PT-2024-11404

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The vulnerability is related to the netfilter conntrack module in the Linux kernel. Syzbot was able to trigger a warning by running two scripts in parallel, changing conntrack hash sizes...

AZL-6593 CVE-2021-38209 affecting package kernel for versions less than 5.10.78.1-1

net/netfilter/nfconntrackstandalone.c in the Linux kernel before 5.12.2 allows observation of changes in any net namespace because these changes are leaked into all other net namespaces. This is related to the NFSYSCTLCTMAX, NFSYSCTLCTEXPECTMAX, and NFSYSCTLCTBUCKETS sysctls...

PT-2021-25653

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.13.2 through v5.13.5 Description: The issue is related to a null pointer dereference in the nf tables component of the netfilter framework. The actual impact and attack plausibility have not yet been proven...

PT-2021-29648

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.13.2 through v5.13.5 Description The issue is related to a null pointer dereference in the nf tables component of the netfilter framework. The actual impact and attack plausibility have not yet been proven...

PT-2021-25528

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.12.13 Description: The issue concerns the initialization of a set before expression setup in the netfilter nf tables component. The actual impact and attack plausibility have not yet been proven...

PT-2021-29522

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.12.13 Description The issue concerns the initialization of a set before expression setup in the netfilter nf tables component. The actual impact and attack plausibility have not yet been proven. Recommendation...

PT-2021-8250 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a null pointer dereference in the netfilter component of the Linux kernel, specifically in the nf tables module. This occurs when the chain-flags & NFT CHAIN HW...

PT-2021-5993

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.12.13 Description The issue is related to the nf tables newset function in the Linux kernel, which allows local users to cause a denial of service due to a missing initialization for nft set elem expr alloc. Th...

PT-2021-4231

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.12.2 Description The issue is related to the NF SYSCTL CT MAX, NF SYSCTL CT EXPECT MAX, and NF SYSCTL CT BUCKETS sysctls in the net/netfilter/nf conntrack standalone.c component of the Linux kernel. It allows...

PT-2021-15711

Name of the Vulnerable Software and Affected Versions: Ninja Forms Contact Form WordPress plugin versions prior to 3.4.34 Description: The issue concerns an open redirect vulnerability due to the use of a user-supplied redirect parameter without adequate protection. This is related to the wp ajax...

PT-2021-15712

Name of the Vulnerable Software and Affected Versions: Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress versions prior to 3.4.34 Description: The issue concerns a lack of nonce protection in the wp ajax nf oauth disconnect function, allowing attackers to craft requests that...

PT-2020-20385

Name of the Vulnerable Software and Affected Versions Artica Pandora FMS version 7.0 Description The issue allows remote attackers to execute arbitrary OS commands via shell metacharacters in the "index.php?operation/netflow/nf live view" API endpoint, specifically in the ip dst, dst port, or src...

CVE-2017-7543

A race-condition flaw was discovered in openstack-neutron before 7.2.0-12.1, 8.x before 8.3.0-11.1, 9.x before 9.3.1-2.1, and 10.x before 10.0.2-1.1, where, following a minor overcloud update, neutron security groups were disabled. Specifically, the following were reset to 0:...

PT-2018-8404

Name of the Vulnerable Software and Affected Versions openstack-neutron versions prior to 7.2.0-12.1 openstack-neutron versions 8.x prior to 8.3.0-11.1 openstack-neutron versions 9.x prior to 9.3.1-2.1 openstack-neutron versions 10.x prior to 10.0.2-1.1 Description A race-condition flaw was...

Hiding SSH Servers Behind HTTP: sshttp

Hiding SSH Servers Behind HTTP In case your FW policy forbids SSH access to the DMZ or internal network from outside, but you still want to use ssh on machines which only have one open port, e.g. HTTP , you can use sshttpd . sshttpd can multiplex the following protocol pairs: SSH/HTTP SSH/HTTPS...

nf-f.de Open Redirect vulnerability

Vulnerable URL: http://www.nf-f.de/adserver/www/delivery/ck.php?oaparams=2bannerid=42zoneid=4cb=8f998392bcoadest=https://www.openbugbounty.org/ Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 08:30 GMT Vulnerability type:| Open Redirect...

Linux kernel denial of service vulnerability (CNVD-2016-01041)

The Linux kernel is an open source, free operating system kernel originally done by Linus Torvalds. A security vulnerability exists in the 'nfnatredirectipv4' function in the net/netfilter/nfnatredirect.c file in versions of Linux kernel prior to 4.4. A remote attacker can exploit this...

Threat Outbreak Alert RuleID11187: Email Messages Distributing Malicious Software on August 20, 2014

Medium Alert ID: 35352 First Published: 2014 August 20 15:28 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID11187 may contain the following files: Name |...

Threat Outbreak Alert RuleID10907: Email Messages Distributing Malicious Software on August 3, 2014

Medium Alert ID: 35150 First Published: 2014 August 4 12:38 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID10907 may contain the following files: Name | Si...

kernel: netfilter: nf_conntrack_dccp: incorrect skb_header_pointer API usages

net/netfilter/nfconntrackprotodccp.c in the Linux kernel through 3.13.6 uses a DCCP header pointer incorrectly, which allows remote attackers to cause a denial of service system crash or possibly execute arbitrary code via a DCCP packet that triggers a call to the 1 dccpnew, 2 dccppacket, or 3...