CVE-2024-44571

The RELY-PCIe smart pluggable board from Relyum Spain, versions v22.2.1 through v23.1.0 , is vulnerable to a security issue due to incorrect access control within the mService function at the phpinf.php endpoint. This flaw allows for improper restriction of access, potentially enabling unauthoriz...

CVE-2024-44575

The RELY-PCIe smart pluggable board, specifically versions v22.2.1 through v23.1.0 , fails to set the Secure attribute for sensitive cookies during HTTPS sessions. This missing attribute can cause user agents to transmit these sensitive cookies in cleartext over an unencrypted HTTP session. To mi...

Relyum RELY-PCIe 安全漏洞

The Relyum RELY-PCIe is a smart pluggable board from Relyum Spain. A security vulnerability exists in Relyum RELY-PCIe versions v22.2.1 through v23.1.0, which stems from the sysmgmt function containing a command injection vulnerability...

Unbreakable Enterprise kernel-container security update

5.4.17-2136.335.4.el8 - mm: memcg/slab: enable kmalloc-cg- caches for x8664. Imran Khan Orabug: 36951041 - printk: add kthread for long-running print Stephen Brennan Orabug: 36456582 - kdb: Use the passed prompt in kdbpositioncursor Douglas Anderson - driver core: Fix ueventshow vs driver detach...

CVE-2024-44575

RELY-PCIe v22.2.1 to v23.1.0 does not set the Secure attribute for sensitive cookies in HTTPS sessions, which could cause the user agent to send those cookies in cleartext over an HTTP session...

CVE-2024-44572

RELY-PCIe v22.2.1 to v23.1.0 was discovered to contain a command injection vulnerability via the sysmgmt function...

CVE-2024-44575: Incorrect Permission Assignment for Critical Resource

RELY-PCIe v22.2.1 to v23.1.0 does not set the Secure attribute for sensitive cookies in HTTPS sessions, which could cause the user agent to send those cookies in cleartext over an HTTP session...

CVE-2024-44575

RELY-PCIe v22.2.1 to v23.1.0 does not set the Secure attribute for sensitive cookies in HTTPS sessions, which could cause the user agent to send those cookies in cleartext over an HTTP session...

CVE-2024-44573

A stored cross-site scripting XSS vulnerability in the VLAN configuration of RELY-PCIe v22.2.1 to v23.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

CVE-2024-44574

RELY-PCIe v22.2.1 to v23.1.0 was discovered to contain a command injection vulnerability via the sysconf function...

CVE-2024-44572

The RELY-PCIe smart pluggable board, manufactured by Relyum Spain , is affected by a command injection vulnerability in versions v22.2.1 through v23.1.0 . The flaw originates from the sys_mgmt function. This vulnerability allows for the execution of arbitrary commands, which could lead to unautho...

CVE-2024-44571: Improper Access Control

RELY-PCIe v22.2.1 to v23.1.0 was discovered to contain incorrect access control in the mService function at phpinf.php...

CVE-2024-44574: Improper Neutralization of Special Elements used in a Command

RELY-PCIe v22.2.1 to v23.1.0 was discovered to contain a command injection vulnerability via the sysconf function...

PT-2024-7588

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.58 Description The issue is related to a buffer overflow vulnerability in the Linux kernel's Kirin PCIe driver, specifically in the kirin pcie parse port function. This vulnerability may allow an attacker to...

SUSE CVE-2024-43876

In the Linux kernel, the following vulnerability has been resolved: PCI: rcar: Demote WARN to devwarnratelimited in rcarpciewakeup Avoid large backtrace, it is sufficient to warn the user that there has been a link problem. Either the link has failed and the system is in need of maintenance, or t...

CVE-2024-43876

In the Linux kernel, the following vulnerability has been resolved: PCI: rcar: Demote WARN to devwarnratelimited in rcarpciewakeup Avoid large backtrace, it is sufficient to warn the user that there has been a link problem. Either the link has failed and the system is in need of maintenance, or t...

CVE-2024-43876

In the Linux kernel, the following vulnerability has been resolved: PCI: rcar: Demote WARN to devwarnratelimited in rcarpciewakeup Avoid large backtrace, it is sufficient to warn the user that there has been a link problem. Either the link has failed and the system is in need of maintenance, or t...

UBUNTU-CVE-2024-43876

In the Linux kernel, the following vulnerability has been resolved: PCI: rcar: Demote WARN to devwarnratelimited in rcarpciewakeup Avoid large backtrace, it is sufficient to warn the user that there has been a link problem. Either the link has failed and the system is in need of maintenance, or t...

CVE-2024-43876 PCI: rcar: Demote WARN() to dev_warn_ratelimited() in rcar_pcie_wakeup()

In the Linux kernel, the following vulnerability has been resolved: PCI: rcar: Demote WARN to devwarnratelimited in rcarpciewakeup Avoid large backtrace, it is sufficient to warn the user that there has been a link problem. Either the link has failed and the system is in need of maintenance, or t...

CVE-2024-43876

CVE-2024-43876 affects the Linux kernel PCIe RCAR driver. The issue concerns demoting the WARN() in rcar_pcie_wakeup() to dev_warn_ratelimited() to reduce backtrace verbosity when a PCIe link issue is detected. The advisory explains a scenario with ASM1062 PCIe/SATA controllers where link state t...