CVE-2023-0002

CVE-2023-0002 affects the Palo Alto Networks Cortex XDR Agent on Windows. The issue stems from a protection mechanism flaw that allows a local user to execute privileged cytool commands, enabling the local user to disable or uninstall the Cortex XDR agent. Documented impact is the potential disru...

Cortex XDR Agent: Product Disruption by Local Windows User

A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices allows a local user to execute privileged cytool commands that disable or uninstall the agent. Work around: There are no known workarounds for this issue...

Palo Alto Networks Cortex XDR 安全漏洞

Palo Alto Networks Cortex XDR is an extended detection and response platform that natively integrates network, endpoint, cloud, and third-party data from Palo Alto Networks, USA. A security vulnerability exists in Palo Alto Networks Cortex XDR that originates from a local user executing a...

PT-2023-1382 · Palo Alto Networks · Cortex Xdr Agent

Name of the Vulnerable Software and Affected Versions: Cortex XDR Agent versions affected versions not specified Description: The issue is related to a problem with a protection mechanism in the Cortex XDR agent on Windows devices, allowing a local user to execute privileged commands. This can...

Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.15-2023-013 (ALASKERNEL-5.15-2023-013)

The version of kernel installed on the remote host is prior to 5.15.90-54.138. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.15-2023-013 advisory. In the Linux kernel before 6.1.6, a NULL pointer dereference bug in the traffic control subsystem allows a...

SUSE SLES15: kernel-livepatch-5_3_18-150300_59_54-default / etc (SUSE-SU-2023:0281-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:0281-1 advisory. This update for the Linux Kernel 5.3.18-1503005954 fixes several issues. The following security issues were fixed: - CVE-2022-3424: Fixed...

SUSE SLES12: kgraft-patch-4_12_14-122_116-default / etc (SUSE-SU-2023:0263-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:0263-1 advisory. This update for the Linux Kernel 4.12.14-122116 fixes several issues. The following security issues were fixed: - CVE-2022-3424: Fixed...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2023-12109)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-12109 advisory. - USB: core: Prevent nested device-reset calls Alan Stern Orabug: 34951641 CVE-2022-4662 - Bluetooth: L2CAP: Fix accepting connection request for...

SUSE SLES15: kernel-livepatch-5_14_21-150400_22-default / etc (SUSE-SU-2023:0270-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:0270-1 advisory. This update for the Linux Kernel 5.14.21-15040022 fixes several issues. The following security issues were fixed: - CVE-2022-4379: A...

AZL-13364 CVE-2023-0615 affecting package kernel for versions less than 5.15.122.1-2

A memory leak flaw and potential divide by zero and Integer overflow was found in the Linux kernel V4L2 and vivid test code functionality. This issue occurs when a user triggers ioctls, such as VIDIOCSDVTIMINGS ioctl. This could allow a local user to crash the system if vivid test code enabled...

CVE-2023-0615

A memory leak flaw and potential divide by zero and Integer overflow was found in the Linux kernel V4L2 and vivid test code functionality. This issue occurs when a user triggers ioctls, such as VIDIOCSDVTIMINGS ioctl. This could allow a local user to crash the system if vivid test code enabled...

CVE-2023-0615

A memory leak flaw and potential divide by zero and Integer overflow was found in the Linux kernel V4L2 and vivid test code functionality. This issue occurs when a user triggers ioctls, such as VIDIOCSDVTIMINGS ioctl. This could allow a local user to crash the system if vivid test code enabled...

SUSE SLES15 Security Update : kernel (Live Patch 30 for SLE 15 SP1) (SUSE-SU-2023:0240-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2023:0240-1 advisory. This update for the Linux Kernel 4.12.14-150100197111 fixes one issue. The following security issue was fixed: - CVE-2022-3424: Fixed use-after-free in...

SUSE SLES15: kernel-livepatch-5_3_18-150200_24_112-default / etc (SUSE-SU-2023:0245-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:0245-1 advisory. This update for the Linux Kernel 5.3.18-15020024112 fixes several issues. The following security issues were fixed: - CVE-2022-3424: Fixed...

SUSE SLES12: kgraft-patch-4_12_14-122_110-default / etc (SUSE-SU-2023:0250-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:0250-1 advisory. This update for the Linux Kernel 4.12.14-122110 fixes several issues. The following security issues were fixed: - CVE-2022-3424: Fixed...

SUSE SLES12: kgraft-patch-4_12_14-95_102-default / etc (SUSE-SU-2023:0238-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:0238-1 advisory. This update for the Linux Kernel 4.12.14-95102 fixes several issues. The following security issues were fixed: - CVE-2022-3424: Fixed...

SUSE SLES15: kernel-livepatch-5_3_18-150300_59_43-default / etc (SUSE-SU-2023:0262-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:0262-1 advisory. This update for the Linux Kernel 5.3.18-1503005943 fixes several issues. The following security issues were fixed: - CVE-2022-3424: Fixed...

Use-after-free

kernel is vulnerable to Use-after-free. A user is able to trigger concurrent calls of PCM hwparams and hwfree ioctls causing race condition to happen inside ALSA PCM for other ioctls. This flaw allows a local user to crash or potentially escalate their privileges on the system...

Information Disclosure

kernel is vulnerable to Information Disclosure. A local user is able to read random memory from the kernel space due to the way a user calls DMAFROMDEVICE...

CVE-2023-20854

VMware Workstation contains an arbitrary file deletion vulnerability. A malicious actor with local user privileges on the victim's machine may exploit this vulnerability to delete arbitrary files from the file system of the machine on which Workstation is installed...