297 matches found
CVE-2022-50116 tty: n_gsm: fix deadlock and link starvation in outgoing data path
In the Linux kernel, the following vulnerability has been resolved: tty: ngsm: fix deadlock and link starvation in outgoing data path The current implementation queues up new control and user packets as needed and processes this queue down to the ldisc in the same code path. That means that the...
TencentOS Server 3: bind9.16 (TSSA-2023:0240)
The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2023:0240 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...
PT-2025-21585 · Zulip · Zulip
Name of the Vulnerable Software and Affected Versions: Zulip versions 10.0 through 10.2 Description: The issue concerns the "Who can create public channels" access control mechanism in Zulip, which can be circumvented by creating a private or web-public channel and then changing the channel priva...
Alibaba Cloud Linux 3 : 0126: bind (ALINUX3-SA-2023:0126)
The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2023:0126 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2023-3341: The code that processes control...
EulerOS 2.0 SP13 : dhcp (EulerOS-SA-2025-1331)
According to the versions of the dhcp package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : The code that processes control channel messages sent to named calls certain functions recursively during packet parsing. Recursion depth is only...
EulerOS 2.0 SP13 : dhcp (EulerOS-SA-2025-1314)
According to the versions of the dhcp package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : The code that processes control channel messages sent to named calls certain functions recursively during packet parsing. Recursion depth is only...
Huawei EulerOS: Security Advisory for dhcp (EulerOS-SA-2025-1314)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS 2.0 SP12 : dhcp (EulerOS-SA-2025-1292)
According to the versions of the dhcp package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : The code that processes control channel messages sent to named calls certain functions recursively during packet parsing. Recursion depth is only...
EulerOS 2.0 SP12 : dhcp (EulerOS-SA-2025-1291)
According to the versions of the dhcp package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : The code that processes control channel messages sent to named calls certain functions recursively during packet parsing. Recursion depth is only...
USN-7340-1 openvpn vulnerabilities
It was discovered that OpenVPN did not perform proper input validation when generating a TLS key under certain configuration, which could lead to a buffer overflow. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. This issue only affected Ubuntu...
SUSE CVE-2024-57791
In the Linux kernel, the following vulnerability has been resolved: net/smc: check return value of sockrecvmsg when draining clc data When receiving clc msg, the field length in smcclcmsghdr indicates the length of msg should be received from network and the value should not be fully trusted as i...
CVE-2024-5594
OpenVPN before 2.6.11 does not santize PUSHREPLY messages properly which an attacker controlling the server can use to inject unexpected arbitrary data ending up in client logs...
bind: stack exhaustion in control channel code may lead to DoS
A flaw was found in the Bind package. The code that processes control channel messages sent to named calls certain functions recursively during packet parsing. Recursion depth is only limited by the maximum accepted packet size. Depending on the environment, this may cause the packet-parsing code...
CVE-2024-50292
In the Linux kernel, the following vulnerability has been resolved: ASoC: stm32: spdifrx: fix dma channel release in stm32spdifrxremove In case of error when requesting ctrlchan DMA channel, ctrlchan is not null. So the release of the dma channel leads to the following issue: 4.879000...
Siemens SCALANCE M-800 Improper Output Neutralization For Logs (CVE-2024-5594)
control channel: refuse control channel messages with nonprintable characters in them. Security scope: a malicious openvpn peer can send garbage to openvpn log, or cause high CPU load This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more...
AIX (IJ4442)
The version of AIX installed on the remote host is prior to APAR IJ4442. It is, therefore, affected by a vulnerability as referenced in the IJ4442 advisory. - The code that processes control channel messages sent to named calls certain functions recursively during packet parsing. Recursion depth ...
The vulnerability of the usbtmc component in the Linux operating system allows for interference with the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the usbtmc component in the Linux operating system’s kernel is related to errors in the control channel transmission direction. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...
The vulnerability of the Control Pipe Handler component in the remote access system for the TightVNC computer desktop allows a intruder to unauthorizedly connect to the control channel.
The vulnerability of the Control Pipe Handler component in the remote access system for TightVNC involves bypassing the authentication process by using an alternative path or channel. Exploiting this vulnerability allows a malicious actor to unauthorizedly connect to the control channel through t...
Mageia: Security Advisory (MGASA-2024-0255)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
