PT-2022-37915

Уязвимость функции rxrpc propose ACK модуля net/rxrpc/ar-internal.h поддержки сокетов сеанса RxRPC ядра операционной системы Linux связана с ситуацией гонки. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

GSD-2021-1002566 rxrpc: Fix rxrpc_local leak in rxrpc_lookup_peer()

rxrpc: Fix rxrpclocal leak in rxrpclookuppeer This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.7 by commit...

GSD-2021-1002565 rxrpc: Fix rxrpc_peer leak in rxrpc_look_up_bundle()

rxrpc: Fix rxrpcpeer leak in rxrpclookupbundle This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.7 by commit...

GSD-2021-1002496 rxrpc: Fix rxrpc_local leak in rxrpc_lookup_peer()

rxrpc: Fix rxrpclocal leak in rxrpclookuppeer This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.84 by commit...

GSD-2021-1002495 rxrpc: Fix rxrpc_peer leak in rxrpc_look_up_bundle()

rxrpc: Fix rxrpcpeer leak in rxrpclookupbundle This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.84 by commit...

PT-2021-26963

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.84 Description The issue is related to a potential security leak in the rxrpc look up bundle function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-26888

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.220 Description The issue is related to a leak in the rxrpc lookup peer function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2021-27034

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.7 Description A potential security issue exists due to a leak in the rxrpc lookup peer function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2021-27033

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.7 Description The issue is related to a potential security vulnerability in the rxrpc module. It involves a leak in the rxrpc look up bundle function. The actual impact and attack plausibility have not yet...

PT-2021-26918

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.164 Description The issue is related to a leak in the rxrpc lookup peer function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2021-26964

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.84 Description The issue is related to a leak in the rxrpc lookup peer function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2019-1528)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2017-7482

Keberos 5 tickets being decoded when using the RXRPC keys incorrectly assumes the size of a field. This could lead to the size-remaining variable wrapping and the data pointer going over the end of the buffer. This could possibly lead to memory corruption and possible privilege escalation...

Denial Of Service (DoS)

Linux kernel is vulnerable to denial of service DoS attacks. The vulnerability is due to insufficient validation of Kerberos tickets by the affected system. An attacker could cause a buffer overflow which could allow the attacker to gain elevated privileges on targeted systems by submitting a...

CVE-2017-7482

In the Linux kernel before version 4.12, Kerberos 5 tickets decoded when using the RXRPC keys incorrectly assumes the size of a field. This could lead to the size-remaining variable wrapping and the data pointer going over the end of the buffer. This could possibly lead to memory corruption and...

CVE-2017-7482

In the Linux kernel before version 4.12, Kerberos 5 tickets decoded when using the RXRPC keys incorrectly assumes the size of a field. This could lead to the size-remaining variable wrapping and the data pointer going over the end of the buffer. This could possibly lead to memory corruption and...

DEBIAN-CVE-2017-7482

In the Linux kernel before version 4.12, Kerberos 5 tickets decoded when using the RXRPC keys incorrectly assumes the size of a field. This could lead to the size-remaining variable wrapping and the data pointer going over the end of the buffer. This could possibly lead to memory corruption and...

CVE-2017-7482

In the Linux kernel before version 4.12, Kerberos 5 tickets decoded when using the RXRPC keys incorrectly assumes the size of a field. This could lead to the size-remaining variable wrapping and the data pointer going over the end of the buffer. This could possibly lead to memory corruption and...

CVE-2017-7482

In the Linux kernel before version 4.12, Kerberos 5 tickets decoded when using the RXRPC keys incorrectly assumes the size of a field. This could lead to the size-remaining variable wrapping and the data pointer going over the end of the buffer. This could possibly lead to memory corruption and...

CVE-2017-7482

CVE-2017-7482 affects the Linux kernel prior to 4.12. When Kerberos 5 tickets are decoded using RXRPC keys, the code incorrectly assumes the size of a field, causing the size-remaining calculation to wrap and the data pointer to extend past the buffer end. This can lead to memory corruption and p...