AZL-13062 CVE-2022-41860 affecting package freeradius for versions less than 3.2.3-1

In freeradius, when an EAP-SIM supplicant sends an unknown SIM option, the server will try to look that option up in the internal dictionaries. This lookup will fail, but the SIM code will not check for that failure. Instead, it will dereference a NULL pointer, and cause the server to crash...

DEBIAN-CVE-2022-41860

In freeradius, when an EAP-SIM supplicant sends an unknown SIM option, the server will try to look that option up in the internal dictionaries. This lookup will fail, but the SIM code will not check for that failure. Instead, it will dereference a NULL pointer, and cause the server to crash...

Null pointer dereference

In freeradius, when an EAP-SIM supplicant sends an unknown SIM option, the server will try to look that option up in the internal dictionaries. This lookup will fail, but the SIM code will not check for that failure. Instead, it will dereference a NULL pointer, and cause the server to crash...

PT-2023-34670

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.33 through 4.9.336 Description The issue is related to a use-after-free error in the gru set context option, gru fault, and gru handle user call os functions. This error was introduced in version v2.6.33 and fixed in...

PT-2023-34470

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.33 through 5.10.162 Description The issue is related to a use-after-free error in the gru set context option, gru fault, and gru handle user call os functions. This error was introduced in version v2.6.33 and fixed in...

PT-2023-33939

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.88 Description The issue is related to the Linux Kernel's network scheduling. It disallows the noqueue option for qdisc classes. The actual impact and attack plausibility have not yet been proven...

PT-2023-34310

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.163 Description The issue is related to the Linux Kernel's network scheduling. It disallows the noqueue option for qdisc classes. The actual impact and attack plausibility have not yet been proven...

PT-2023-34156

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.33 through 5.15.85 Description The issue is related to a use-after-free error in the gru set context option, gru fault, and gru handle user call os functions. This error was introduced in version v2.6.33 and fixed in...

CVE-2022-41860

In freeradius, when an EAP-SIM supplicant sends an unknown SIM option, the server will try to look that option up in the internal dictionaries. This lookup will fail, but the SIM code will not check for that failure. Instead, it will dereference a NULL pointer, and cause the server to crash...

CVE-2022-41860

In freeradius, when an EAP-SIM supplicant sends an unknown SIM option, the server will try to look that option up in the internal dictionaries. This lookup will fail, but the SIM code will not check for that failure. Instead, it will dereference a NULL pointer, and cause the server to crash...

CVE-2022-41860: NULL Pointer Dereference

In freeradius, when an EAP-SIM supplicant sends an unknown SIM option, the server will try to look that option up in the internal dictionaries. This lookup will fail, but the SIM code will not check for that failure. Instead, it will dereference a NULL pointer, and cause the server to crash...

CVE-2022-41860

In freeradius, when an EAP-SIM supplicant sends an unknown SIM option, the server will try to look that option up in the internal dictionaries. This lookup will fail, but the SIM code will not check for that failure. Instead, it will dereference a NULL pointer, and cause the server to crash...

CVE-2023-23589

The SafeSocks option in Tor before 0.4.7.13 has a logic error in which the unsafe SOCKS4 protocol can be used but not the safe SOCKS4a protocol, aka TROVE-2022-002...

Updated ctags packages fix security vulnerability

A flaw was found in Exuberant Ctags in the way it handles the "-o" option. This option specifies the tag filename. A crafted tag filename specified in the command line or in the configuration file results in arbitrary command execution because the externalSortTags in sort.c calls the system3...

ExactMetrics < 7.12.1 - Contributor+ Stored XSS

The plugin does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks. As a contributor, add a "Popular Posts" block and put...

Path traversal

nhttpd in Nostromo before 2.1 is vulnerable to a path traversal that may allow an attacker to execute arbitrary commands on the remote server. The vulnerability occurs when the homedirs option is used...

PT-2023-15650 · Nostromo · Nostromo

Name of the Vulnerable Software and Affected Versions: Nostromo versions prior to 2.1 Description: The issue allows an attacker to execute arbitrary commands on the remote server due to a path traversal vulnerability. This occurs when the homedirs option is used. Recommendations: For versions pri...

CVE-2022-48253: Improper Limitation of a Pathname to a Restricted Directory

nhttpd in Nostromo before 2.1 is vulnerable to a path traversal that may allow an attacker to execute arbitrary commands on the remote server. The vulnerability occurs when the homedirs option is used...

How to disable 'Remember my password' option in Citrix Workspace App?

How to disable 'Remember my password' option in Citrix Workspace App?...

OESA-2023-1022 freeradius security update

Remote Authentication Dial-In User Service RADIUS is a networking protocol that provides centralized Authentication, Authorization, and Accounting AAA or Triple A management for users who connect and use a network service. Security Fixes: When an EAP-SIM supplicant sends an unknown SIM option, th...