[SECURITY] [DSA 5658-1] linux security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5658-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso April 13, 2024 https://www.debian.org/security/faq -...

SUSE-SU-2024:0900-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2023-6270: Fixed a use-after-free issue in aoecmdcfgpkts bsc1218562. - CVE-2023-52463: Fixed null pointer dereference in efivarfs bsc1220328. - CVE-2023-52559:...

Important: kernel

Issue Overview: A flaw was found in the ATA over Ethernet AoE driver in the Linux kernel. The aoecmdcfgpkts function improperly updates the refcnt on struct netdevice, and a use-after-free can be triggered by racing between the free on the struct and the access through the skbtxq global queue. Th...

CVE-2023-6270

A flaw was found in the ATA over Ethernet AoE driver in the Linux kernel. The aoecmdcfgpkts function improperly updates the refcnt on struct netdevice, and a use-after-free can be triggered by racing between the free on the struct and the access through the skbtxq global queue. This could lead to...

CVE-2023-6270

CVE-2023-6270 affects the Linux kernel AoE (ATA over Ethernet) driver. The flaw is in aoecmd_cfg_pkts(), which improperly updates the refcount of thestruct net_device, allowing a use-after-free when freeing the device and accessing it via the skbtxq queue. This can lead to a denial of service or ...

CVE-2023-6270 Kernel: aoe: improper reference count leads to use-after-free vulnerability

A flaw was found in the ATA over Ethernet AoE driver in the Linux kernel. The aoecmdcfgpkts function improperly updates the refcnt on struct netdevice, and a use-after-free can be triggered by racing between the free on the struct and the access through the skbtxq global queue. This could lead to...

CVE-2023-6270

creationtimestamp| type| source ---|---|--- 2024-01-04 16:32:10+00:00| seen| https://t.me/ctinow/163090 2024-01-04 18:21:50+00:00| seen| https://t.me/ctinow/163145 2024-01-05 01:34:58+00:00| seen| https://t.me/cibsecurity/74427 2024-01-06 16:18:43+00:00| seen| https://t.me/arpsyndicate/2556...

Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS / 22.04 LTS : Vim vulnerabilities (USN-6270-1)

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6270-1 advisory. It was discovered that Vim incorrectly handled memory when opening certain files. If an attacker could trick a user...

SUSE CVE-2014-6270

Off-by-one error in the snmpHandleUdp function in snmpcore.cc in Squid 2.x and 3.x, when an SNMP port is configured, allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted UDP SNMP request, which triggers a heap-based buffer overflow...

Mageia: Security Advisory (MGASA-2014-0396)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2016:1996-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2015:1983-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2015:0028-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-6270

CVE-2020-6270 affects SAP NetWeaver AS ABAP (Banking Services) across versions 710, 711, 740, 750, 751, 752, 75A–75E. Root cause is a missing authorization check for an authenticated user, enabling unauthorized changes to individual conditions and potentially leading to incorrect pricing. Exploit...

NVIDIA Graphics Driver Multiple Vulnerabilities (including fixes for Intel Speculative Side Channel Vulnerabilities) - US

Lenovo Security Advisory: LEN-16730 Potential Impact: Denial of service, possible escalation of privilege, exfiltration of privileged memory Severity: High Scope of Impact: Industry-wide CVE Identifier: CVE-2017-5753, CVE-2017-6266, CVE-2017-6267, CVE-2017-6268, CVE-2017-6269, CVE-2017-6270,...

NVIDIA Windows GPU Display Driver 375.x / 384.x < 385.08 Multiple Vulnerabilities

NVIDIA GPU display driver vulnerabilities may lead to denial of service or possible escalation of privileges. To exploit these vulnerabilities an attacker would send a malicious request to an affected application or interact with an affected application. If successfully exploited, these...

CVE-2017-6270

The CVE-2017-6270 issue affects the NVIDIA Windows GPU Display Driver, specifically the kernel mode layer handler DxgkDdiCreateAllocation. Untrusted user input is used as a divisor without validation during a calculation, which may lead to division-by-zero and denial of service. Impact is limited...

CVE-2016-6270

CVE-2016-6270 affects Trend Micro Virtual Mobile Infrastructure (VMI) prior to version 5.1. The vulnerability resides in the handle_certificate function of /vmi/manager/engine/management/commands/apns_worker.py, allowing remote authenticated users to execute arbitrary commands via shell metachara...

GLSA-201607-01 : Squid: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201607-01 Squid: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Squid. Please review the CVE identifiers referenced below for details. Impact : An attacker can possibly execute arbitrary code or create a...

Ubuntu: Security Advisory (USN-2921-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...