CVE-2023-28219: Sensitive Data Storage in Improperly Locked Memory

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability...

CVE-2023-28220: Sensitive Data Storage in Improperly Locked Memory

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability...

Updated kernel-linus packages fix security vulnerabilities

This kernel-linus update is based on upstream 5.15.98 and fixes atleast the following security issues: A regression exists in the Linux Kernel within KVM: nVMX that allowed for speculative execution attacks. L2 can carry out Spectre v2 attacks on L1 due to L1 thinking it doesn't need retpolines o...

Debian: Security Advisory (DSA-1230-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2023-20089: Memory Allocation with Excessive Size Value

A vulnerability in the Link Layer Discovery Protocol LLDP feature for Cisco Nexus 9000 Series Fabric Switches in Application Centric Infrastructure ACI Mode could allow an unauthenticated, adjacent attacker to cause a memory leak, which could result in an unexpected reload of the device. This...

K45012151: Layer 2 security bypass issue CVE-2021-27861, CVE-2021-27862, CVE-2021-27853, CVE-2021-27854

Security Advisory Description CVE-2021-27861 Layer 2 network filtering capabilities such as IPv6 RA guard can be bypassed using LLC/SNAP headers with invalid length and optionally VLAN0 headers CVE-2021-27862 Layer 2 network filtering capabilities such as IPv6 RA guard can be bypassed using...

SA45654 - Multiple OpenSSL Vulnerabilities in Layer 2 network filtering capabilities

Ivanti 4th of March 2024 - This isn't an active SA and any new edits are part of an article maintenance project. Multiple vulnerabilities were discovered with respect to Layer 2 network filtering capabilities such as IPv6 RA guard or ARP inspection can be bypassed using combinations of VLAN 0...

Microsoft Windows Multiple Vulnerabilities (KB5022286)

This host is missing an important security update according to Microsoft KB5022286 SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Microsoft Windows Multiple Vulnerabilities (KB5022338)

This host is missing an important security update according to Microsoft KB5022338 SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Remote code execution

Windows Layer 2 Tunneling Protocol L2TP Remote Code Execution Vulnerability...

CVE-2023-21543: Uncontrolled Resource Consumption

Windows Layer 2 Tunneling Protocol L2TP Remote Code Execution Vulnerability...

CVE-2023-21555 Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability

...

CVE-2023-21679: Use After Free

Windows Layer 2 Tunneling Protocol L2TP Remote Code Execution Vulnerability...

CVE-2023-21556: Integer Underflow (Wrap or Wraparound)

Windows Layer 2 Tunneling Protocol L2TP Remote Code Execution Vulnerability...

CVE-2023-21546

CVE-2023-21546 is a Windows Layer 2 Tunneling Protocol (L2TP) remote code execution vulnerability. The entry provides a network-exposed, high-severity issue (CVSSv3.1: 8.1, AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H). The initial description and connected documents identify the affected vector as networ...

CVE-2023-21757: NULL Pointer Dereference

Windows Layer 2 Tunneling Protocol L2TP Denial of Service Vulnerability...

Microsoft Windows 竞争条件问题漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A competitive conditions issue vulnerability exists in the Microsoft Windows Layer 2 Tunneling Protocol. An attacker exploiting this vulnerability could remotely execute code...

Fedora 35 : kernel (2022-b36cd53dca)

The remote Fedora 35 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-b36cd53dca advisory. The 6.0.11 stable kernel update contains a number of important fixes across the tree. Tenable has extracted the preceding description block directly...

CVE-2022-46351: Uncontrolled Resource Consumption

A vulnerability has been identified in SCALANCE X204RNA HSR All versions V3.2.7, SCALANCE X204RNA PRP All versions V3.2.7, SCALANCE X204RNA EEC HSR All versions V3.2.7, SCALANCE X204RNA EEC PRP All versions V3.2.7, SCALANCE X204RNA EEC PRP/HSR All versions V3.2.7. Specially crafted PROFINET DCP...

CVE-2022-4129

A flaw was found in the Linux kernel's Layer 2 Tunneling Protocol L2TP. A missing lock when clearing skuserdata can lead to a race condition and NULL pointer dereference. A local user could use this flaw to potentially crash the system causing a denial of service...