CVE-2023-3338-DECPwn

DECPwn 使用我的DECnet漏洞和空页映射启用，练习不同的Linux内核利用技术。 场景 全部禁用 ：qemu-system-x8664 -append "nosmap nosmep nopti nokaslr" 代码执行被重定向到用户态的output函数，该函数调用commitcredspreparekernelcred0。 系统调用挂钩 将 syscalltable 中的 mkdir 系统调用处理程序地址替换为一个类似于场景1的函数。 启用SMEP和KPTI ：qemu-system-x8664 -append "nosmap nokaslr"...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

A null pointer dereference flaw was discovered in the Linux kernel’s DECnet networking protocol. This issue could allow a remote user to crash the system...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2024-003054)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2024-003054 advisory. A null pointer dereference flaw was found in the Linux kernel's DECnet networking protocol. This issue could allow a remote user to crash the system. Tenable has...

Siemens SIMATIC Devices NULL Pointer Dereference (CVE-2023-3338)

A null pointer dereference flaw was found in the Linux kernel's DECnet networking protocol. This issue could allow a remote user to crash the system. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenabl...

EUVD-2007-0143

Malware in sbrugna...

EUVD-1999-1296

Malware in sbrugna...

EUVD-2008-5394

Malware in sbrugna...

EUVD-2007-2167

Malware in sbrugna...

EUVD-2015-3252

Malware in sbrugna...

EUVD-2017-4423

Malware in sbrugna...

EUVD-2021-6819

Malicious code in bioql PyPI...

EUVD-2023-44006

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2023-3338

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A null pointer dereference flaw was found in the Linux kernel's DECnet networking protocol. This issue could allow a remote user to crash the system...

CVE-2008-5417

HP DECnet-Plus 8.3 before ECO03 for OpenVMS on the Alpha platform uses world-writable permissions for the OSIT$NAMES logical name table, which allows local users to bypass intended access restrictions and modify this table via the 1 SYS$CRELNM and 2 SYS$DELLNM system services...

Azure Linux 3.0 Security Update: hyperv-daemons / kernel (CVE-2023-3338)

The version of hyperv-daemons / kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-3338 advisory. - A null pointer dereference flaw was found in the Linux kernel's DECnet networking protocol...

CBL Mariner 2.0 Security Update: hyperv-daemons / kernel (CVE-2023-3338)

The version of hyperv-daemons / kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-3338 advisory. - A null pointer dereference flaw was found in the Linux kernel's DECnet networking protocol...

EulerOS Virtualization 2.9.0 : kernel (EulerOS-SA-2023-3099)

According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A use-after-free flaw was found in vmxnet3rqallocrxbuf in drivers/net/vmxnet3/vmxnet3drv.c in VMware's vmxnet3 ethernet NIC driver ...

USN-6445-2: Linux kernel (Intel IoTG) vulnerabilities

It was discovered that the IPv6 implementation in the Linux kernel contained a high rate of hash collisions in connection lookup table. A remote attacker could use this to cause a denial of service excessive CPU consumption. CVE-2023-1206 Daniel Trujillo, Johannes Wikner, and Kaveh Razavi...

Ubuntu 20.04 LTS : Linux kernel (Intel IoTG) vulnerabilities (USN-6445-2)

The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6445-2 advisory. It was discovered that the IPv6 implementation in the Linux kernel contained a high rate of hash collisions in connection lookup table. A remote attacker...

Ubuntu: Security Advisory (USN-6445-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...