Malicious code in nf-falcor-device-perf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 875e0d6c4e1161bdf00bac7e372d3ce31d5d4e416acdadd8120986d516bfb233 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4836 Malicious code in nf-falcor-device-perf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 875e0d6c4e1161bdf00bac7e372d3ce31d5d4e416acdadd8120986d516bfb233 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

net/netfilter/nf_tables_api.c in the Linux kernel through 5.18.1 allows a local user (able to create user/net namespaces) to escalate privileges to root because an incorrect NFT_STATEFUL_EXPR check leads to a use-after-free.

...

Important: kernel

Issue Overview: A flaw was found in the Linux kernel in linux/net/netfilter/nftablesapi.c of the netfilter subsystem. This flaw allows a local user to cause an out-of-bounds write issue. CVE-2022-1015 A flaw was found in the Linux kernel in net/netfilter/nftablescore.c:nftdochain, which can cause...

kernel: heap out of bounds write in nf_dup_netdev.c

An out-of-bounds OOB memory access flaw was found in nftfwddupnetdevoffload in net/netfilter/nfdupnetdev.c in the netfilter subcomponent in the Linux kernel due to a heap out-of-bounds write problem. This flaw allows a local attacker with a user account on the system to gain access to out-of-boun...

CVE-2022-32250

net/netfilter/nftablesapi.c in the Linux kernel through 5.18.1 allows a local user able to create user/net namespaces to escalate privileges to root because an incorrect NFTSTATEFULEXPR check leads to a use-after-free...

PT-2022-3222

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a use-after-free vulnerability in the Linux kernel's Netfilter subsystem, specifically in the net/netfilter/nf tables api.c component. This flaw can be exploited ...

OpenStack Neutron Race Condition vulnerability

A race-condition flaw was discovered in openstack-neutron before 7.2.0-12.1, 8.x before 8.3.0-11.1, 9.x before 9.3.1-2.1, and 10.x before 10.0.2-1.1, where, following a minor overcloud update, neutron security groups were disabled. Specifically, the following were reset to 0:...

A flaw was found in the Linux kernel in linux/net/netfilter/nf_tables_api.c of the netfilter subsystem. This flaw allows a local user to cause an out-of-bounds write issue.

...

DEBIAN-CVE-2022-1015

A flaw was found in the Linux kernel in linux/net/netfilter/nftablesapi.c of the netfilter subsystem. This flaw allows a local user to cause an out-of-bounds write issue...

CVE-2022-1015

A flaw was found in the Linux kernel in linux/net/netfilter/nftablesapi.c of the netfilter subsystem. This flaw allows a local user to cause an out-of-bounds write issue...

kernel: heap out of bounds write in nf_dup_netdev.c

An out-of-bounds OOB memory access flaw was found in nftfwddupnetdevoffload in net/netfilter/nfdupnetdev.c in the netfilter subcomponent in the Linux kernel due to a heap out-of-bounds write problem. This flaw allows a local attacker with a user account on the system to gain access to out-of-boun...

kernel: heap out of bounds write in nf_dup_netdev.c

An out-of-bounds OOB memory access flaw was found in nftfwddupnetdevoffload in net/netfilter/nfdupnetdev.c in the netfilter subcomponent in the Linux kernel due to a heap out-of-bounds write problem. This flaw allows a local attacker with a user account on the system to gain access to out-of-boun...

PT-2022-29606

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.13 through 5.17.1 Description The issue is related to the initialization of registers in the nft do chain function within the netfilter nf tables module. The actual impact and potential for attack have not been proven...

PT-2022-29911

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.18 Description The issue is related to the initialization of registers in the nft do chain function within the netfilter nf tables component. The actual impact and potential for attack have not been proven...

PT-2022-30731

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.274 Description The issue is related to the initialization of registers in the nft do chain function within the netfilter nf tables component. The actual impact and potential for attack have not been proven...

PT-2022-30215

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.32 Description The issue is related to the initialization of registers in the nft do chain function within the netfilter nf tables module. The actual impact and potential for attack have not been proven yet...

PT-2022-30655

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.237 Description The issue is related to the initialization of registers in the nft do chain function within the netfilter nf tables component. The actual impact and potential for attack have not been proven...

PT-2022-30790

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.309 Description The issue is related to the initialization of registers in the nft do chain function within the netfilter nf tables component. The actual impact and potential for attack have not been proven...

PT-2022-30560

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.188 Description The issue is related to the initialization of registers in the nft do chain function within the netfilter nf tables component. The actual impact and potential for attack have not been proven...