PT-2023-34219

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.86 Description The issue is related to the xprtrdma component, specifically in the rpcrdma req create function, where regbuf data is not properly freed. This problem was introduced in version v5.2 and is...

PT-2022-5890

Name of the Vulnerable Software and Affected Versions xrdp versions prior to 0.9.21 Description The issue is related to a buffer overflow in the devredir proc client devlist announce req function. This can be exploited by a remote attacker to execute arbitrary code. The vulnerability is associate...

PT-2022-36560

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.300 Description A potential security issue exists due to an incorrect check of the msg-req TLV length in the tipc nl compat name table dump header function. The actual impact and attack plausibility have no...

PT-2022-36609

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.334 Description The issue concerns a problem with the msg-req tlv len check in the tipc nl compat name table dump header function. The actual impact and potential for attack have not been proven yet...

PT-2022-5813

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.0.10 Description The issue is related to an integer wraparound in the l2cap config req function in net/bluetooth/l2cap core.c, which can be exploited via L2CAP CONF REQ packets. This may allow an attacker to...

Windows Kerberos RC4 MD4 Encryption Downgrade Privilege Escalation Vulnerability

Windows: Kerberos RC4 MD4 Encryption Downgrade EoP Platform: Windows 10+ Class: Elevation of Privilege Security Boundary: User Summary: The KDC allows an interposing attacker to downgrade to RC4 MD4 encryption in compromising the user's TGT session key resulting in EoP. NOTE: I tried to look if...

PT-2022-32383

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.15 Description The issue concerns a data-race condition around sysctl tcp migrate req in the TCP protocol handling. This condition may potentially lead to security vulnerabilities, although the actual impac...

PT-2022-32607

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.58 Description The issue concerns a data-race around sysctl tcp migrate req in the tcp module. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

GSD-2022-1003602 Bluetooth: use hdev lock for accept_list and reject_list in conn req

Bluetooth: use hdev lock for acceptlist and rejectlist in conn req This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.121 by commit...

PT-2022-10331

Name of the Vulnerable Software and Affected Versions Zephyr versions = v1.14 Description The issue is related to a reachable assertion with repeated LL CONNECTION PARAM REQ, which is classified as a Reachable Assertion CWE-617. This occurs when the LL CONNECTION PARAM REQ is repeated, leading to...

PT-2022-10337 · Zephyr · Zephyr

Name of the Vulnerable Software and Affected Versions: Zephyr versions = v2.5.0 Description: A stack-based buffer overflow issue exists in the le ecred conn req function. This issue is related to a stack-based buffer overflow, which can be exploited. Recommendations: For Zephyr versions = v2.5.0,...

GHSA-QVW9-6567-WQ78 MunkiReport reportdata module SQL injection vulnerability

A SQL injection vulnerability in reportdatacontroller.php in the reportdata module before 3.5 for MunkiReport allows attackers to execute arbitrary SQL commands via the req parameter of the /module/reportdata/ip endpoint...

PT-2022-29995

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.34 Description A memory leak issue exists in the pm8001 chip fw flash update req function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior...

PT-2022-29328

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.3 Description A memory leak issue exists in the pm8001 chip fw flash update req function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior ...

PT-2022-29503

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.2 Description The issue is related to a use after free in the rtw hw scan update probe req function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-30278

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.111 Description A memory leak issue exists in the pm8001 chip fw flash update req function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prio...

PT-2022-29669

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.20 Description A memory leak issue exists in the pm8001 chip fw flash update req function. The actual impact and potential for attack have not been confirmed. Recommendations For versions prior to v5.16.20,...

EulerOS 2.0 SP10 : samba (EulerOS-SA-2022-1246)

According to the versions of the samba packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in the way samba implemented SMB1 authentication. An attacker could use this flaw to retrieve the plaintext password sent over t...

PT-2025-8047

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak issue has been identified in the Linux kernel, specifically in the pm8001 chip fw flash update req function. This issue arises when pm8001 chip fw flash update build fails,...

EulerOS 2.0 SP9 : samba (EulerOS-SA-2022-1037)

According to the versions of the samba packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A null pointer de-reference was found in the way samba kerberos server handled missing sname in TGS-REQ Ticket Granting Server - Request. An...