUSE Linux Enterprise 15 SP4 Azure kernel was updated to receive various security and bugfixes. The following...

CVE-2023-28464

hciconncleanup in net/bluetooth/hciconn.c in the Linux kernel through 6.2.9 has a use-after-free observed in hciconnhashflush because of calls to hcidevput and hciconnput. There is a double free that may lead to privilege escalation...

CVE-2023-28464

A double-free vulnerability was found in the hciconncleanup in net/bluetooth/hciconn.c in the Linux Kernel. This issue may cause a denial of service or privilege escalation. Mitigation Mitigation for this issue is either not available or the currently available options don't meet the Red Hat...

CVE-2023-28464

hciconncleanup in net/bluetooth/hciconn.c in the Linux kernel through 6.2.9 has a use-after-free observed in hciconnhashflush because of calls to hcidevput and hciconnput. There is a double free that may lead to privilege escalation...

CVE-2023-28464

hciconncleanup in net/bluetooth/hciconn.c in the Linux kernel through 6.2.9 has a use-after-free observed in hciconnhashflush because of calls to hcidevput and hciconnput. There is a double free that may lead to privilege escalation...

CVE-2023-28464

CVE-2023-28464 is described in MiracleLinux/Alibaba Cloud Linux advisories as a use-after-free in the Linux kernel Bluetooth subsystem (hci_conn_cleanup in net/bluetooth/hci_conn.c) observed up to kernel 6.2.9, with a double-free leading to possible privilege escalation. The connected Nessus entr...

CVE-2023-28464

creationtimestamp| type| source ---|---|--- 2023-03-28 18:25:20+00:00| seen| Telegram/8p6JA5oMMOqwPorrqcuvwcmg79aWDchpNaHDfTZK-qhrPOA 2023-03-31 20:22:24+00:00| seen| https://t.me/cibsecurity/61255...

CVE-2022-28464

creationtimestamp| type| source ---|---|--- 2022-04-27 18:13:13+00:00| seen| https://t.me/cibsecurity/41500...

CVE-2022-28464

Apifox through 2.1.6 is vulnerable to Cross Site Scripting XSS which can lead to remote code execution...

CVE-2022-28464

CVE-2022-28464 affects Apifox up to version 2.1.6. The issue is a Cross Site Scripting (XSS) vulnerability that can lead to remote code execution. The connected documents consistently describe XSS as the root cause in Apifox’s web context, implying that attacker-controlled input may be processed ...

CVE-2021-28464

VP9 Video Extensions Remote Code Execution Vulnerability...

CVE-2021-28464 VP9 Video Extensions Remote Code Execution Vulnerability

...

CVE-2021-28464 VP9 Video Extensions Remote Code Execution Vulnerability

...

CVE-2021-28464

CVE-2021-28464 is a remote code execution vulnerability in the Windows VP9 Video Extensions. Public sources indicate exploitation requires processing a specially crafted input/file, enabling arbitrary code execution on the affected system. The CVE is listed with a high impact (CVSS v3.1 base scor...

CVE-2020-28464

This affects the package djv before 2.1.4. By controlling the schema file, an attacker can run arbitrary JavaScript code on the victim machine...

CVE-2020-28464

CVE-2020-28464 affects the npm package djv prior to 2.1.4 . By controlling the schema file, an attacker can cause the runtime to execute arbitrary JavaScript on the victim host, i.e., a remote code execution (RCE) scenario. Several sources (NVD, GHSA, OSV, CNVD, Veracode, Snyk) consistently descr...

@attraqt/activity (>=0.0.1, <=1.3.0), @attraqt/xo-js (0.0.1) +2 more potentially affected by CVE-2020-28464 via djv (2.1.3-alpha.0)

djv NPM version 2.1.3-alpha.0 is affected by a known vulnerability. The following packages have a transitive dependency on djv and may be impacted: - @attraqt/activity =0.0.1, =1.1.8, =1.0.3, =1.1.6 Source cves: CVE-2020-28464 Source advisory: SNYK:JS-DJV-1014545...