CVE-2022-3625

A flaw was found in the Netlink device interface implementation in the Linux kernel that improperly handled certain error conditions, leading to a use-after-free issue with some network device drivers. A local attacker with admin access to the network device could use this to cause a denial of...

Ubuntu: Security Advisory (USN-5729-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

kernel: mac80211: fix potential double free on mesh join

In the Linux kernel, the following vulnerability has been resolved: mac80211: fix potential double free on mesh join While commit 6a01afcf8468 "mac80211: mesh: Free ie data when leaving mesh" fixed a memory leak on mesh leave / teardown it introduced a potential memory corruption caused by a doub...

AZL-33643 CVE-2022-32149 affecting package sriov-network-device-plugin for versions less than 3.6.2-2

An attacker may cause a denial of service by crafting an Accept-Language header which ParseAcceptLanguage will take significant time to parse...

Buffalo Trust Management Issue Vulnerability

Buffalo firmware is a network device from Buffalo, a Japanese company. Buffalo Wi-Fi devices are vulnerable to a trust management issue that stems from the use of hard-coded credentials, which can be exploited by an attacker on a neighboring network to modify the device's configuration...

Ubuntu: Security Advisory (USN-5655-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-5644-1: Linux kernel (GCP) vulnerabilities

It was discovered that the framebuffer driver on the Linux kernel did not verify size limits when changing font or screen size, leading to an out-of- bounds write. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2021-33655 Duoming...

USN-5640-1: Linux kernel (Oracle) vulnerabilities

It was discovered that the framebuffer driver on the Linux kernel did not verify size limits when changing font or screen size, leading to an out-of- bounds write. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2021-33655 Duoming...

USN-5635-1: Linux kernel (GKE) vulnerabilities

It was discovered that the framebuffer driver on the Linux kernel did not verify size limits when changing font or screen size, leading to an out-of- bounds write. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2021-33655 Duoming...

USN-5624-1: Linux kernel vulnerabilities

It was discovered that the framebuffer driver on the Linux kernel did not verify size limits when changing font or screen size, leading to an out-of- bounds write. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2021-33655 Duoming...

CVE-2022-37959

Network Device Enrollment Service NDES Security Feature Bypass Vulnerability...

CVE-2022-37959

Network Device Enrollment Service NDES Security Feature Bypass Vulnerability...

CVE-2022-37959

Network Device Enrollment Service NDES Security Feature Bypass Vulnerability...

Security feature bypass

Network Device Enrollment Service NDES Security Feature Bypass Vulnerability...

CVE-2022-37959 Network Device Enrollment Service (NDES) Security Feature Bypass Vulnerability

...

EUVD-2022-40566

Network Device Enrollment Service NDES Security Feature Bypass Vulnerability...

CVE-2022-37959 Network Device Enrollment Service (NDES) Security Feature Bypass Vulnerability

...

CVE-2022-37959

Technical details about CVE-2022-37959 (affected software, vulnerable component, impact, exploitation, or remediations) are not provided in the supplied documents. Monitor for vendor advisories and updated analyses.

Network Device Enrollment Service (NDES) Security Feature Bypass Vulnerability

...

Microsoft Network Device Enrollment Service (NDES) 安全漏洞

Microsoft Network Device Enrollment Service NDES is a Microsoft company that allows software on routers and other network devices running without domain credentials to obtain Simple Certificate Enrollment Protocol SCEP-based certificates. A security vulnerability exists in the Microsoft Network...