kernel: Linux kernel: Denial of Service due to GIC state corruption on NVIDIA T241 platforms

A flaw was found in the Linux kernel. On NVIDIA server platforms utilizing multiple interconnected T241 chips, a local user could trigger a vulnerability in the Generic Interrupt Controller GIC due to incorrect handling of inter-socket data packets. This can corrupt the GIC's internal state,...

FreeBSD : zeek -- potential DoS vulnerabilities (8eefa87f-31f1-496d-bf8e-2b465b6e4e8a)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 8eefa87f-31f1-496d-bf8e-2b465b6e4e8a advisory. - Tim Wojtulewicz of Corelight reports: File extraction limits were not correctly enforced for files...

Rockwell Automation PanelView Plus 代码问题漏洞

Rockwell Automation PanelView Plus is a family of Human Machine Interface HMI products from Rockwell Automation. These HMI devices are designed to integrate with industrial automation systems to provide operators with an intuitive interface for controlling and monitoring production...

PT-2023-5291 · Rockwell Automation · Factorytalk View Machine Edition

Name of the Vulnerable Software and Affected Versions: Rockwell Automation FactoryTalk View Machine Edition affected versions not specified Description: The issue arises from improper verification of user input, allowing an unauthenticated attacker to achieve remote code execution via crafted...

USN-6164-2 c-ares vulnerabilities

USN-6164-1 fixed several vulnerabilities in c-ares. This update provides the corresponding update for Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. Original advisory details: Hannes Moesl discovered that c-ares incorrectly handled certain ipv6 addresses. An attacker could use this issue to cause c-ares ...

USN-6164-2: c-ares vulnerabilities

USN-6164-1 fixed several vulnerabilities in c-ares. This update provides the corresponding update for Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. Original advisory details: Hannes Moesl discovered that c-ares incorrectly handled certain ipv6 addresses. An attacker could use this issue to cause c-ares ...

Denial Of Service

Salt masters is vulnerable to Denial Of Service. The vulnerability is due to the master becoming unresponsive to return requests after receiving several bad packets on the request server, equal to the number of worker threads. This allows an attacker to disrupt the Salt master's normal operation...

SAMSUNG Exynos Code Issue Vulnerability

SAMSUNG Exynos is a SoC, Arm architecture-based processor developed and manufactured by Samsung Mobile, a South Korean company. A security vulnerability exists in the Samsung Exynos Mobile Processor, Automotive Processor, and Modem, which stems from a lack of NULL pointer validation and could lea...

The vulnerability of the microprogrammed Ethernet switch software from RUGGEDCOM ROS allows a hacker to send arbitrary packets into the mirrored network.

The vulnerability of the microprogrammed Ethernet switch software from RUGGEDCOM ROS is related to errors in representing certain functions. Exploiting this vulnerability allows a remote attacker to send arbitrary packets to the mirrored network...

PT-2023-5502 · Nvidia · Nvidia Cumulus Linux

Name of the Vulnerable Software and Affected Versions: NVIDIA Cumulus Linux affected versions not specified Description: The issue is related to a vulnerability in the neighmgrd and nlmanager components of NVIDIA Cumulus Linux. An attacker on an adjacent network may cause an uncaught exception by...

Oracle Linux 5 : wireshark (ELSA-2007-0710)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2007-0710 advisory. 0.99.6-1.el5.01 - Added patch for OCFS2 formatting 0.99.6-1 - upgrade to 0.99.6 - Wireshark could crash when dissecting an HTTP chunked response -...

CVE-2023-20243

A vulnerability in the RADIUS message processing feature of Cisco Identity Services Engine ISE could allow an unauthenticated, remote attacker to cause the affected system to stop processing RADIUS packets. This vulnerability is due to improper handling of certain RADIUS accounting requests. An...

CVE-2023-20897

Salt masters prior to 3005.2 or 3006.2 contain a DOS in minion return. After receiving several bad packets on the request server equal to the number of worker threads, the master will become unresponsive to return requests until restarted...

PYSEC-2023-166

Salt masters prior to 3005.2 or 3006.2 contain a DOS in minion return. After receiving several bad packets on the request server equal to the number of worker threads, the master will become unresponsive to return requests until restarted...

CVE-2023-33021

Memory corruption in Graphics while processing user packets for command submission...

CVE-2023-33021 Use After Free in Graphics

Memory corruption in Graphics while processing user packets for command submission...

CVE-2023-33021

CVE-2023-33021 describes a memory corruption (use-after-free) in the Graphics path when processing user packets for command submission, affecting Qualcomm Snapdragon graphics components. Impact is high for confidentiality, integrity, and availability per the NVD metrics. Connected sources corrobo...

PT-2023-24145 · Qualcomm · Qualcomm Snapdragon

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon processors affected versions not specified Description: The issue is related to memory corruption in Graphics while processing user packets for command submission. This can potentially lead to security risks, but specific...

SUSE CVE-2023-20897

Salt masters prior to 3005.2 or 3006.2 contain a DOS in minion return. After receiving several bad packets on the request server equal to the number of worker threads, the master will become unresponsive to return requests until restarted...

kernel: cls_flower: out-of-bounds write in fl_set_geneve_opt()

A flaw was found in the TC flower classifier clsflower in the Networking subsystem of the Linux kernel. This issue occurs when sending two TCAFLOWERKEYENCOPTSGENEVE packets with a total size of 252 bytes, which results in an out-of-bounds write when the third packet enters flsetgeneveopt,...