kernel: netfilter: flowtable: fix stuck flows on cleanup due to pending work

In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: fix stuck flows on cleanup due to pending work To clear the flow table on flow table free, the following sequence normally happens in order: 1 gcstep work is stopped to disable any further stats/del requests...

CVE-2023-31197

The CVE-2023-31197 issue is an Uncontrolled search path vulnerability in Intel\u00ae Trace Analyzer and Collector prior to version 2020 update 3 that could allow an authenticated local user to escalate privileges. Affected product: Intel\u00ae Trace Analyzer and Collector before 2020 update 3. Ro...

CVE-2023-23580

Stack-based buffer overflow for some IntelR Trace Analyzer and Collector software before version 2021.8.0 published Dec 2022 may allow an authenticated user to potentially escalation of privilege via local access...

CVE-2023-23909

Out-of-bounds read for some IntelR Trace Analyzer and Collector software before version 2021.8.0 published Dec 2022 may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2023-23910

Out-of-bounds write for some IntelR Trace Analyzer and Collector software before version 2021.8.0 published Dec 2022 may allow an authenticated user to potentially escalation of privilege via local access...

CVE-2023-23580

Stack-based buffer overflow for some IntelR Trace Analyzer and Collector software before version 2021.8.0 published Dec 2022 may allow an authenticated user to potentially escalation of privilege via local access...

CVE-2022-42878

Null pointer dereference for some IntelR Trace Analyzer and Collector software before version 2021.8.0 published Dec 2022 may allow an authenticated user to potentially enable information disclosure via local access...

Stack overflow

Stack-based buffer overflow for some IntelR Trace Analyzer and Collector software before version 2021.8.0 published Dec 2022 may allow an authenticated user to potentially escalation of privilege via local access...

CVE-2023-23909

CVE-2023-23909 describes an out-of-bounds read in Intel® Trace Analyzer and Collector software prior to version 2021.8.0, which may allow an authenticated attacker with local access to disclose information. The issue affects Intel Trace Analyzer and Collector (and related components) and is mitig...

CVE-2022-42878

CVE-2022-42878 affects Intel® Trace Analyzer and Collector software prior to 2021.8.0 (and related Intel HPC Toolkit components). Root cause is a null pointer dereference that could allow an authenticated local user to disclose information. Exploitation details are not provided in the supplied do...

CVE-2023-23909

Out-of-bounds read for some IntelR Trace Analyzer and Collector software before version 2021.8.0 published Dec 2022 may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2023-23580

Intel® Trace Analyzer and Collector software is affected by a stack-based buffer overflow in the component prior to version 2021.8.0. The vulnerability could allow an authenticated, locally located user to escalate privileges. Affected product: Intel Trace Analyzer and Collector (pre-2021.8.0). R...

CVE-2023-23910

CVE-2023-23910 affects Intel Trace Analyzer and Collector software prior to 2021.8.0. The issue is an out-of-bounds write that may allow an authenticated local user to escalate privileges. The NVD metric shows CVSSv3.1 base score 7.8 (HIGH) with LOCAL attacker, HIGH confidentiality/integrity/avai...

CVE-2023-23569

CVE-2023-23569 concerns a stack-based buffer overflow in Intel(R) Trace Analyzer and Collector software prior to version 2021.8.0. An authenticated, local attacker could potentially escalate privileges. The issue affects Intel Trace Analyzer and Collector (and is noted by Intel advisory INTEL-SA-...

Intel Trace Analyzer And Collector 缓冲区错误漏洞

Intel Trace Analyzer And Collector is a trace analyzer and collector from Intel USA. It is used to analyze Mpi behavior in parallel applications. A security vulnerability exists in Intel Trace Analyzer And Collector versions prior to 2021.8.0 that stems from an out-of-bounds write issue. An...

PT-2023-14155 · Intel · Intel Trace Analyzer/Collector

Name of the Vulnerable Software and Affected Versions: IntelR Trace Analyzer and Collector software versions prior to 2021.8.0 Description: The issue is related to a null pointer dereference that may allow an authenticated user to potentially enable information disclosure via local access...

kernel: ICMPv6 “Packet Too Big” packets force a DoS of the Linux kernel by forcing 100% CPU

A flaw in the routing table size was found in the ICMPv6 handling of "Packet Too Big". The size of the routing table is regulated by periodic garbage collection. However, with "Packet Too Big Messages" it is possible to exceed the routing table size and garbage collector threshold. A user located...

Intel® Trace Analyzer and Collector Software Advisory

Summary: Potential security vulnerabilities in some Intel® Trace Analyzer and Collector software may allow escalation of privilege or information disclosure. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2023-23569 Description:...

The vulnerability of the Fluentd data collector and its browser-based manager, fluentd-ui, stems from the default use of a standard password. This allows attackers to execute arbitrary code.

The vulnerability of Fluentd and its browser manager, fluentd-ui, is related to the default use of a standard password. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

java-11-openjdk security update

An update is available for java-11-openjdk. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The java-11-openjdk packages provide the OpenJDK 11 Java Runtime...