13750 matches found
Juniper Networks Layer 2 Address Learning Daemon DoS
The vulnerability of the Layer 2 Address Learning Daemon L2ALD in Juniper Networks’ Junos OS and Junos OS Evolved operating systems is related to insufficient checking of exceptional states. Exploiting this vulnerability can allow a malicious actor to trigger a service failure using specially...
Ubuntu 20.04 LTS : Linux kernel (Azure) vulnerabilities (USN-6951-2)
"The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6951-2 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws i...
CVE-2024-38146
Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability...
CVE-2024-38145
Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability...
CVE-2024-38145
Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability...
USN-6949-2 linux-lowlatency, linux-raspi vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - M68K architecture; - OpenRISC architecture; - PowerPC architecture; -...
CVE-2024-38146 Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability
...
CVE-2024-38146 Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability
...
CVE-2024-38145 Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability
...
UBUNTU-CVE-2024-37015
An issue was discovered in Ada Web Server 20.0. When configured to use SSL which is not the default setting, the SSL/TLS used to establish connections to external services is done without proper hostname validation. This is exploitable by man-in-the-middle attackers...
mozilla: Uninitialized memory used by WebGL
The Mozilla Foundation Security Advisory describes this flaw as: ANGLE failed to initialize parameters which led to reading from uninitialized memory. This could be leveraged to leak sensitive data from memory...
kernel: tls: race between async notify and socket close
A race condition vulnerability was found in the tls subsystem of the Linux kernel. The submitting thread that calls recvmsg/sendmsg may exit as soon as the async crypto handler calls complete; any code past that point risks touching already freed data. This could lead to a use-after-free issue an...
kernel: tls: handle backlogging of crypto requests
A flaw was found in the tls subsystem of the Linux kernel. When setting the CRYPTOTFMREQMAYBACKLOG flag on requests to the crypto API, cryptoaeadencrypt and cryptoaeaddecrypt functions can return -EBUSY instead of -EINPROGRESS in valid situations. This issue could lead to undefined behavior and a...
Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability
...
USN-6950-2 linux-aws-5.15, linux-gkeop-5.15, linux-ibm, linux-ibm-5.15, linux-raspi vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - Block layer subsystem; - Bluetooth drivers; - Clock framework and...
CVE-2024-38146: NULL Pointer Dereference
Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability...
CVE-2024-38145: NULL Pointer Dereference
Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability...
Ubuntu 22.04 LTS : Linux kernel (Oracle) vulnerabilities (USN-6950-3)
The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6950-3 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in...
PT-2024-5646 · Microsoft · Windows Layer-2 Bridge Network Driver +1
Name of the Vulnerable Software and Affected Versions: Windows Layer-2 Bridge Network Driver affected versions not specified Description: The issue is related to errors in pointer dereferencing, which can be exploited by a remote attacker to cause a denial of service. This can affect the system,...
PT-2024-5645 · Microsoft · Windows Layer-2 Bridge Network Driver +1
Name of the Vulnerable Software and Affected Versions: Windows Layer-2 Bridge Network Driver affected versions not specified Description: The issue is related to a denial-of-service vulnerability in the Windows Layer-2 Bridge Network Driver, which can be exploited by a remote attacker to cause a...