Important: kernel

Issue Overview: A flaw was found in the ATA over Ethernet AoE driver in the Linux kernel. The aoecmdcfgpkts function improperly updates the refcnt on struct netdevice, and a use-after-free can be triggered by racing between the free on the struct and the access through the skbtxq global queue. Th...

Linux kernel code execution vulnerability (CNVD-2024-14767)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel. The vulnerability is due to the aoecmdcfgpkts function in the Linux kernel's ATA over Ethernet AoE driver incorrectly...

UBUNTU-CVE-2023-6270

A flaw was found in the ATA over Ethernet AoE driver in the Linux kernel. The aoecmdcfgpkts function improperly updates the refcnt on struct netdevice, and a use-after-free can be triggered by racing between the free on the struct and the access through the skbtxq global queue. This could lead to...

CVE-2023-6270

A flaw was found in the ATA over Ethernet AoE driver in the Linux kernel. The aoecmdcfgpkts function improperly updates the refcnt on struct netdevice, and a use-after-free can be triggered by racing between the free on the struct and the access through the skbtxq global queue. This could lead to...

CVE-2023-6270: Use After Free

A flaw was found in the ATA over Ethernet AoE driver in the Linux kernel. The aoecmdcfgpkts function improperly updates the refcnt on struct netdevice, and a use-after-free can be triggered by racing between the free on the struct and the access through the skbtxq global queue. This could lead to...

SUSE CVE-2017-16808

tcpdump before 4.9.3 has a heap-based buffer over-read related to aoeprint in print-aoe.c and lookupemem in addrtoname.c...

Malicious code in aoe_playstyle (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2f865948cf33faf1c7357dd071a3cbdc7cf2b6c021983548afd01c0e02c82b18 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2019-4780

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.3 Description The issue is related to a buffer over-read in the OSPFv3 parser, specifically in the ospf6 print lshdr function in print-ospf6.c. This can be exploited by a remote attacker to cause a denial of...

PT-2019-5671

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.3 Description The issue is related to a buffer over-read in the BGP parser of tcpdump, specifically in the bgp attr print function in print-bgp.c, which handles MP REACH NLRI. This can lead to a denial of service...

PT-2019-5680

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.3 Description The issue is related to stack exhaustion in the smb fdata function within smbutil.c due to uncontrolled recursion. This can be exploited by a remote attacker to cause a denial of service. The problem...

PT-2019-5673

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.3 Description The issue is related to a buffer over-read in the Babel parser of tcpdump, specifically in the babel print v2 function in print-babel.c. This can lead to a denial of service. The problem is also...

PT-2019-4781

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.3 Description The issue is related to a buffer over-read in the ICMPv6 parser of the tcpdump utility, which can lead to a denial of service. This can be exploited by a remote attacker. The buffer over-read is...

PT-2019-5678

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.3 Description The issue is related to a lack of certain bounds checks in the lmp print data link subobjs function in print-lmp.c of the tcpdump utility. This can lead to a buffer over-read, potentially allowing a...

PT-2019-5679

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.3 Description The issue is related to a buffer over-read in the bgp capabilities print function in print-bgp.c, which can cause a denial of service. This can be exploited by a remote attacker. The bgp capabilities...

Linux kernel information disclosure vulnerability (CNVD-2018-24479)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A security vulnerability exists in the 'aoediskdebugfsshow' function in the drivers/block/aoe/aoeblk.c file in Linux kernel 4.16.4rc4 and earlier versions. A local...

CVE-2018-7754

The aoediskdebugfsshow function in drivers/block/aoe/aoeblk.c in the Linux kernel through 4.16.4rc4 allows local users to obtain sensitive address information by reading "ffree: " lines in a debugfs file...

CVE-2018-7754

The aoediskdebugfsshow function in drivers/block/aoe/aoeblk.c in the Linux kernel through 4.16.4rc4 allows local users to obtain sensitive address information by reading "ffree: " lines in a debugfs file...

CVE-2018-7754

The aoediskdebugfsshow function in drivers/block/aoe/aoeblk.c in the Linux kernel through 4.16.4rc4 allows local users to obtain sensitive address information by reading "ffree: " lines in a debugfs file...

CVE-2018-7754: Insertion of Sensitive Information into Log File

The aoediskdebugfsshow function in drivers/block/aoe/aoeblk.c in the Linux kernel through 4.16.4rc4 allows local users to obtain sensitive address information by reading "ffree: " lines in a debugfs file...

PT-2018-18258

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.16.4rc4 Description: The issue allows local users to obtain sensitive address information by reading specific lines in a debugfs file. This is due to a problem in the aoedisk debugfs show function in...