704 matches found
GSD-2022-1004530 igmp: Fix data-races around sysctl_igmp_llm_reports.
igmp: Fix data-races around sysctligmpllmreports. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.134 by commit...
GSD-2022-1004346 igmp: Fix data-races around sysctl_igmp_llm_reports.
igmp: Fix data-races around sysctligmpllmreports. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.58 by commit...
GSD-2022-1004123 igmp: Fix data-races around sysctl_igmp_llm_reports.
igmp: Fix data-races around sysctligmpllmreports. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.15 by commit...
GSD-2022-1004122 igmp: Fix data-races around sysctl_igmp_qrv.
igmp: Fix data-races around sysctligmpqrv. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.15 by commit...
PT-2022-32936
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.208 Description The issue concerns a data-race around sysctl igmp llm reports in the igmp module. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...
PT-2022-33169
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.325 Description The issue concerns a data-race condition around the sysctl igmp llm reports variable. This condition may potentially lead to security vulnerabilities, although the actual impact and attack...
PT-2022-32384
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.15 Description The issue concerns a data-race around the sysctl igmp qrv in the igmp module. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions pri...
PT-2022-32792
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.134 Description The issue concerns a data-race around sysctl igmp llm reports in the igmp module. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel version...
PT-2022-33112
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.290 Description The issue concerns a data-race around sysctl igmp llm reports in the igmp module. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel version...
PT-2022-32385
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.15 Description The issue concerns a data-race around sysctl igmp llm reports in the igmp module. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...
PT-2022-33039
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.254 Description The issue concerns a data-race around sysctl igmp llm reports in the igmp module. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel version...
PT-2022-32608
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.58 Description The issue concerns a data-race around sysctl igmp llm reports in the igmp module. The actual impact and attack plausibility have not yet been proven. Recommendations For versions prior to...
USN-5540-1 linux, linux-aws, linux-kvm, linux-lts-xenial vulnerabilities
Liu Jian discovered that the IGMP protocol implementation in the Linux kernel contained a race condition, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2022-20141 It was discovered that...
USN-5540-1: Linux kernel vulnerabilities
Liu Jian discovered that the IGMP protocol implementation in the Linux kernel contained a race condition, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2022-20141 It was discovered that...
CVE-2022-20141
In ipcheckmcrcu of igmp.c, there is a possible use after free due to improper locking. This could lead to local escalation of privilege when opening and closing inet sockets with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...
CVE-2022-20141
In ipcheckmcrcu of igmp.c, there is a possible use after free due to improper locking. This could lead to local escalation of privilege when opening and closing inet sockets with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...
UBUNTU-CVE-2022-20141
In ipcheckmcrcu of igmp.c, there is a possible use after free due to improper locking. This could lead to local escalation of privilege when opening and closing inet sockets with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...
CVE-2022-20141
In ipcheckmcrcu of igmp.c, there is a possible use after free due to improper locking. This could lead to local escalation of privilege when opening and closing inet sockets with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...
CVE-2022-20141
In ipcheckmcrcu of igmp.c, there is a possible use after free due to improper locking. This could lead to local escalation of privilege when opening and closing inet sockets with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...
Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability
Cisco IOS XR Distance Vector Multicast Routing Protocol DVMRP incorrectly handles Internet Group Management Protocol IGMP packets. Exploitation could allow an unauthenticated, remote attacker to immediately crash the IGMP process or make it consume available memory and eventually crash...