Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Net: Reenabling NETIFFIPV6CSUM offloading for BIG TCP packets The problematic commit disabled the hardware offloading of IPv6 packets with extension headers on devices that advertise NETIFFIPV6CSUM. This was based on the definiti...

Exploit for Integer Underflow (Wrap or Wraparound) in Microsoft

This is a rather flaky poc for CVE-2024-38063https://msrc.m...

CVE-2023-43511

CVE-2023-43511 describes a transient DoS in WLAN firmware when parsing an IPv6 extension header for a packet whose next header is IPPROTO_NONE. The issue is reported across multiple sources (Qualcomm advisory context, Red Hat, NVD) and is associated with Qualcomm/WLAN firmware components; the vul...

CVE-2023-43511 Loop with Unreachable Exit Condition (Infinite Loop) in WLAN Firmware

Transient DOS while parsing IPv6 extension header when WLAN firmware receives an IPv6 packet that contains IPPROTONONE as the next header...

CLSA-2023-1698247974 Fix of 6 CVEs

CVE-2023-42752 // CVE-url: https://ubuntu.com/security/CVE-2023-42752 - igmp: limit igmpv3newpack packet size to IPMAXMTU CVE-2023-4623 // CVE-url: https://ubuntu.com/security/CVE-2023-4623 - net/sched: schhfsc: Ensure inner classes have fsc curve CVE-2023-34319 // CVE-url:...

GHSA-3FQM-FRHG-7C85 Graylog user session is still usable after logout

Summary In a multi-node Graylog cluster, after a user has explicitly logged out, a user session may still be used for API requests until it has reached its original expiry time. Details Each node maintains an in-memory cache of user sessions. Upon a cache-miss, the session is loaded from the...

SUSE CVE-2005-4886

The selinuxparseskbipv6 function in security/selinux/hooks.c in the Linux kernel before 2.6.12-rc4 allows remote attackers to cause a denial of service OOPS via vectors associated with an incorrect call to the ipv6skipexthdr function...

SUSE CVE-2006-4572

ip6tables in netfilter in the Linux kernel before 2.6.16.31 allows remote attackers to 1 bypass a rule that disallows a protocol, via a packet with the protocol header not located immediately after the fragment header, aka "ip6tables protocol bypass bug;" and 2 bypass a rule that looks for a...

SUSE CVE-2012-3236

fits-io.c in GIMP before 2.8.1 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a malformed XTENSION header of a .fit file, as demonstrated using a long string...

GSD-2023-1002298 ipv6: raw: Deduct extension header length in rawv6_push_pending_frames

ipv6: raw: Deduct extension header length in rawv6pushpendingframes This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.303 by commit...

GSD-2023-1002275 ipv6: raw: Deduct extension header length in rawv6_push_pending_frames

ipv6: raw: Deduct extension header length in rawv6pushpendingframes This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.270 by commit...

GSD-2023-1002242 ipv6: raw: Deduct extension header length in rawv6_push_pending_frames

ipv6: raw: Deduct extension header length in rawv6pushpendingframes This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.229 by commit...

GSD-2023-1002191 ipv6: raw: Deduct extension header length in rawv6_push_pending_frames

ipv6: raw: Deduct extension header length in rawv6pushpendingframes This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.164 by commit...

GSD-2023-1002127 ipv6: raw: Deduct extension header length in rawv6_push_pending_frames

ipv6: raw: Deduct extension header length in rawv6pushpendingframes This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.89 by commit...

GSD-2023-1002012 ipv6: raw: Deduct extension header length in rawv6_push_pending_frames

ipv6: raw: Deduct extension header length in rawv6pushpendingframes This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.7 by commit...

PT-2023-35088 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v2.6.12 through v6.1.6 Description: The issue is related to the handling of extension header length in rawv6 push pending frames. The actual impact and attack plausibility have not yet been proven. Recommendations: For...

GSD-2023-1001795 ipv6: raw: Deduct extension header length in rawv6_push_pending_frames

ipv6: raw: Deduct extension header length in rawv6pushpendingframes This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.164 by commit...

GSD-2023-1001764 ipv6: raw: Deduct extension header length in rawv6_push_pending_frames

ipv6: raw: Deduct extension header length in rawv6pushpendingframes This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.89 by commit...

GSD-2023-1001724 ipv6: raw: Deduct extension header length in rawv6_push_pending_frames

ipv6: raw: Deduct extension header length in rawv6pushpendingframes This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.7 by commit...

PT-2023-34800 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v2.6.12 through v6.1.6 Description: The issue is related to the handling of extension header length in rawv6 push pending frames. The actual impact and attack plausibility have not yet been proven. Recommendations: For...