SUSE-SU-2023:4483-1 Security update for frr

This update for frr fixes the following issues: - CVE-2023-46752: Fixed denial of service caused by mishandling malformed MPREACHNLRI data bsc1216627. - CVE-2023-46753: Fixed denial of service caused by crafted BGP UPDATE messages bsc1216626...

PT-2023-30673 · Kodbox · Kodbox

Name of the Vulnerable Software and Affected Versions: kodbox version 1.46.01 Description: The issue allows user enumeration, which is present on the login page. An attacker can identify valid users based on varying response messages, potentially paving the way for a brute force attack...

New Protestware Uses npm Packages to Call for Peace in Gaza and Ukraine

By Waqas Apart from displaying these messages, the packages performed no other actions. This indicates that these aren't malicious per se. This is a post from HackRead.com Read the original post: New Protestware Uses npm Packages to Call for Peace in Gaza and Ukraine...

CVE-2023-47347

Buffer Overflow vulnerability in free5gc 3.3.0 allows attackers to cause a denial of service via crafted PFCP messages whose Sequence Number is mutated to overflow bytes...

Buffer overflow

Buffer Overflow vulnerability in free5gc 3.3.0 allows attackers to cause a denial of service via crafted PFCP messages whose Sequence Number is mutated to overflow bytes...

Buffer Overflow

free5gc is vulnerable to Buffer Overflow. The vulnerability allows an attacker to submit crafted PFCP messages resulting in a buffer overflow, potentially leading to Denial of Service...

CVE-2023-47347: Buffer Copy without Checking Size of Input

Buffer Overflow vulnerability in free5gc 3.3.0 allows attackers to cause a denial of service via crafted PFCP messages whose Sequence Number is mutated to overflow bytes...

CVE-2023-47347

Buffer Overflow vulnerability in free5gc 3.3.0 allows attackers to cause a denial of service via crafted PFCP messages whose Sequence Number is mutated to overflow bytes...

CVE-2023-47347

Buffer Overflow vulnerability in free5gc 3.3.0 allows attackers to cause a denial of service via crafted PFCP messages whose Sequence Number is mutated to overflow bytes...

free5GC Security Vulnerabilities

free5GC is an open source project for 5th Generation 5G mobile core networks open sourced by free5GC. A security vulnerability exists in free5GC version 3.3.0, which stems from a vulnerability that allows an attacker to cause a denial of service via a constructed PFCP message and a malformed PFCP...

kernel: virt/coco/sev-guest: Double-buffer messages

A flaw was found in the AMD Secure Encrypted Virtualization SEV guest driver within the Linux kernel. Cryptographic routines read and write directly to shared unencrypted memory instead of using isolated buffers. A privileged attacker controlling the host system or hypervisor can observe...

AsyncSSH Data Forgery Issue Vulnerability

AsyncSSH is a Python package that provides an asynchronous client and server implementation of the SSHv2 protocol on top of the Python asyncio framework. A data forgery issue vulnerability exists in AsyncSSH v2.14.0 and earlier versions, which stems from a vulnerability that allows an attacker to...

CVE-2023-47346

Buffer Overflow vulnerability in free5gc 3.3.0, UPF 1.2.0, and SMF 1.2.0 allows attackers to cause a denial of service via crafted PFCP messages...

Buffer overflow

Buffer Overflow vulnerability in free5gc 3.3.0, UPF 1.2.0, and SMF 1.2.0 allows attackers to cause a denial of service via crafted PFCP messages...

CVE-2023-47346

Buffer Overflow vulnerability in free5gc 3.3.0, UPF 1.2.0, and SMF 1.2.0 allows attackers to cause a denial of service via crafted PFCP messages...

PT-2023-30422 · Free5Gc +2 · Free5Gc +2

Name of the Vulnerable Software and Affected Versions: free5gc version 3.3.0 UPF version 1.2.0 SMF version 1.2.0 Description: The issue allows attackers to cause a denial of service via crafted PFCP messages. This is a Buffer Overflow vulnerability. Recommendations: For free5gc version 3.3.0,...

CVE-2023-47346

Buffer Overflow vulnerability in free5gc 3.3.0, UPF 1.2.0, and SMF 1.2.0 allows attackers to cause a denial of service via crafted PFCP messages...

CVE-2023-47346: Buffer Copy without Checking Size of Input

Buffer Overflow vulnerability in free5gc 3.3.0, UPF 1.2.0, and SMF 1.2.0 allows attackers to cause a denial of service via crafted PFCP messages...

CVE-2018-18619

creationtimestamp| type| source ---|---|--- 2023-11-12 03:26:43+00:00| seen| https://t.me/arpsyndicate/112 2023-12-04 12:29:08+00:00| seen| https://t.me/arpsyndicate/1204...

CVE-2023-38406

A flaw was found in bgpd/bgpflowspec.c in the FFrouting BGP protocol code. An overflow may occur while processing zero length NLRI messages. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising...