SUSE-SU-2022:0555-1 Security update for the Linux RT Kernel

The SUSE Linux Enterprise 12 SP5 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-0435: Fixed remote stack overflow in net/tipc module that validate domain record count on input bsc1195254. - CVE-2022-24448: Fixed an issue inside...

GSD-2022-1000239 drm/vmwgfx: Fix stale file descriptors on failed usercopy

drm/vmwgfx: Fix stale file descriptors on failed usercopy This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.18 by commit...

GSD-2022-1000180 drm/vmwgfx: Fix stale file descriptors on failed usercopy

drm/vmwgfx: Fix stale file descriptors on failed usercopy This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.95 by commit...

GSD-2022-1000146 drm/vmwgfx: Fix stale file descriptors on failed usercopy

drm/vmwgfx: Fix stale file descriptors on failed usercopy This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.175 by commit...

GSD-2022-1000119 drm/vmwgfx: Fix stale file descriptors on failed usercopy

drm/vmwgfx: Fix stale file descriptors on failed usercopy This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.227 by commit...

GSD-2022-1000095 drm/vmwgfx: Fix stale file descriptors on failed usercopy

drm/vmwgfx: Fix stale file descriptors on failed usercopy This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.264 by commit...

PT-2022-28517

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.18 Description The issue is related to stale file descriptors on failed usercopy in the drm/vmwgfx component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2022-28458

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 4.14 through 5.10.94 Description The issue is related to stale file descriptors on failed usercopy in the drm/vmwgfx component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2022-28424

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 4.14 through 5.4.174 Description The issue is related to stale file descriptors on failed usercopy in the drm/vmwgfx component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2022-28373

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 4.14 through 4.14.263 Description A potential security issue exists due to stale file descriptors on failed usercopy. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-28397

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.227 Description The issue is related to stale file descriptors on failed usercopy in the drm/vmwgfx component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

Allocation of File Descriptors or Handles Without Limits or Throttling

Overview std/mime/multipart is a Go standard library package std/mime/multipart Affected versions of this package are vulnerable to Allocation of File Descriptors or Handles Without Limits or Throttling. Go Vulnerability Report: When parsing large multipart/form-data, an attacker can cause a HTTP...

GO-2021-0172 Denial of service when parsing large forms in mime/multipart

When parsing large multipart/form-data, an attacker can cause a HTTP server to open a large number of file descriptors. This may be used as a denial-of-service vector...

SUSE-SU-2022:0372-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-0435: Fixed remote stack overflow in net/tipc module that validate domain record count on input bsc1195254. - CVE-2021-3564: Fixed double-free...

Mageia: Security Advisory (MGASA-2014-0270)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2022-7553

Name of the Vulnerable Software and Affected Versions DPDK affected versions not specified Description The issue is related to an uncontrolled resource consumption in the DPDK library and driver set, which can lead to a denial of service. A malicious vhost-user master can attach an unexpected...

CVE-2018-5743

A flaw was found in the way bind implemented tunable which limited simultaneous TCP client connections. A remote attacker could use this flaw to exhaust the pool of file descriptors available to named, potentially affecting network connections and the management of files such as log files or zone...

Information Exposure in RunC

RunC allowed additional container processes via 'runc exec' to be ptraced by the pid 1 of the container. This allows the main processes of the container, if running as root, to gain access to file-descriptors of these new processes during the initialization and can lead to container escapes or...

GHSA-GP4J-W3VJ-7299 Information Exposure in RunC

RunC allowed additional container processes via 'runc exec' to be ptraced by the pid 1 of the container. This allows the main processes of the container, if running as root, to gain access to file-descriptors of these new processes during the initialization and can lead to container escapes or...

Information disclosure

An issue was discovered in Barrier before 2.3.4. The barriers component aka the server-side implementation of Barrier does not correctly close file descriptors for established TCP connections. An unauthenticated remote attacker can thus cause file descriptor exhaustion in the server process,...