PT-2023-21210 · Openbsd · Openbsd

Name of the Vulnerable Software and Affected Versions: OpenBSD version 7.2 Description: A TCP packet with destination port 0 that matches a pf divert-to rule can crash the kernel. Recommendations: For OpenBSD version 7.2, as a temporary workaround, consider disabling the pf divert-to rule until a...

CVE-2023-27567

In OpenBSD 7.2, a TCP packet with destination port 0 that matches a pf divert-to rule can crash the kernel...

CVE-2023-27567

OpenBSD 7.2 is affected. A TCP packet with destination port 0 that matches a pf divert-to rule can crash the kernel, per CVE-2023-27567. The vulnerability stems from how pf divis divert-to matches such packets, leading to a kernel crash (denial of service-like impact). The NVD metrics indicate hi...

SUSE CVE-2019-15923

An issue was discovered in the Linux kernel before 5.0.9. There is a NULL pointer dereference for a cd data structure if allocdisk fails in drivers/block/paride/pf.c...

GSD-2023-1001990 octeontx2-pf: Fix resource leakage in VF driver unbind

octeontx2-pf: Fix resource leakage in VF driver unbind This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.7 by commit...

GSD-2023-1001953 octeontx2-pf: Fix the use of GFP_KERNEL in atomic context on rt

octeontx2-pf: Fix the use of GFPKERNEL in atomic context on rt This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.8 by commit...

GSD-2023-1001696 octeontx2-pf: Fix resource leakage in VF driver unbind

octeontx2-pf: Fix resource leakage in VF driver unbind This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.7 by commit...

GSD-2023-1001659 octeontx2-pf: Fix the use of GFP_KERNEL in atomic context on rt

octeontx2-pf: Fix the use of GFPKERNEL in atomic context on rt This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.8 by commit...

GSD-2023-1001256 PCI: Fix pci_device_is_present() for VFs by checking PF

PCI: Fix pcideviceispresent for VFs by checking PF This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.163 by commit...

GSD-2023-1000132 octeontx2-pf: Fix potential memory leak in otx2_init_tc()

octeontx2-pf: Fix potential memory leak in otx2inittc This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.83 by commit...

GSD-2023-1000028 octeontx2-pf: Fix potential memory leak in otx2_init_tc()

octeontx2-pf: Fix potential memory leak in otx2inittc This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.13 by commit...

PT-2024-14776

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A resource leakage issue has been resolved in the Linux kernel, specifically in the octeontx2-pf driver. The issue occurred when resources allocated for the Ntuple feature, such as mcam...

grub2: Buffer overflow in grub_font_construct_glyph() can lead to out-of-bound write and possible secure boot bypass

A flaw was found where a maliciously crafted pf2 font could lead to an out-of-bounds write in grub2. A successful attack can lead to memory corruption and secure boot circumvention...

grub2: Buffer overflow in grub_font_construct_glyph() can lead to out-of-bound write and possible secure boot bypass

A flaw was found where a maliciously crafted pf2 font could lead to an out-of-bounds write in grub2. A successful attack can lead to memory corruption and secure boot circumvention...

Cross site scripting

Cross Site Scripting XSS vulnerability in Netgate pf Sense 2.4.4-Release-p3 and Netgate ACME package 0.6.3 allows remote attackers to to run arbitrary code via the RootFolder field to acmecertificateedit.php page of the ACME package...

CVE-2020-21219

Cross Site Scripting XSS vulnerability in Netgate pf Sense 2.4.4-Release-p3 and Netgate ACME package 0.6.3 allows remote attackers to to run arbitrary code via the RootFolder field to acmecertificateedit.php page of the ACME package...

CVE-2020-21219

CVE-2020-21219 : Affected software is Netgate pfSense 2.4.4-Release-p3 with the Netgate ACME package 0.6.3. The vulnerability is a Cross Site Scripting (XSS) in the RootFolder field of the ACME package’s acme_certificate_edit.php, allowing remote attackers to run arbitrary code. The connected sou...

USN-5774-1 linux-azure vulnerabilities

Jann Horn discovered that the Linux kernel did not properly track memory allocations for anonymous VMA mappings in some situations, leading to potential data structure reuse. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2022-427...

GSD-2022-1007785 octeontx2-pf: Fix SQE threshold checking

octeontx2-pf: Fix SQE threshold checking This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.9 by commit...

USN-5727-2 linux-gcp, linux-gcp-4.15 vulnerabilities

It was discovered that a race condition existed in the instruction emulator of the Linux kernel on Arm 64-bit systems. A local attacker could use this to cause a denial of service system crash. CVE-2022-20422 It was discovered that the KVM implementation in the Linux kernel did not properly handl...