Agentless FIM for Detecting Network Configuration Changes

Dealing with multiple network administrators making frequent configuration changes with a monitoring solution that provides insights into device change without causing resource constraints. The performance and capabilities of a network device are entirely dependent upon its configuration settings...

DEBIAN-CVE-2024-27391

In the Linux kernel, the following vulnerability has been resolved: wifi: wilc1000: do not realloc workqueue everytime an interface is added Commit 09ed8bfc5215 "wilc1000: Rename workqueue from "WILCwq" to "NETDEV-wq"" moved workqueue creation in wilcnetdevifcinit in order to set the interface na...

CVE-2024-27063

In the Linux kernel, the following vulnerability has been resolved: leds: trigger: netdev: Fix kernel panic on interface rename trig notify Commit d5e01266e7f5 "leds: trigger: netdev: add additional specific link speed mode" in the various changes, reworked the way to set the LINKUP mode in commi...

CVE-2024-27063

In the Linux kernel, the following vulnerability has been resolved: leds: trigger: netdev: Fix kernel panic on interface rename trig notify Commit d5e01266e7f5 "leds: trigger: netdev: add additional specific link speed mode" in the various changes, reworked the way to set the LINKUP mode in commi...

DEBIAN-CVE-2024-26996

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: fncm: Fix UAF ncm object at re-bind after usb ep transport error When ncm function is working and then stop usb0 interface for link down, ethstop is called. At this piont, accidentally if usb transport error should...

Tenda AC8 fromAdvSetMacMtuWan function has a stack buffer overflow vulnerability

The Tenda AC8 is a router device that provides network connectivity and data transfer capabilities. A security vulnerability exists in Tenda AC8 version 16.03.34.09, which originates from a buffer overflow vulnerability in the function fromAdvSetMacMtuWan in file /goform/AdvSetMacMtuWan. No detai...

Tenda F1202 fromwebExcptypemanFilter function stack buffer overflow vulnerability

The Tenda F1202 is a network device that provides network connectivity and data transfer capabilities. A stack buffer overflow vulnerability exists in the Tenda F1202 fromwebExcptypemanFilter function due to incorrect boundary checking of the webExctypeman Filter function in the...

kernel: out-of-bounds write in qfq_change_class function

An out-of-bounds memory access flaw was found in the Linux kernel’s traffic control QoS subsystem in how a user triggers the qfqchangeclass function with an incorrect MTU value of the network device used as lmax. This flaw allows a local user to crash or potentially escalate their privileges on t...

The vulnerabilities of Intel PROSet/Wireless WiFi and Intel Killer Wi-Fi network devices, related to initialization errors, allow attackers to exploit these vulnerabilities to disclose protected information.

The vulnerability of Intel PROSet/Wireless WiFi and Intel Killer Wi-Fi network device drivers is related to initialization errors. Exploiting this vulnerability can allow a remote attacker to disclose sensitive information that is protected by these devices...

The vulnerability of Cisco IOS network devices of the Cisco Catalyst 6000 series allows a intruder to trigger a service failure.

The vulnerability of Cisco IOS network devices from the Cisco Catalyst 6000 series relates to an error in handling exceptional states. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

UBUNTU-CVE-2024-26808

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftchainfilter: handle NETDEVUNREGISTER for inet/ingress basechain Remove netdevice from inet/ingress basechain in case NETDEVUNREGISTER event is reported, otherwise a stale reference to netdevice remains in the hook...

CVE-2021-47139

In the Linux kernel, the following vulnerability has been resolved: net: hns3: put off calling registernetdev until client initialize complete Currently, the netdevice is registered before client initializing complete. So there is a timewindow between netdevice available and usable. In this case,...

PT-2024-11189 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.11.0-rc3+ Description: The vulnerability is related to the hns3 network driver in the Linux kernel. The issue arises when the netdevice is registered before the client initialization is complete, creating a ti...

kernel: out-of-bounds write in hw_atl_utils_fw_rpc_wait() in drivers/net/ethernet/aquantia/atlantic/hw_atl/hw_atl_utils.c

An out-of-bounds write flaw was found in the Linux kernel’s Aquantia AQtion Ethernet card Atlantic driver in the way the ethernet card provides malicious input to the driver. This flaw allows a local user to emulate the networking device and crash the system. The highest threat from this...

kernel: Slab-out-of-bound read in compare_netdev_and_ip

A vulnerability was found in comparenetdevandip in drivers/infiniband/core/cma.c in RDMA in the Linux kernel. An improper cleanup results in an out-of-boundary read. This flaw allows a local user to crash or escalate privileges on the system...

CVE-2023-44487 affecting package sriov-network-device-plugin for versions less than 3.5.1-2

CVE-2023-44487 affecting package sriov-network-device-plugin for versions less than 3.5.1-2. A patched version of the package is available...

PT-2024-2317 · Tp Link · Tp-Link Devices

Name of the Vulnerable Software and Affected Versions: TP-LINK devices affected versions not specified Description: The issue is related to a buffer overflow vulnerability in the implementation of the TDDP protocol used for debugging TP-LINK network devices. An attacker can exploit this issue by...

SUSE CVE-2021-47102

In the Linux kernel, the following vulnerability has been resolved: net: marvell: prestera: fix incorrect structure access In line: upper = info-upperdev; We access upperdev field, which is related only for particular events e.g. event == NETDEVCHANGEUPPER. So, this line cause invalid memory acce...

PT-2024-7845 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a kernel panic that occurs when renaming an interface, specifically due to a problem in the leds: trigger: netdev component. The logic change in the...

SUSE CVE-2021-47082

In the Linux kernel, the following vulnerability has been resolved: tun: avoid double free in tunfreenetdev Avoid double free in tunfreenetdev by moving the dev-tstats and tun-security allocs to a new ndoinit routine tunnetinit that will be called by registernetdevice. ndoinit is paired with the...