PT-2022-3545

Name of the Vulnerable Software and Affected Versions SCALANCE W1788-1 M12 versions prior to V3.0.0 SCALANCE W1788-2 EEC M12 versions prior to V3.0.0 SCALANCE W1788-2 M12 versions prior to V3.0.0 SCALANCE W1788-2IA M12 versions prior to V3.0.0 Description A vulnerability has been identified in th...

CVE-2022-28328: Improper Input Validation

A vulnerability has been identified in SCALANCE W1788-1 M12 All versions V3.0.0, SCALANCE W1788-2 EEC M12 All versions V3.0.0, SCALANCE W1788-2 M12 All versions V3.0.0, SCALANCE W1788-2IA M12 All versions V3.0.0. Affected devices do not properly handle malformed Multicast LLC frames. This could...

HP Print LLMNR Code Execution

The vulnerability of the TCP/IP Link-Local Multicast Name Resolution LLMNR protocol implementation in HP Print and HP Digital Sending devices is related to buffer overflow in the stack. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Update now! Many HP printers affected by three critical security vulnerabilities

In two security advisories, HP has alerted users to the existence of security vulnerabilities in several of its printer models. In total, four vulnerabilities were patched, but three of those vulnerabilities are rated critical, and all of them can lead to remote code execution RCE when exploited...

PT-2022-7623 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The vulnerability is related to the ipv6 component of the Linux kernel and is caused by a memory leak. When the network device is going down or IPv6 is disabled on the interface, the...

GSD-2022-1000667 RDMA/ucma: Protect mc during concurrent multicast leaves

RDMA/ucma: Protect mc during concurrent multicast leaves This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.8 by commit...

GSD-2022-1000666 RDMA/cma: Use correct address when leaving multicast group

RDMA/cma: Use correct address when leaving multicast group This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.8 by commit...

GSD-2022-1000582 RDMA/ucma: Protect mc during concurrent multicast leaves

RDMA/ucma: Protect mc during concurrent multicast leaves This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.22 by commit...

GSD-2022-1000581 RDMA/cma: Use correct address when leaving multicast group

RDMA/cma: Use correct address when leaving multicast group This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.22 by commit...

PT-2022-28941

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.10 through v5.16.7 Description The issue concerns the RDMA/ucma component, specifically the protection of multicast groups during concurrent leaves. The actual impact and attack plausibility have not yet been proven...

PT-2022-28856

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.22 Description The issue concerns the RDMA/ucma component, specifically the protection of multicast groups during concurrent leaves. The actual impact and attack plausibility have not yet been proven...

PT-2022-28855

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.10 through v5.15.21 Description The issue is related to RDMA/cma, where the correct address is not used when leaving a multicast group. The actual impact and attack plausibility have not yet been proven. Recommendation...

PT-2022-28940

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.10 through v5.16.7 Description The issue is related to RDMA/cma, where the correct address is not used when leaving a multicast group. The actual impact and attack plausibility have not yet been proven. Recommendations...

PT-2022-28736

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.13 through v5.15.24 Description The issue concerns the use of an unsafe version of ipv6 get lladdr in the IPv6 multicast functionality. This problem was introduced in version v5.13 and is fixed in version v5.15.25. The...

GSD-2022-1000224 RDMA/cma: Use correct address when leaving multicast group

RDMA/cma: Use correct address when leaving multicast group This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.99 by commit...

PT-2022-28503

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.99 Description The issue concerns the RDMA/ucma component, specifically the protection of multicast groups during concurrent leaves. The actual impact and attack plausibility have not yet been proven...

PT-2022-28502

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.99 Description The issue is related to RDMA/cma, where the correct address is not used when leaving a multicast group. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2022-7427

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.15.19-cloudflare-2022.2.1 Description The vulnerability is related to the mld newpack function in the net/ipv6/mcast.c module of the Linux kernel's IPv6 implementation. It is caused by incorrect synchronization...

PT-2022-9214 · Sealevel Systems · Seaconnect 370W

Name of the Vulnerable Software and Affected Versions: Sealevel Systems, Inc. SeaConnect 370W version 1.3.34 Description: A stack-based buffer overflow issue exists in the LLMNR functionality, allowing remote code execution through a specially-crafted network packet. An attacker can exploit this ...

PT-2022-7674

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a use-after-free vulnerability in the ucma cleanup multicast function in the InfiniBand driver. This vulnerability can be exploited due to a race condition when t...