SUSE-SU-2022:2809-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP2 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-36557: Fixed a race condition between the VTDISALLOCATE ioctl and closing/opening of ttys could lead to a use-after-free bnc1201429. - CVE-2020-36558:...

CVE-2022-35290

Under certain conditions SAP Authenticator for Android allows an attacker to access information which would otherwise be restricted...

USN-5560-2 linux-hwe, linux-aws-hwe, linux-azure, linux-gcp, linux-oracle vulnerabilities

Zhenpeng Lin discovered that the network packet scheduler implementation in the Linux kernel did not properly remove all references to a route filter before freeing it in some situations. A local attacker could use this to cause a denial of service system crash or execute arbitrary code...

vaultOwner Can Front-Run rebalance() With setAutomation() To Lower Incentives

Lines of code Vulnerability details Impact A vaultOwner who is "not confident enough in ourselves to stay up-to-date with market conditions to know when we should move to less volatile collateral to avoid liquidations." They can open their vault to other users who pay attention to the markets and...

Microsoft Edge 竞争条件问题漏洞

Microsoft Edge is a web browser from Microsoft Corporation USA that comes with systems after Windows 10. Microsoft Edge Chromium-based is vulnerable to a competitive conditions issue. No information about this vulnerability is available at this time, so stay tuned to CNNVD or vendor announcements...

Google Chrome 竞争条件问题漏洞

Google Chrome is a web browser from Google, Inc. in the United States. Google Chrome is vulnerable to a competitive conditions issue. No information about this vulnerability is available at this time, so stay tuned to CNNVD or the vendor announcement...

Google Chrome 竞争条件问题漏洞

Google Chrome is a web browser from Google, Inc. in the United States. Google Chrome is vulnerable to a competitive conditions issue. No information about this vulnerability is available at this time, so stay tuned to CNNVD or the vendor announcement...

Google Chrome 竞争条件问题漏洞

Google Chrome is a web browser from Google, Inc. in the United States. Google Chrome is vulnerable to a competitive conditions issue. No information about this vulnerability is available at this time, so stay tuned to CNNVD or the vendor announcement...

Google Chrome 竞争条件问题漏洞

Google Chrome is a web browser from Google, Inc. in the United States. Google Chrome is vulnerable to a competitive conditions issue. No information about this vulnerability is available at this time, so stay tuned to CNNVD or the vendor announcement...

Google Chrome 竞争条件问题漏洞

Google Chrome is a web browser from Google, Inc. in the United States. Google Chrome is vulnerable to a competitive conditions issue. No information about this vulnerability is available at this time, so stay tuned to CNNVD or the vendor announcement...

CVE-2022-1293

The embedded neutralization of Script-Related HTML Tag, was by-passed in the case of some extra conditions...

UNISOC Chipsets 竞争条件问题漏洞

UNISOC Chipsets are chipsets from China's Purple Spreadtrum UNISOC. A security vulnerability exists in some UNISOC products, where out-of-bounds writes may exist in Bluetooth services due to competitive conditions. The following products are affected:...

CVE-2022-1293

The embedded neutralization of Script-Related HTML Tag, was by-passed in the case of some extra conditions...

GSD-2022-1004154 power: supply: core: Fix boundary conditions in interpolation

power: supply: core: Fix boundary conditions in interpolation This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.13 by commit...

Fedora: Security Advisory for golang-github-shopify-toxiproxy (FEDORA-2022-37aef44d1e)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 36 Update: golang-github-shopify-toxiproxy-2.1.4-11.fc36

Toxiproxy is a framework for simulating network conditions. It's made specifically to work in testing, CI and development environments, supporting deterministic tampering with connections, but with support for randomized chaos and customization. Toxiproxy is the tool you need to prove with tests...

CVE-2022-37000

An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 and related NetBackup products. Under certain conditions, an attacker with authenticated access to a NetBackup Client could remotely read files on a NetBack...

CVE-2022-36992

An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 and related NetBackup products. An attacker with authenticated access to a NetBackup Client could remotely execute arbitrary commands on a NetBackup Primary...

CVE-2022-36992

An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 and related NetBackup products. An attacker with authenticated access to a NetBackup Client could remotely execute arbitrary commands on a NetBackup Primary...

Design/Logic Flaw

An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 and related NetBackup products. An attacker with authenticated access to a NetBackup Client could remotely execute arbitrary commands on a NetBackup Primary...