533 matches found
kernel: ppp_async: limit MRU to 64K
In the Linux kernel, the following vulnerability has been resolved: pppasync: limit MRU to 64K syzbot triggered a warning 1 in allocpages: WARNONONCEGFPorder MAXPAGEORDER, gfp Willem fixed a similar issue in commit c0a2a1b0d631 "ppp: limit MRU to 64K" Adopt the same sanity check for...
ppp: fix ppp_async_encode() illegal access
...
SUSE CVE-2024-49946
In the Linux kernel, the following vulnerability has been resolved: ppp: do not assume bh is held in pppchannelbridgeinput Networking receive path is usually handled from BH handler. However, some protocols need to acquire the socket lock, and packets might be stored in the socket backlog is the...
AZL-51111 CVE-2024-50035 affecting package kernel for versions less than 5.15.173.1-1
In the Linux kernel, the following vulnerability has been resolved: ppp: fix pppasyncencode illegal access syzbot reported an issue in pppasyncencode 1 In this case, pppoesendmsg is called with a zero size. Then pppasyncencode is called with an empty skb. BUG: KMSAN: uninit-value in pppasyncencod...
DEBIAN-CVE-2024-49946
In the Linux kernel, the following vulnerability has been resolved: ppp: do not assume bh is held in pppchannelbridgeinput Networking receive path is usually handled from BH handler. However, some protocols need to acquire the socket lock, and packets might be stored in the socket backlog is the...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an inconsistent lock state issue in the pppchannelbridgeinput function in the ppp subsystem...
The vulnerability of the netfilter component in the Linux operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability of the netfilter component in the Linux operating system’s kernel is related to an incorrect PPPoE configuration. Exploiting this vulnerability can allow a hacker to cause a service failure...
kernel: ppp: reject claimed-as-LCP but actually malformed packets
The vulnerability was found in the Linux kernel's ppp pppgeneric.c driver, in the pppread and pppwrite functions where malformed packets were erroneously identified as LCP packets, leading to potential issues with packet handling. This flaw could potentially lead to system instability...
kernel: ppp: reject claimed-as-LCP but actually malformed packets
The vulnerability was found in the Linux kernel's ppp pppgeneric.c driver, in the pppread and pppwrite functions where malformed packets were erroneously identified as LCP packets, leading to potential issues with packet handling. This flaw could potentially lead to system instability...
kernel: ppp: reject claimed-as-LCP but actually malformed packets
The vulnerability was found in the Linux kernel's ppp pppgeneric.c driver, in the pppread and pppwrite functions where malformed packets were erroneously identified as LCP packets, leading to potential issues with packet handling. This flaw could potentially lead to system instability...
kernel: netfilter: flowtable: validate pppoe header
In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: validate pppoe header Ensure there is sufficient room to access the protocol field of the PPPoe header. Validate it once before the flowtable lookup, then use a helper function to access protocol field...
UBUNTU-CVE-2024-41044
In the Linux kernel, the following vulnerability has been resolved: ppp: reject claimed-as-LCP but actually malformed packets Since 'pppasyncencode' assumes valid LCP packets with code from 1 to 7 inclusive, add 'pppcheckpacket' to ensure that LCP packet has an actual body beyond PPPLCP header...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that originates in the pppasyncencode function that assumes LCP packets are valid without checking the actual contents of th...
How to Configure QLogic HBA on XenServer
This article describes how to update the parameters of QLogic HBAs with SANSurfer. HBA parameters might need to be adjusted to the correct configuration on XenServer to function as required. QLogic HBAs contain a default set of parameters that will function but might not give optimum performance ...
kernel: ppp_async: limit MRU to 64K
In the Linux kernel, the following vulnerability has been resolved: pppasync: limit MRU to 64K syzbot triggered a warning 1 in allocpages: WARNONONCEGFPorder MAXPAGEORDER, gfp Willem fixed a similar issue in commit c0a2a1b0d631 "ppp: limit MRU to 64K" Adopt the same sanity check for...
netfilter: flowtable: incorrect pppoe tuple
...
CVE-2024-34974
Tenda AC18 v15.03.05.19 is vulnerable to Buffer Overflow in the formSetPPTPServer function via the endIp parameter...
PT-2024-20208 · Tcpdump · Tcpdump
Name of the Vulnerable Software and Affected Versions: tcpdump versions from 2023-06-05 to 2024-03-21 git master branch Description: The PPP printer in tcpdump can enter an infinite loop when reading a crafted DLT PPP SERIAL .pcap savefile due to a bug in packet data buffers management...
UBUNTU-CVE-2024-26675
In the Linux kernel, the following vulnerability has been resolved: pppasync: limit MRU to 64K syzbot triggered a warning 1 in allocpages: WARNONONCEGFPorder MAXPAGEORDER, gfp Willem fixed a similar issue in commit c0a2a1b0d631 "ppp: limit MRU to 64K" Adopt the same sanity check for...
The vulnerability of the formSetPPTPServer() function (/goform/SetPptpServerCfg) in the Tenda AC18 router software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the formSetPPTPServer function /goform/SetPptpServerCfg in the Tenda AC18 router software is related to the operation of writing data outside the buffer in memory when processing the startIP parameter. Exploiting this vulnerability could allow an attacker to compromise the...