SUSE CVE-2022-36351

Improper input validation in some IntelR PROSet/Wireless WiFi and KillerTM WiFi software may allow an unauthenticated user to potentially enable denial of service via adjacent access...

SUSE CVE-2022-38076

Improper input validation in some IntelR PROSet/Wireless WiFi and KillerTM WiFi software may allow an authenticated user to potentially enable escalation of privilege via local access...

SUSE CVE-2022-40964

Improper access control for some IntelR PROSet/Wireless WiFi and KillerTM WiFi software may allow a privileged user to potentially enable escalation of privilege via local access...

Oracle Linux 9 : linux-firmware (ELSA-2023-6595)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-6595 advisory. 20230516-999.27.git6c9e0ed5.el9 - Update firmware for qat4xxx devices Orabug: 35811008 Tenable has extracted the preceding description block directly...

hw: intel: Improper input validation in some Intel(R) PROSet/Wireless WiFi

An improper input validation flaw was found in some IntelR PROSet/Wireless WiFi and KillerTM WiFi software that may allow an authenticated user to enable escalation of privilege via local access...

hw: intel: Improper access control for some Intel(R) PROSet/Wireless WiFi

An improper access control flaw was found in some IntelR PROSet/Wireless WiFi and KillerTM WiFi software that may allow a privileged user to enable escalation of privilege via local access...

hw: intel: Improper input validation in some Intel(R) PROSet/Wireless WiFi

An improper input validation flaw was found in some IntelR PROSet/Wireless WiFi and KillerTM WiFi software that may allow an unauthenticated user to enable a denial of service via adjacent access...

hw: intel: Improper access control for some Intel(R) PROSet/Wireless WiFi

Improper access control for some IntelR PROSet/Wireless WiFi and KillerTM WiFi software may allow a privileged user to enable escalation of privilege via local access...

Fedora 39 : linux-firmware (2023-dd3ebcea25)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-dd3ebcea25 advisory. Update to upstream 20230919 release: amd-ucode: Add note on fam19h warnings i915: update MTL HuC to version 8.5.4 amdgpu: update DMCUB to 0.0.183.0...

RHEL 9 : linux-firmware (RHSA-2023:6595)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:6595 advisory. The linux-firmware packages contain all of the firmware files that are required by various devices to operate. Security Fixes: hw: intel:...

BIT-2023-46118

RabbitMQ is a multi-protocol messaging and streaming broker. HTTP API did not enforce an HTTP request body limit, making it vulnerable for denial of service DoS attacks with very large messages. An authenticated user with sufficient credentials can publish a very large messages over the HTTP API...

Design/Logic Flaw

RabbitMQ is a multi-protocol messaging and streaming broker. HTTP API did not enforce an HTTP request body limit, making it vulnerable for denial of service DoS attacks with very large messages. An authenticated user with sufficient credentials can publish a very large messages over the HTTP API...

Debian dla-3596 : firmware-adi - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3596 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3596-1 [email protected]...

[SECURITY] [DLA 3596-1] firmware-nonfree security update

Debian LTS Advisory DLA-3596-1 [email protected] https://www.debian.org/lts/security/ Tobias Frost September 30, 2023 https://wiki.debian.org/LTS Package : firmware-nonfree Version : 20190114+really20220913-0+deb10u2 CVE ID : CVE-2022-27635 CVE-2022-36351 CVE-2022-38076 CVE-2022-40964...

Fedora 37 : linux-firmware (2023-defb0a89ff)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-defb0a89ff advisory. Update to upstream 20230919 release: amd-ucode: Add note on fam19h warnings i915: update MTL HuC to version 8.5.4 amdgpu: update DMCUB to 0.0.183.0...

Fedora 38 : linux-firmware (2023-4056a5c165)

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-4056a5c165 advisory. Update to upstream 20230919 release: amd-ucode: Add note on fam19h warnings i915: update MTL HuC to version 8.5.4 amdgpu: update DMCUB to 0.0.183.0...

CVE-2022-38076

An improper input validation flaw was found in some IntelR PROSet/Wireless WiFi and KillerTM WiFi software that may allow an authenticated user to enable escalation of privilege via local access. Mitigation Mitigation for this issue is either not available or the currently available options don't...

CVE-2022-36351

An improper input validation flaw was found in some IntelR PROSet/Wireless WiFi and KillerTM WiFi software that may allow an unauthenticated user to enable a denial of service via adjacent access. Mitigation Mitigation for this issue is either not available or the currently available options don'...

CVE-2022-27635

Improper access control for some IntelR PROSet/Wireless WiFi and KillerTM WiFi software may allow a privileged user to enable escalation of privilege via local access. Mitigation UEFI firmware to version 3.2.20.23023 includes versions 2.2.20.23023 and 1.2.20.23023or later...

Oracle Linux 5 : kernel (ELSA-2011-0017)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-0017 advisory. - scsi bfa: fix crash reading driver sysfs statistics Rob Evers 659880 CVE-2010-4343 - net cxgb3: fix read of uninitialized stack memory Jay Fenlason...