SUSE CVE-2017-7477

Heap-based buffer overflow in drivers/net/macsec.c in the MACsec module in the Linux kernel through 4.10.12 allows attackers to cause a denial of service or possibly have unspecified other impact by leveraging the use of a MAXSKBFRAGS+1 size in conjunction with the NETIFFFRAGLIST feature, leading...

GSD-2022-1002992 macsec: fix UAF bug for real_dev

macsec: fix UAF bug for realdev This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.15 by commit 78933cbc143b82d02330e00900d2fd08f2682f4e, it...

GSD-2022-1002648 macsec: fix UAF bug for real_dev

macsec: fix UAF bug for realdev This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.3 by commit d130282179aa6051449ac8f8df1115769998a665, it w...

PT-2022-31255

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.4 through v5.17.14 Description A use-after-free UAF bug was discovered in the macsec module. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions v5.4 through...

PT-2022-30911

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.4 through v5.18.2 Description A use-after-free UAF bug was discovered in the macsec module. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions v5.4 through...

CVE-2021-28509

This advisory documents the impact of an internally found vulnerability in Arista EOS state streaming telemetry agent TerminAttr and OpenConfig transport protocols. The impact of this vulnerability is that, in certain conditions, TerminAttr might leak MACsec sensitive data in clear text in CVP to...

Design/Logic Flaw

This advisory documents the impact of an internally found vulnerability in Arista EOS state streaming telemetry agent TerminAttr and OpenConfig transport protocols. The impact of this vulnerability is that, in certain conditions, TerminAttr might leak MACsec sensitive data in clear text in CVP to...

CVE-2021-28509

CVE-2021-28509 : Arista EOS TerminAttr and OpenConfig transport can leak MACsec data in clear text to authorized users, enabling potential decryption/modification of MACsec traffic. Affected: EOS devices with Octa and TerminAttr enabled; specific affected versions include EOS 4.23.x–4.27.x trains...

CVE-2021-28509 TerminAttr streams MACsec sensitive data in clear text to other authorized users in CVP

This advisory documents the impact of an internally found vulnerability in Arista EOS state streaming telemetry agent TerminAttr and OpenConfig transport protocols. The impact of this vulnerability is that, in certain conditions, TerminAttr might leak MACsec sensitive data in clear text in CVP to...

CVE-2021-28509: Cleartext Transmission of Sensitive Information

This advisory documents the impact of an internally found vulnerability in Arista EOS state streaming telemetry agent TerminAttr and OpenConfig transport protocols. The impact of this vulnerability is that, in certain conditions, TerminAttr might leak MACsec sensitive data in clear text in CVP to...

CVE-2021-28509

This advisory documents the impact of an internally found vulnerability in Arista EOS state streaming telemetry agent TerminAttr and OpenConfig transport protocols. The impact of this vulnerability is that, in certain conditions, TerminAttr might leak MACsec sensitive data in clear text in CVP to...

Security Advisory 0077

Security Advisory 0077 . CSAF PDF Date: May 27th, 2022 Revision | Date | Changes ---|---|--- 1.1 | May 27th 2022 | Update the CVE impact of Octa 1.0 | May 25th 2022 | Initial release CVE-2021-28508 CVSSv3.1 Base Score: 6.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H CWE: CWE-255 Credentials...

PT-2022-9901

Name of the Vulnerable Software and Affected Versions Arista EOS affected versions not specified Description The issue affects the Arista EOS state streaming telemetry agent TerminAttr and OpenConfig transport protocols. In certain conditions, TerminAttr might leak MACsec sensitive data in clear...

GSD-2022-1000673 net: macsec: Fix offload support for NETDEV_UNREGISTER event

net: macsec: Fix offload support for NETDEVUNREGISTER event This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.8 by commit...

GSD-2022-1000588 net: macsec: Fix offload support for NETDEV_UNREGISTER event

net: macsec: Fix offload support for NETDEVUNREGISTER event This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.22 by commit...

PT-2022-28862

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.22 Description The issue concerns offload support for the NETDEV UNREGISTER event in the net: macsec module. It was introduced in version v5.6 and fixed in version v5.15.22. The actual impact and attack...

PT-2022-28947

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.8 Description The issue concerns offload support for the NETDEV UNREGISTER event in the net: macsec module. It was introduced in version v5.6 and fixed in version v5.16.8. The actual impact and attack...

GSD-2022-1000229 net: macsec: Fix offload support for NETDEV_UNREGISTER event

net: macsec: Fix offload support for NETDEVUNREGISTER event This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.99 by commit...

PT-2022-28507

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.99 Description The issue concerns offload support for the NETDEV UNREGISTER event in the net: macsec module. It was introduced in version v5.6 and fixed in version v5.10.99. The actual impact and attack...

PT-2025-8324

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free bug has been identified in the Linux kernel's macsec module. This issue occurs when a new macsec device is created without obtaining a reference to the real device,...