Security Advisory 0074

Security Advisory 0074 . CSAF PDF Date: April 1st, 2022 Revision | Date | Changes ---|---|--- 1.0 | April 1st, 2022 | Initial Release The CVE-ID tracking this issue: CVE-2021-28504 CVSSv3.1 Base Score: 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N Common Weakness Enumeration: CWE-284 Improper...

CVE-2021-33098

A flaw was found in the Linux kernel. This flaw allows an attacker who can modify the MTU of a virtualized PCIe device in a guest, for example to crash the host system’s kernel if they set the MTU of the VF device to an unsupported value. Mitigation Mitigation for this issue is either not availab...

GSD-2022-1000941 xfrm: fix MTU regression

xfrm: fix MTU regression This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.305 by commit 80080bbcb25d386add6482aea9969e89834a8678, it was...

GSD-2022-1000922 xfrm: fix MTU regression

xfrm: fix MTU regression This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.270 by commit d4d5190b942ac7a0f048db718c0a9f280b4fc2ce, it was...

GSD-2022-1000901 xfrm: fix MTU regression

xfrm: fix MTU regression This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.233 by commit 20fe64c54412ca42efb9ba07f856ed8cac6e007e, it was...

GSD-2022-1000876 xfrm: fix MTU regression

xfrm: fix MTU regression This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.183 by commit ac858e4462bdc5c589b0c062420c09dab3e579cd, it was...

GSD-2022-1000834 xfrm: fix MTU regression

xfrm: fix MTU regression This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.104 by commit 4952faa77d8d1c4c146ac077e13d6245738979f4, it was...

GSD-2022-1000774 xfrm: fix MTU regression

xfrm: fix MTU regression This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.27 by commit 75cbedd333431381ef309c5b0968582c7ba4c8ee, it was...

GSD-2022-1000705 xfrm: fix MTU regression

xfrm: fix MTU regression This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.13 by commit 53b06e55c38b8f23f2552b83a3a07056a986fbda, it was...

PT-2022-29150

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.183 Description The issue is related to an MTU regression in the xfrm module. The actual impact and attack plausibility have not yet been proven. It was introduced in version v4.15 and fixed in Linux Kernel...

PT-2022-29215

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.305 Description The issue is related to an MTU regression in the xfrm module. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v4.9.305,...

PT-2022-29175

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.233 Description The issue is related to an MTU regression in the xfrm module. The actual impact and attack plausibility have not yet been proven. It was introduced in version v4.15 and fixed in Linux Kernel...

PT-2022-29048

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.27 Description The issue is related to an MTU regression in the xfrm component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v5.15.2...

PT-2022-29108

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.104 Description The issue is related to an MTU regression in the xfrm component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2022-29196

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.270 Description The issue is related to an MTU regression in the xfrm component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2022-28979

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.13 Description The issue is related to an MTU regression in the xfrm component. The actual impact and attack plausibility have not yet been proven. It was introduced in version v4.15 and fixed in Linux Kern...

mtu-saturn.ru Cross Site Scripting vulnerability OBB-2363791

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-24147

Tenda AX3 v16.03.12.10CN was discovered to contain a stack overflow in the function fromAdvSetMacMtuWan. This vulnerability allows attackers to cause a Denial of Service DoS via the wanMTU, wanSpeed, cloneType, mac, and serviceName parameters...

CVE-2022-24147

Tenda AX3 v16.03.12.10CN was discovered to contain a stack overflow in the function fromAdvSetMacMtuWan. This vulnerability allows attackers to cause a Denial of Service DoS via the wanMTU, wanSpeed, cloneType, mac, and serviceName parameters...

kernel: Improper input validation in the Intel(R) Ethernet ixgbe driver may allow an authenticated user to potentially enable DoS via local access

A flaw was found in the Linux kernel. This flaw allows an attacker who can modify the MTU of a virtualized PCIe device in a guest, for example to crash the host system’s kernel if they set the MTU of the VF device to an unsupported value...