GSD-2022-1007903 bridge: switchdev: Fix memory leaks when changing VLAN protocol

bridge: switchdev: Fix memory leaks when changing VLAN protocol This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.80 by commit...

GSD-2022-1007861 net: dsa: Fix possible memory leaks in dsa_loop_init()

net: dsa: Fix possible memory leaks in dsaloopinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.8 by commit...

GSD-2022-1007779 net: macvlan: fix memory leaks of macvlan_common_newlink

net: macvlan: fix memory leaks of macvlancommonnewlink This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.9 by commit...

GSD-2022-1007761 bpf: Fix memory leaks in __check_func_call

bpf: Fix memory leaks in checkfunccall This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.10 by commit 83946d772e756734a900ef99dbe0aeda506adf3...

GSD-2022-1007734 bridge: switchdev: Fix memory leaks when changing VLAN protocol

bridge: switchdev: Fix memory leaks when changing VLAN protocol This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.10 by commit...

PT-2022-36524 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.265 Description: The issue is related to possible memory leaks in the dsa loop init function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

PT-2022-35989 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.10 Description: The issue is related to memory leaks when changing VLAN protocol in the bridge switchdev. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kerne...

Important: kernel

Issue Overview: A vulnerability classified as problematic has been found in Linux Kernel. This affects the function fibnhmatch of the file net/ipv4/fibsemantics.c of the component IPv4 Handler. The manipulation leads to out-of-bounds read. It is possible to initiate the attack remotely. It is...

PT-2022-36116 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.8 Description: The issue is related to possible memory leaks in the dsa loop init function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions pri...

PT-2022-36432 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.225 Description: The issue is related to memory leaks in the napi get frags function. It was introduced in version v4.15 and fixed in version v5.4.225. The actual impact and attack plausibility have not yet...

OPENSUSE-SU-2022:10235-1 Security update for matio

This update for matio fixes the following issues: Update to version 1.5.23: Fixed testsuite regression from version 1.5.22. Changes from version 1.5.22: Added support for reading large MAT file. Updated cmake-conan to version 0.17.0. Fixed CMake build with Conan MATIOUSECONAN:BOOL=ON. Fixed data...

Updated imagemagick packages fix security vulnerability

A vulnerability was found in ImageMagick-7.0.11-5, where executing a crafted file with the convert command, ASAN detects memory leaks. CVE-2021-3574 A flaw was found in ImageMagick. The vulnerability occurs due to improper use of open functions and leads to a denial of service. This flaw allows a...

Denial Of Service (DoS)

Linux Kernel is vulnerable to denial of service. The vulnerability exists due to the memory leaks in the ipv6renewoptions function of the IPv6 Handler component, allowing an attacker to cause an application crash...

Ubuntu: Security Advisory (USN-5756-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security Bulletin: ISC BIND on IBM i is vulnerable to denial of service due to memory leaks and a flaw in resolver code (CVE-2022-2795, CVE-2022-38177, CVE-2022-38178)

Summary ISC BIND on IBM i is vulnerable to a denial of service attack due to memory leaks in the DNSSEC verification code and a flaw in resolver code to degrade performance as described in the vulnerability details section. IBM i has addressed the vulnerabilities in ISC BIND with a fix as describ...

OESA-2022-2117 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: There is an infoleak vulnerability in the Linux kernel's net/bluetooth/l2capcore.c's l2capparseconfreq function which can be used to leak kernel pointers remotely. We recommend upgrading past commit...

Ubuntu 16.04 ESM / 18.04 LTS : ImageMagick vulnerabilities (USN-5736-1)

The remote Ubuntu 16.04 ESM / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5736-1 advisory. It was discovered that ImageMagick incorrectly handled certain values when processing PDF files. If a user or automated system using...

Security fix for the ALT Linux 9 package krb5 version 1.17.2-alt4

1.17.2-alt4 built Nov. 24, 2022 Ivan A. Melnikov in task 310094 Nov. 16, 2022 Ivan A. Melnikov - Backports from 1.19.4: + fix integer overflows in PAC parsing Fixes: CVE-2022-42898; + fix some memory leaks...

DEBIAN-CVE-2022-42896

There are use-after-free vulnerabilities in the Linux kernel's net/bluetooth/l2capcore.c's l2capconnect and l2capleconnectreq functions which may allow code execution and leaking kernel memory respectively remotely via Bluetooth. A remote attacker could execute code leaking kernel memory via...

UBUNTU-CVE-2022-42896

There are use-after-free vulnerabilities in the Linux kernel's net/bluetooth/l2capcore.c's l2capconnect and l2capleconnectreq functions which may allow code execution and leaking kernel memory respectively remotely via Bluetooth. A remote attacker could execute code leaking kernel memory via...