Linux kernel net/kcm/kcmsock.c Heap Buffer Overflow DoS

The vulnerability of the kcmsendmsg function in the net/kcm/kcmsock.c module, which is part of the Linux kernel’s networking functions, is related to deficiencies in error handling. Exploiting this vulnerability could allow an attacker to cause a service failure...

Mozilla Firefox Networking Privilege Escalation

The vulnerability of the Networking module of Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

Linux Kernel xfrm_update_ae_params Heap Buffer Overflow DoS

The vulnerability of the xfrmupdateaeparams function in the net/xfrm/xfrmuser.c module, which is part of the networking functions in the Linux kernel, relates to the use of the NULL pointer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

Linux TCP AO DoS

The vulnerability of the tcpaoinfocmd function in the net/ipv4/tcpao.c module of the Linux operating system is related to security configuration errors. Exploiting this vulnerability can allow an attacker to cause service failures...

Linux kernel kcm_attach() Heap Buffer Overflow DoS

The vulnerability of the kcmattach function in the net/kcm/kcmsock.c module, which implements networking functions for the Linux operating system’s kernel, is related to improper initialization. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality,...

Chamilo security vulnerabilities

Chamilo is an open-source learning management system developed by Chamilo. Versions of Chamilo prior to 1.11.30 contained security vulnerabilities. These vulnerabilities stemmed from logical flaws in the friend request workflow of the social networking module, which could allow authenticated user...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the sockrecvdrops function in the net/socket.c module of the Linux kernel’s networking functions is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux PowerPC BPF JIT Buffer Overflow DoS

The vulnerability of the bpfjitbuildbody function in the arch/powerpc/net/bpfjitcomp64.c file, which is part of the networking support module on the PowerPC platform of the Linux operating system, involves incorrect resource locking. Exploiting this vulnerability could allow an attacker to cause ...

CVE-2025-55091 Potential out of bound read in _nx_ip_packet_receive()

In NetX Duo before 6.4.4, the networking support module for Eclipse Foundation ThreadX, there was a potential out of bound read issue in nxippacketreceive function when received an Ethernet with type set as IP but no IP data...

CVE-2025-55090

In NetX Duo before 6.4.4, the networking support module for Eclipse Foundation ThreadX, there was a potential out of bound read issue in nxipv4packetreceive function when received an Ethernet frame with less than 4 bytes of IP packet...

CVE-2022-49853

In the Linux kernel, the following vulnerability has been resolved: net: macvlan: fix memory leaks of macvlancommonnewlink kmemleak reports memory leaks in macvlancommonnewlink, as follows: ip link add link eth0 name .. type macvlan mode source macaddr add kmemleak reports: unreferenced object...

CVE-2025-22055

In the Linux kernel, the following vulnerability has been resolved: net: fix geneveopt length integer overflow struct geneveopt uses 5 bit length for each single option, which means every vary size option should be smaller than 128 bytes. However, all current related Netlink policies cannot promi...

Debian: Security Advisory (DSA-5092-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Siemens Nucleus numerical error vulnerability

Capital VSTAR is a complete solution. the Nucleus NET module integrates a range of standards-compliant networking and communications protocols, drivers and utilities to provide full-featured networking support in any embedded device. the Nucleus RTOS is a microkernel-based real-time operating...

Multiple Siemens products have security vulnerabilities

The Nucleus NET module contains a range of standards-compliant networking and communications protocols, drivers and utilities to provide full-featured networking support in any embedded device. A security vulnerability exists in Siemens Nucleus NET. An attacker could exploit the vulnerability to...

Unspecified Vulnerability in Siemens Mentor Nucleus Networking Module

Nucleus RTOS provides a highly scalable microkernel-based real-time operating system designed for scalability and reliability in systems spanning the range of aerospace, industrial and medical applications. A security vulnerability exists in the Siemens Mentor Nucleus Networking Module. An attack...

Unisys ClearPath MCP System TCP/IP networking Module Bot Attack Vulnerability

Unisys ClearPath MCP system is a set of operating systems dedicated to ClearPath servers from Unisys Corporation in the U.S. TCP/IP networking is one of the network connection modules. A security vulnerability exists in the TLS implementation of the TCP/IP networking module versions 58.1, 59.1, a...

Code injection

The TLS implementation in the TCP/IP networking module in Unisys ClearPath MCP systems with TCP-IP-SW 58.1 before 58.160, 59.1 before 059.1a.17 IC 17, and 60.0 before 60.044 might allow remote attackers to decrypt TLS ciphertext data by leveraging a Bleichenbacher RSA padding oracle, aka a ROBOT...

CVE-2017-5872: Improper Input Validation

The TCP/IP networking module in Unisys ClearPath MCP systems with TCP-IP-SW 57.1 before 57.152, 58.1 before 58.142, or 59.1 before 59.172, when running a TLS 1.2 service, allows remote attackers to cause a denial of service network connectivity disruption via a client hello with a...

Moxa MiiNePort Session Hijacking Vulnerability

Moxa MiiNePort is an embedded device networking module from Moxa designed for manufacturers to connect serial devices to a network connection. A security vulnerability exists in Moxa MiiNePort. An attacker could use this vulnerability to brute-force decode session cookies and download configurati...