AIX : Multiple Vulnerabilities (IJ44594)

The version of AIX installed on the remote host is prior to APAR IJ44594. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ44594 advisory. - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the AIX NFS kernel...

[SECURITY] [DLA 3239-2] git regression update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3239-2 [email protected] https://www.debian.org/lts/security/ Sylvain Beucler December 14, 2022 https://wiki.debian.org/LTS -...

PT-2022-24787 · Ibm · Vios +1

Name of the Vulnerable Software and Affected Versions: IBM AIX versions 7.1 through 7.3 VIOS version 3.1 Description: The issue allows a non-privileged local user to exploit a vulnerability in the CAA or the AIX pfcdd kernel extension to cause a denial of service. Recommendations: For IBM AIX...

PT-2022-24786 · Ibm · Aix +2

Name of the Vulnerable Software and Affected Versions: IBM AIX versions 7.1 through 7.3 VIOS version 3.1 Description: The issue allows a non-privileged local user to exploit a vulnerability in the AIX kernel to cause a denial of service. This can be achieved by exploiting the vulnerability in the...

kernel: openvswitch: integer underflow leads to out-of-bounds write in reserve_sfa_size()

An integer coercion error was found in the openvswitch kernel module. Given a sufficiently large number of actions, while copying and reserving memory for a new action of a new flow, the reservesfasize function does not return -EMSGSIZE as expected, potentially leading to an out-of-bounds write...

kernel: openvswitch: integer underflow leads to out-of-bounds write in reserve_sfa_size()

An integer coercion error was found in the openvswitch kernel module. Given a sufficiently large number of actions, while copying and reserving memory for a new action of a new flow, the reservesfasize function does not return -EMSGSIZE as expected, potentially leading to an out-of-bounds write...

kernel: openvswitch: integer underflow leads to out-of-bounds write in reserve_sfa_size()

An integer coercion error was found in the openvswitch kernel module. Given a sufficiently large number of actions, while copying and reserving memory for a new action of a new flow, the reservesfasize function does not return -EMSGSIZE as expected, potentially leading to an out-of-bounds write...

Microsoft Windows Sysinternals Sysmon < 14.13 Elevation of Privilege (November 2022)

An elevation of privilege vulnerability exists in Microsoft Windows Sysinternals Sysmon prior to 14.13. A locally authenticated attacker who successfully exploited the vulnerability could manipulate information on the Sysinternals services to achieve elevation from local user to SYSTEM admin. Not...

CVE-2022-38661

HCL Workload Automation could allow a local user to overwrite key system files which would cause the system to crash...

CVE-2022-38661

HCL Workload Automation could allow a local user to overwrite key system files which would cause the system to crash...

CVE-2022-4378

A stack overflow flaw was found in the Linux kernel's SYSCTL subsystem in how a user changes certain kernel parameters and variables. This flaw allows a local user to crash or potentially escalate their privileges on the system. Mitigation A possible workaround is preventing regular users from...

HCL Technologies HCL Commerce 安全漏洞

HCL Technologies HCL Commerce is a software platform framework for e-commerce from HCL Technologies, USA. The software includes marketing, sales, customer and order processing functionality in a customizable and integrated package. It is a unified platform that provides the ability to conduct...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2022-10071)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-10071 advisory. - proc: procskipspaces shouldn't think it is working on C strings Linus Torvalds Orabug: 34883048 CVE-2022-4378 Tenable has extracted the preceding...

Oracle Linux 7 : Unbreakable Enterprise kernel (ELSA-2022-10072)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-10072 advisory. - proc: procskipspaces shouldn't think it is working on C strings Linus Torvalds Orabug: 34883027 CVE-2022-4378 - proc: avoid integer type confusion i...

CVE-2022-2752

A vulnerability in the web server of Secomea GateManager allows a local user to impersonate as the previous user under some failed login conditions. This issue affects: Secomea GateManager versions from 9.4 through 9.7...

Design/Logic Flaw

A vulnerability in the web server of Secomea GateManager allows a local user to impersonate as the previous user under some failed login conditions. This issue affects: Secomea GateManager versions from 9.4 through 9.7...

CVE-2022-2752 Potential vulnerabilities in GM login process

A vulnerability in the web server of Secomea GateManager allows a local user to impersonate as the previous user under some failed login conditions. This issue affects: Secomea GateManager versions from 9.4 through 9.7...

CVE-2022-2752 Potential vulnerabilities in GM login process

A vulnerability in the web server of Secomea GateManager allows a local user to impersonate as the previous user under some failed login conditions. This issue affects: Secomea GateManager versions from 9.4 through 9.7...

CVE-2022-2752

CVE-2022-2752 affects Secomea GateManager: vulnerable in the web server component for versions 9.4–9.7, enabling a local user to impersonate the previous user under certain failed login conditions. The connected sources confirm affected product and version range, describe the root cause as a logi...

PT-2022-18466 · Secomea · Secomea Gatemanager

Name of the Vulnerable Software and Affected Versions: Secomea GateManager versions 9.4 through 9.7 Description: A vulnerability in the web server of Secomea GateManager allows a local user to impersonate as the previous user under some failed login conditions. Recommendations: For Secomea...