CVE-2024-43410 Russh has an OOM Denial of Service due to allocation of untrusted amount

Russh is a Rust SSH client & server library. Allocating an untrusted amount of memory allows any unauthenticated user to OOM a russh server. An SSH packet consists of a 4-byte big-endian length, followed by a byte stream of this length. After parsing and potentially decrypting the 4-byte length,...

CVE-2024-43410

Russh is a Rust SSH client & server library. Allocating an untrusted amount of memory allows any unauthenticated user to OOM a russh server. An SSH packet consists of a 4-byte big-endian length, followed by a byte stream of this length. After parsing and potentially decrypting the 4-byte length,...

GO-2023-2156 Cosmos packet-forward-middleware vulnerable to chain-halt in github.com/cosmos/ibc-apps/middleware/packet-forward-middleware

Cosmos packet-forward-middleware vulnerable to chain-halt in github.com/cosmos/ibc-apps/middleware/packet-forward-middleware...

UBUNTU-CVE-2022-48882

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix macsec possible null dereference when updating MAC security entity SecY Upon updating MAC security entity SecY in hw offload path, the macsec security association SA initialization routine is called. In case of...

CVE-2022-48882 net/mlx5e: Fix macsec possible null dereference when updating MAC security entity (SecY)

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix macsec possible null dereference when updating MAC security entity SecY Upon updating MAC security entity SecY in hw offload path, the macsec security association SA initialization routine is called. In case of...

Moderate: Red Hat Security Advisory: OpenShift Container Platform 4.15.28 packages and security update

Red Hat OpenShift Container Platform release 4.15.28 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.15. Red Hat Product Security has rated this update as having a security impact of...

DEBIAN-CVE-2024-43881

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: change DMA direction while mapping reinjected packets For fragmented packets, ath12k reassembles each fragment as a normal packet and then reinjects it into HW ring. In this case, the DMA direction should be...

kernel: virtio-net: tap: mlx5_core short frame denial of service

A denial of service DoS attack was found in the mlx5 driver in the Linux kernel. A KVM guest VM using virtio-net can crash the host by sending a short packet, for example, size = ETHHLEN...

kernel: igc: avoid returning frame twice in XDP_REDIRECT

A memory corruption flaw was found in the Linux kernel’s IntelR Ethernet Controller I225-LM/I225-V driver in how a user generates a high amount of packets. This flaw allows a local user to crash the system...

kernel: igc: avoid returning frame twice in XDP_REDIRECT

A memory corruption flaw was found in the Linux kernel’s IntelR Ethernet Controller I225-LM/I225-V driver in how a user generates a high amount of packets. This flaw allows a local user to crash the system...

PT-2024-5865 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a null dereference in the net/mlx5e component of the Linux kernel when updating the MAC security entity SecY. This occurs in the hw offload path when the macsec...

Rockwell Automation GuardLogix 5580 and ControlLogix 5580 Denial of Service Vulnerability

Rockwell Automation ControlLogix and Rockwell Automation GuardLogix are both products of Rockwell Automation, U.S.A. Rockwell Automation ControlLogix is a controller. Rockwell Automation GuardLogix is a series of controllers. A denial of service vulnerability exists in the Rockwell Automation...

AZL-48498 CVE-2024-43861 affecting package kernel for versions less than 5.15.167.1-1

In the Linux kernel, the following vulnerability has been resolved: net: usb: qmiwwan: fix memory leak for not ip packets Free the unused skb when not ip packets arrive...

CVE-2024-25009

Ericsson Packet Core Controller PCC contains a vulnerability in Access and Mobility Management Function AMF where improper input validation can lead to denial of service which may result in service degradation...

CVE-2024-25009 Ericsson Packet Core Controller (PCC) - Improper Input Validation Vulnerability

Ericsson Packet Core Controller PCC contains a vulnerability in Access and Mobility Management Function AMF where improper input validation can lead to denial of service which may result in service degradation...

Divide By Zero

libzephyr.so is vulnerable to Divide By Zero. The vulnerability is caused due to a function llcppdudecodeconnupdateind within subsys/bluetooth/controller/llsw/ullllcppdu.c not validating the content before using it. This can lead to a malicious BLE device crash BLE peripheral's BLE controller by...

Ericsson Packet Core Controller 安全漏洞

Ericsson Packet Core Controller Ericsson PCC is a packet core controller from Ericsson, Sweden. A security vulnerability exists in Ericsson Packet Core Controller versions prior to 1.33 that stems from improper input validation in the Access and Mobility Management Function component, which could...

PT-2024-20698 · Ericsson · Ericsson Packet Core Controller

Name of the Vulnerable Software and Affected Versions: Ericsson Packet Core Controller PCC affected versions not specified Description: The issue is related to improper input validation in the Access and Mobility Management Function AMF of the Ericsson Packet Core Controller PCC, which can lead t...

CVE-2024-4785

CVE-2024-4785 affects Zephyr RTOS Bluetooth controller code handling LL_CONNECTION_UPDATE_IND packets. A missing input validation in llcp_pdu_decode_conn_update_ind (subsys/bluetooth/controller/ll_sw/ull_llcp_pdu.c) can lead to a divide-by-zero error, potentially crashing the BLE peripheral’s con...

kernel: virtio-net: tap: mlx5_core short frame denial of service

A denial of service DoS attack was found in the mlx5 driver in the Linux kernel. A KVM guest VM using virtio-net can crash the host by sending a short packet, for example, size = ETHHLEN...