UVI-2021-1000070 net/sched: sch_frag: fix stack OOB read while fragmenting IPv4 packets

net/sched: schfrag: fix stack OOB read while fragmenting IPv4 packets This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.3 by commit...

GSD-2021-1000109 net/sched: sch_frag: fix stack OOB read while fragmenting IPv4 packets

net/sched: schfrag: fix stack OOB read while fragmenting IPv4 packets This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.11.20 by commit...

GSD-2021-1000177 openvswitch: fix stack OOB read while fragmenting IPv4 packets

openvswitch: fix stack OOB read while fragmenting IPv4 packets This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.118 by commit...

GSD-2021-1000070 net/sched: sch_frag: fix stack OOB read while fragmenting IPv4 packets

net/sched: schfrag: fix stack OOB read while fragmenting IPv4 packets This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.3 by commit...

UVI-2021-1000109 net/sched: sch_frag: fix stack OOB read while fragmenting IPv4 packets

net/sched: schfrag: fix stack OOB read while fragmenting IPv4 packets This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.11.20 by commit...

PT-2021-28644

Name of the Vulnerable Software and Affected Versions openvswitch versions prior to v5.4.118 Linux Kernel versions v4.16 through v5.4.117 Description A potential security issue exists due to a stack out-of-bounds read while fragmenting IPv4 packets. The actual impact and attack plausibility have...

PT-2021-28576

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.11 through v5.11.19 Description The issue concerns a stack out-of-bounds read while fragmenting IPv4 packets. This problem was introduced in version v5.11 and is fixed in version v5.11.20. The actual impact and attack...

PT-2021-24543

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.11 through v5.12.3 Description: The issue concerns a stack out-of-bounds read while fragmenting IPv4 packets. This problem was introduced in version v5.11 and is fixed in version v5.12.3. Recommendations: For Linux...

PT-2021-24650

Name of the Vulnerable Software and Affected Versions openvswitch versions prior to v5.4.118 Linux Kernel versions v4.16 through v5.4.117 Description The issue is related to a stack out-of-bounds OOB read that occurs while fragmenting IPv4 packets. This problem was introduced in Linux Kernel...

PT-2021-24618

Name of the Vulnerable Software and Affected Versions openvswitch versions prior to v5.10.36 Description The issue is related to a stack out-of-bounds read while fragmenting IPv4 packets. The actual impact and attack plausibility have not yet been proven. Recommendations For versions prior to...

PT-2021-24545

Name of the Vulnerable Software and Affected Versions: openvswitch versions prior to v5.12.3 Description: The issue is related to a stack out-of-bounds read that occurs while fragmenting IPv4 packets. This problem was introduced in Linux Kernel version v4.16 and is fixed in version v5.12.3...

PT-2021-28578

Name of the Vulnerable Software and Affected Versions openvswitch versions prior to v5.11.20 Description The issue is related to a stack out-of-bounds OOB read that occurs while fragmenting IPv4 packets. This problem was introduced in Linux Kernel version v4.16 and is fixed in version v5.11.20...

PT-2021-28539

Name of the Vulnerable Software and Affected Versions openvswitch versions prior to v5.12.3 Description The issue is related to a stack out-of-bounds read while fragmenting IPv4 packets. The actual impact and attack plausibility have not yet been proven. Recommendations For versions prior to...

PT-2021-24582

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.11 through v5.11.19 Description The issue is related to a stack out-of-bounds read while fragmenting IPv4 packets in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations...

PT-2021-28537

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.11 through v5.12.3 Description The issue is related to a stack out-of-bounds read while fragmenting IPv4 packets in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations...

PT-2021-24584

Name of the Vulnerable Software and Affected Versions openvswitch versions prior to v5.11.20 Linux Kernel versions v4.16 through v5.11.19 Description The issue is related to a stack out-of-bounds OOB read that occurs while fragmenting IPv4 packets. This problem was introduced in Linux Kernel...

PT-2021-28612

Name of the Vulnerable Software and Affected Versions openvswitch versions prior to v5.10.36 Description The issue concerns a stack out-of-bounds OOB read that occurs while fragmenting IPv4 packets. This problem was introduced in Linux Kernel version v4.16 and is fixed in version v5.10.36. The...

PT-2021-3972

Name of the Vulnerable Software and Affected Versions HCC Embedded NicheStack IPv4 version 4.1 Description An issue was discovered in the dnc copy in routine for parsing DNS domain names, which does not check whether a domain name compression pointer is pointing within the bounds of the packet...

Weave Net clusters susceptible to MitM attacks via IPv6 rogue router advertisements

Impact An attacker able to run a process as root in a container is able to respond to DNS requests from the host and thereby insert themselves as a fake service. In a cluster with an IPv4 internal network, if IPv6 is not totally disabled on the host via ipv6.disable=1 on the kernel cmdline, it wi...

GHSA-59QG-GRP7-5R73 Weave Net clusters susceptible to MitM attacks via IPv6 rogue router advertisements

Impact An attacker able to run a process as root in a container is able to respond to DNS requests from the host and thereby insert themselves as a fake service. In a cluster with an IPv4 internal network, if IPv6 is not totally disabled on the host via ipv6.disable=1 on the kernel cmdline, it wi...