Fetchmail: Multiple Vulnerabilities

Background Fetchmail is a remote mail retrieval and forwarding utility. Description Multiple vulnerabilities have been discovered in Fetchmail. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details. Workaround There is no...

SUSE: Security Advisory (SUSE-SU-2022:3312-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2022-39063

When Open5GS UPF receives a PFCP Session Establishment Request, it stores related values for building the PFCP Session Establishment Response. Once UPF receives a request, it gets the fteidlen from incoming message, and then uses it to copy data from incoming message to struct fteid without...

SUSE SLES15: flatpak / flatpak-devel / flatpak-zsh-completion / libflatpak0 / etc (SUSE-SU-2022:2990-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:2990-1 advisory. - CVE-2021-21381: Fixed an issue where a sandboxed application could read and write arbitrary host files via special tokens in the...

CVE-2022-33991

dproxy-nexgen aka dproxy nexgen forwards and caches DNS queries with the CD aka checking disabled bit set to 1. This leads to disabling of DNSSEC protection provided by upstream resolvers...

PT-2022-21954

Name of the Vulnerable Software and Affected Versions DNRD aka Domain Name Relay Daemon version 2.20.3 Description The issue concerns the forwarding and caching of DNS queries with the CD bit set to 1, which results in the disabling of DNSSEC protection provided by upstream resolvers. This affect...

The vulnerability of the Packet Forwarding Engine (PFE) module in Juniper Networks’ Junos OS-based routers of the QFX5000, EX4600, and EX4650 series allows a hacker to trigger a service failure. This vulnerability is related to authentication deficiencies.

The vulnerability of the Packet Forwarding Engine PFE module in Juniper Networks’ Junos OS routers of the QFX5000, EX4600, and EX4650 series is related to authentication deficiencies. Exploiting this vulnerability can allow a malicious actor to trigger service interruptions...

Juniper Junos OS Vulnerability (JSA69718)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA69718 advisory. - An Improper Input Validation vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent attacker to cause a PFE...

The vulnerability of the Packet Forwarding Engine (PFE) module in Juniper Networks’ Junos OS-based routers of the QFX5000 Series and MX Series models is related to pointer arithmetic errors. This vulnerability allows attackers to trigger a service failure.

The vulnerability of the Packet Forwarding Engine PFE module in Juniper Networks’ Junos OS-based routers of the QFX5000 Series and MX Series models is related to pointer arithmetic errors. Exploiting this vulnerability allows a malicious actor to trigger service failures remotely...

TCL LinkHub Mesh Wifi confsrv set_port_fwd_rule stack-based buffer overflow vulnerability

Talos Vulnerability Report TALOS-2022-1454 TCL LinkHub Mesh Wifi confsrv setportfwdrule stack-based buffer overflow vulnerability August 1, 2022 CVE Number CVE-2022-23399 SUMMARY A stack-based buffer overflow vulnerability exists in the confsrv setportfwdrule functionality of TCL LinkHub Mesh Wif...

EulerOS 2.0 SP10 : openssh (EulerOS-SA-2022-2142)

According to the versions of the openssh packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - DISPUTED An issue was discovered in OpenSSH before 8.9. If a client is using public-key authentication with agent forwarding but without...

The vulnerability of the Packet Forwarding Engine (PFE) module in Juniper Networks’ Junos OS-based routers of the PTX series arises from copying buffers without checking the size of the input data. This allows a malicious actor to cause a service failure.

The vulnerability of the Packet Forwarding Engine PFE module in Juniper Networks’ Junos OS routers of the PTX series is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

The vulnerability of the Packet Forwarding Engine (PFE) module in Juniper Networks’ Junos OS and Junper Networks’ Junos OS Evolved operating systems, related to the allocation of unlimited memory, allows a hacker to trigger a service failure.

The vulnerability of the Packet Forwarding Engine PFE module in Juniper Networks’ Junos OS and Juniper Networks’ Junos OS Evolved operating systems is related to the allocation of unlimited memory. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

CVE-2022-23000

The Western Digital My Cloud Web App https://os5.mycloud.com/ uses a weak SSLContext when attempting to configure port forwarding rules. This was enabled to maintain compatibility with old or outdated home routers. By using an "SSL" context instead of "TLS" or specifying stronger validation,...

CVE-2022-23000

The Western Digital My Cloud Web App https://os5.mycloud.com/ uses a weak SSLContext when attempting to configure port forwarding rules. This was enabled to maintain compatibility with old or outdated home routers. By using an "SSL" context instead of "TLS" or specifying stronger validation,...

Input validation

The Western Digital My Cloud Web App https://os5.mycloud.com/ uses a weak SSLContext when attempting to configure port forwarding rules. This was enabled to maintain compatibility with old or outdated home routers. By using an "SSL" context instead of "TLS" or specifying stronger validation,...

CVE-2022-23000 Weak Default SSL use in Port Forwarding Service

The Western Digital My Cloud Web App https://os5.mycloud.com/ uses a weak SSLContext when attempting to configure port forwarding rules. This was enabled to maintain compatibility with old or outdated home routers. By using an "SSL" context instead of "TLS" or specifying stronger validation,...

CVE-2022-23000

CVE-2022-23000 affects Western Digital My Cloud Web App (os5.mycloud.com). The issue is a weak SSLContext used when configuring port forwarding rules, due to using an "SSL" context instead of TLS or stronger validation. Root cause: deprecated/insecure protocol support is retained to maintain comp...

CVE-2022-22217

An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS allows an adjacent unauthenticated attacker to cause a Denial of Service DoS. The issue is caused by malformed MLD packets looping on a multi-homed Ethernet Segme...

CVE-2022-22212

An Allocation of Resources Without Limits or Throttling vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS Evolved allows unauthenticated network based attacker to cause a Denial of Service DoS. On all Junos Evolved platforms hostbound protocols will be impacted by a...