Security update for virtualbox (important)

openSUSE Security Update: Security update for virtualbox Announcement ID: openSUSE-SU-2022:10067-1 Rating: important References: 1198676 1198677 1198678 1198679 1198680 1198703 1199803 1201720 Cross-References: CVE-2022-21465 CVE-2022-21471 CVE-2022-21487 CVE-2022-21488 CVE-2022-21491...

Security Advisory 0078

Security Advisory 0078 . CSAF PDF Date: July 19th, 2022 Revision | Date | Changes ---|---|--- 1.0 | July 19th 2022 | Initial release The CVE-ID tracking this issue: CVE-2021-28511 CVSSv3.1 Base Score: 5.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N Common Weakness Enumeration CWE: CWE-284 Improp...

PT-2022-9903 · Arista · Arista Eos

Name of the Vulnerable Software and Affected Versions: Arista EOS affected versions not specified Description: The issue affects the security ACL bypass in Arista EOS. It occurs when a NAT ACL rule filter with permit action matches the packet flow, potentially bypassing the security ACL drop rule...

PT-2022-6754 · Tenda · Tenda Fh1202 +5

Name of the Vulnerable Software and Affected Versions: Tenda F1202 version V1.0BR V1.2.0.20408 Tenda FH1202 version V1.2.0.19 EN Tenda AC10 version V1.0 Tenda AC1206 version V1.0 Tenda AC7 version V1.0 Tenda AC5 version V1.0 Tenda AC9 version V3.0 Description: The issue is related to a stack...

GSD-2022-1003361 afs: Adjust ACK interpretation to try and cope with NAT

afs: Adjust ACK interpretation to try and cope with NAT This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.46 by commit...

PT-2022-31323

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to 5.17.14 Description The issue concerns the adjustment of ACK interpretation to cope with NAT. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2022-31624

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.46 Description The issue concerns the interpretation of ACK packets in the Linux Kernel, which may be affected by NAT. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2022-31004

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.3 Description The issue concerns the interpretation of ACK packets in the Linux Kernel, potentially related to NAT. The actual impact and attack plausibility have not yet been proven. Recommendations For...

Malicious code in nat-sdk-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 27220e0118adfccf105edced03db53d2d840dd69f396c23f8fde8fca5d3072fa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4784 Malicious code in nat-sdk-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 27220e0118adfccf105edced03db53d2d840dd69f396c23f8fde8fca5d3072fa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-30152

Windows Network Address Translation NAT Denial of Service Vulnerability...

CVE-2022-30152

CVE-2022-30152 is a Windows NAT Denial of Service vulnerability. The connected documents confirm a June 14, 2022 patch release cycle addressing this issue (e.g., KB5014678, KB5014697 and related security updates for Windows Server/OS builds). Patches aim to fix NAT/RRAS-related networking instabi...

CVE-2022-30152 Windows Network Address Translation (NAT) Denial of Service Vulnerability

...

CVE-2022-30152: Undefined Security Weakness

Windows Network Address Translation NAT Denial of Service Vulnerability...

Windows Network Address Translation (NAT) Denial of Service Vulnerability

...

KLA12568 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Security Update. Malicious users can exploit these vulnerabilities to cause denial of service, obtain sensitive information, gain privileges, execute arbitrary code, bypass security restrictions. Below is a complete list of...

DEBIAN-CVE-2022-31031

PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. In versions prior to and including 2.12.1 a stack buffer overflow vulnerability affects PJSIP users that use STUN in their...

CVE-2022-30472

Tenda AC Seris Router AC18V15.03.05.196318 has a stack-based buffer overflow vulnerability in function fromAddressNat...

Tenda AC Series Router 缓冲区错误漏洞

Tenda AC Series Router is a series of wireless routers from Tenda China. A security vulnerability exists in Tenda AC Series Router AC18V15.03.05.196318, which originates from a stack-based buffer overflow vulnerability in the fromAddressNat function...

PT-2025-8298

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved, specifically in the f2fs file system. The issue occurs when the f2fs evict inode function is called, causing a dirty inode to not b...