F5 Networks BIG-IP : OpenSSH vulnerability (K32485746)

The version of F5 Networks BIG-IP installed on the remote host is prior to 14.1.0. It is, therefore, affected by a vulnerability as referenced in the K32485746 advisory. sshd in OpenSSH before 7.4 allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a...

F5 Networks BIG-IP : BIG-IP HTTP/2 vulnerability (K81557381)

When the BIG-IP system is configured in HTTP/2 full proxy mode, specifically crafted requests may cause a disruption of service provided by the Traffic Management Microkernel TMM. CVE-2019-6673 Impact An attacker may be able to use a specifically crafted request to cause a disruption of service...

Ransomware at IT Services Provider Synoptek

Synoptek, a California business that provides cloud hosting and IT management services to more than a thousand customers nationwide, suffered a ransomware attack this week that has disrupted operations for many of its clients, according to sources. The company has reportedly paid a ransom demand ...

The vulnerabilities of microprogramming software for Intel Xeon Scalable Processors, 2nd Generation Intel Xeon Scalable Processors, and Intel Xeon Processors D allow attackers to enhance their privileges, cause service failures, or gain unauthorized access to protected information.

Vulnerability of microprogramming software for Intel Xeon Scalable Processors, 2nd Generation Intel Xeon Scalable Processors, and Intel Xeon Processors: exploitation may allow attackers to enhance their privileges, cause service failures, or gain unauthorized access to protected information...

Vulnerability of the drivers/net/wireless/ath/ath9k/htc_hst.c in Linux kernel, allowing a hacker to cause a service failure

The vulnerability of the drivers/net/wireless/ath/ath9k/htchst.c kernel in the Linux operating system is related to a memory leak. Exploiting this vulnerability can allow an attacker, operating remotely, to cause a service failure memory consumption...

The vulnerability of Intel Software Guard Extensions SDK, related to insufficient input data validation, allows attackers to disclose protected information, cause service failures, or gain unauthorized access to protected data.

The vulnerability of Intel Software Guard Extensions SDK relates to insufficient validation of input data. Exploiting this vulnerability can allow attackers to enhance their privileges, cause service failures, or gain unauthorized access to protected information...

The vulnerability of microprogrammed software in the Intel Baseboard Management Controller (BMC) allows a intruder to escalate their privileges, cause system failures, or gain unauthorized access to protected information.

The vulnerability of the microprogramming software of the Intel Baseboard Management Controller BMC is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow attackers to enhance their privileges, cause service failures, or gain unauthorized access to...

The vulnerability of the fsl_lpspi_probe() function in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the fsllpspiprobe function drivers/spi/spi-fsl-lpspi.c in the Linux kernel involves an uncontrolled consumption of resources. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

F5 BIG-IP ASM Resource Management Error Vulnerability

F5 BIG-IP ASM is a Web Application Firewall WAF from F5 USA that provides secure remote access, protects email, and simplifies Web access control while enhancing network and application performance. A security vulnerability exists in the F5 BIG-IP ASM. A remote attacker could exploit the...

F5 BIG-IP Local Traffic Manager Input Validation Error Vulnerability

F5 BIG-IP is an application delivery platform that integrates network traffic management, application security management, load balancing, etc. Local Traffic Manager LTM is one of the local traffic managers. A security vulnerability exists in F5 BIG-IP LTM. An attacker could exploit this...

The vulnerability of the adis_update_scan_mode() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the adisupdatescanmode function drivers/iio/imu/adisbuffer.c in the Linux kernel involves uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...

Unspecified Vulnerability in IBM MQ and IBM MQ Appliance

IBM MQ IBM WebSphere MQ and IBM MQ Appliance are both products of IBM Corporation, U.S.A. IBM MQ is a messaging middleware product. The product focuses on providing a reliable and proven messaging backbone for Service Oriented Architecture SOA.IBM MQ Appliance is an all-in-one appliance for rapid...

Vulnerability of the print-lmp.c:lmp_print_data_link_subobjs() function in the packet capture and analysis tool tcpdump: This function allows an intruder to gain unauthorized access to information and compromise its integrity and availability.

The vulnerability in the print-lmp.c file, specifically lmpprintdatalinksubobjs, related to the tcpdump tool for capturing and analyzing network traffic, stems from reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to gain unauthorized...

Vulnerability of the spi_gpio_probe() function (drivers/spi/spi-gpio.c) in the Linux kernel, allowing a hacker to cause a service failure

The vulnerability of the spigpioprobe function drivers/spi/spi-gpio.c in the Linux kernel involves uncontrolled resource consumption. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

Vulnerability of the adis_update_scan_mode_burst() function (drivers/iio/imu/adis_buffer.c) in the Linux kernel, allowing a hacker to trigger a service failure

The vulnerability of the adisupdatescanmodeburst function drivers/iio/imu/adisbuffer.c in the Linux kernel involves uncontrolled resource consumption. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

Vulnerability of the iwl_pcie_ctxt_info_gen3_init() function (drivers/net/wireless/intel/iwlwifi/pcie/ctxt-info-gen3.c) in the Linux kernel, allowing a hacker to cause a service failure

The vulnerability of the iwlpciectxtinfogen3init function located in the drivers/net/wireless/intel/iwlwifi/pcie/ctxt-info-gen3.c file in the Linux kernel leads to uncontrolled resource consumption. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

The vulnerability of the mwifiex_process_country_ie() function (driver/net/wireless/marvell/mwifiex/sta_ioctl.c) in the Marvell WiFi driver for the Linux operating system exists due to a buffer overflow issue. This vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the mwifiexprocesscountryie function driver/net/wireless/marvell/mwifiex/staioctl.c in the Marvell WiFi driver for the Linux operating system is related to memory buffer overflow attacks. Exploiting this vulnerability allows an attacker to gain access to confidential data,...

The vulnerability in the Marvell WiFi kernel driver from the `marvell/mwifiex/tdls.c` file in the Linux operating system allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability in the Marvell WiFi kernel driver from the marvell/mwifiex/tdls.c file in the Linux operating system involves writing beyond the memory buffer boundaries. Exploiting this vulnerability allows a remote attacker to access confidential data, compromise its integrity, and cause...

The vulnerability of the Grafana data visualization web tool, related to inadequate access control, allows a perpetrator to trigger a service failure.

The vulnerability of the Grafana data visualization web tool is related to lack of access control. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...

Vulnerability of the ath6kl_wmi_pstream_timeout_event_rx and ath6kl_wmi_cac_event_rx functions in the Linux operating system’s kernel, which allows an attacker to disclose sensitive information or cause service failures.

The vulnerabilities of the functions ath6klwmipstreamtimeouteventrx and ath6klwmicaceventrx drivers/net/wireless/ath/ath6kl/wmi.c in the Linux kernel are due to reading beyond the buffer boundaries in memory. Exploitation of these vulnerabilities can allow a remote attacker to disclose sensitive...