CVE-2020-26560

Bluetooth Mesh Provisioning in the Bluetooth Mesh profile 1.0 and 1.0.1 may permit a nearby device, reflecting the authentication evidence from a Provisioner, to complete authentication without possessing the AuthValue, and potentially acquire a NetKey and AppKey...

Bluetooth Mesh 授权问题漏洞

Bluetooth Mesh is an application. A Bluetooth profile. An authorization issue vulnerability exists in Bluetooth Mesh profile version 1.0 and Mesh Provisioning version 1.0.1, which allows nearby devices to successfully brute-force AuthValue before the provisioning process times out to complete...

Bluetooth Mesh 安全漏洞

Bluetooth Mesh is an application. A configuration file for Bluetooth. A security vulnerability exists in Bluetooth Mesh that allows devices without AuthValue to complete configuration without forcing AuthValue...

PT-2021-11248 · Unknown · Bluetooth Mesh

Name of the Vulnerable Software and Affected Versions: Bluetooth Mesh profile versions 1.0 through 1.0.1 Description: The issue allows a nearby device participating in the provisioning protocol to identify the AuthValue used, given the Provisioner's public key, and the confirmation number and non...

Devices supporting Bluetooth Core and Mesh Specifications are vulnerable to impersonation attacks and AuthValue disclosure

Overview Devices supporting the Bluetooth Core and Mesh Specifications are vulnerable to impersonation attacks and AuthValue disclosure that could allow an attacker to impersonate a legitimate device during pairing. Description The Bluetooth Core Specification and Mesh Profile Specification are t...

Bluetooth Mesh 授权问题漏洞

Bluetooth Mesh is an application. A Bluetooth profile. A security vulnerability in Mesh Provisioning in Bluetooth Mesh profile versions 1.0 and 1.0.1 allows nearby devices to determine the AuthValue via a brute-force attack unless the AuthValue is sufficiently randomized and changed each time...

PT-2021-11247 · Unknown · Bluetooth Mesh

Name of the Vulnerable Software and Affected Versions: Bluetooth Mesh profile versions 1.0 and 1.0.1 Description: The issue allows a nearby device to potentially determine the AuthValue used in the provisioning protocol via a brute-force attack, unless the AuthValue is sufficiently random and...

Bluetooth Mesh 安全漏洞

Bluetooth Mesh is an application. A Bluetooth profile. A security vulnerability exists in Bluetooth Mesh that allows a nearby device to complete authentication without having an AuthValue and potentially obtain a NetKey and AppKey...

RHEL 8 : servicemesh (RHSA-2021:2085)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:2085 advisory. Red Hat OpenShift Service Mesh is Red Hat's distribution of the Istio service mesh project, tailored for installation into an on-premise OpenShift...

Important: Red Hat Security Advisory: servicemesh security update

An update for servicemesh is now available for OpenShift Service Mesh 1.1. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...

Important: Red Hat Security Advisory: Red Hat OpenShift Service Mesh 2.0.5 security update

An update for servicemesh is now available for OpenShift Service Mesh 2.0. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...

RHEL 8 : Red Hat OpenShift Service Mesh 2.0.5 (RHSA-2021:2061)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:2061 advisory. Red Hat OpenShift Service Mesh is Red Hat's distribution of the Istio service mesh project, tailored for installation into an on-premise OpenShift...

RHEL 8 : Red Hat OpenShift Service Mesh 1.1.14 (RHSA-2021:1540)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:1540 advisory. Red Hat OpenShift Service Mesh is Red Hat's distribution of the Istio service mesh project, tailored for installation into an on-premise...

RHEL 8 : Red Hat OpenShift Service Mesh 2.0.4 (RHSA-2021:1538)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:1538 advisory. Red Hat OpenShift Service Mesh is Red Hat's distribution of the Istio service mesh project, tailored for installation into an on-premise...

Important: Red Hat Security Advisory: Red Hat OpenShift Service Mesh 2.0.4 security update

An update for openshift-istio-kiali-rhel8-operator-container is now available for OpenShift Service Mesh 2.0. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Important: Red Hat Security Advisory: Red Hat OpenShift Service Mesh 2.0.4 security update

An update for servicemesh and servicemesh-proxy is now available for OpenShift Service Mesh 2.0. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

Important: Red Hat Security Advisory: Red Hat OpenShift Service Mesh 1.1.14 security update

An update for servicemesh and servicemesh-proxy is now available for OpenShift Service Mesh 1.1. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

@graphql-mesh/container (>=0.0.4-alpha-4e6432fb.0, <=0.0.62), @graphql-mesh/openapi (>=0.10.2, <=0.16.9) +13 more potentially affected by CVE-2020-7766 via json-ptr (2.0.0)

json-ptr NPM version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on json-ptr and may be impacted: - @graphql-mesh/container =0.0.4-alpha-4e6432fb.0, =0.10.2, =0.5.2, =0.0.2, =0.6.0, =0.0.1, =0.0.2, =0.0.1, =0.0.2, =0.0.2, =0.0.2, =1.0.264,...

Unbreakable Enterprise kernel security update

5.4.17-2102.201.3uek - locking/qrwlock: Fix ordering in queuedwritelockslowpath Ali Saidi Orabug: 32805544 5.4.17-2102.201.2uek - md/bitmap: wait for external bitmap writes to complete during tear down Sudhakar Panneerselvam Orabug: 32764237 - ocfs2: fix deadlock between setattr and dioendiowrite...

Important: Red Hat Security Advisory: Red Hat OpenShift Service Mesh 1.1.13 security update

An update for servicemesh and servicemesh-proxy is now available for OpenShift Service Mesh 1.1. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...