libreswan: Malicious IKEv1 Aggressive Mode packets can crash libreswan

A vulnerability was found in the libreswan library. This security issue occurs when an IKEv1 Aggressive Mode packet is received with only unacceptable crypto algorithms, and the response packet is not sent with a zero responder SPI. When a subsequent packet is received where the sender reuses the...

PT-2023-22636 · Unknown · Shimo Vpn Client

Name of the Vulnerable Software and Affected Versions: Shimo VPN Client for macOS version 5.0.4 Description: An issue in the helper tool of Shimo VPN Client for macOS allows attackers to bypass authentication via PID re-use. Recommendations: For Shimo VPN Client for macOS version 5.0.4, update to...

Shimo VPN 授权问题漏洞

Shimo VPN is a VPN Virtual Private Network software for macOS platform. Mailbutler GmbH Shimo VPN Client for macOS version v5.0.4 suffers from a security vulnerability that stems from a vulnerability in the help tool that allows attackers to bypass authentication via PID reuse...

redox-os relibc 资源管理错误漏洞

redox-os relibc is a C library for Redox and Linux in Rust from redox-os. A security vulnerability exists in redox-os relibc version v0.1.0, which stems from a post-release reuse vulnerability in the gethostbyaddr function in /src/header/netdb/mod.rs...

libwebp 资源管理错误漏洞

libwebp is a library for encoding and decoding the WebP image format. A resource management error vulnerability exists in libwebp that stems from a lack of memory in the VP8 encoder, which can lead to memory reuse after release...

PT-2023-36406 · Gnu +1 · Linux +1

Уязвимость реализации сетевого протокола J1939 ядра операционной системы Linux связана с повторным использованием ранее освобожденной в функции j1939 netdev start памяти в модуле net/can/j1939/main.c из-за конкурентного доступа к ndev-ml priv-j1939 priv состояние гонки. Эксплуатация уязвимости...

Linux kernel 资源管理错误漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a post-release reuse vulnerability in the iouring subsystem to enable local lifting...

Linux kernel 资源管理错误漏洞

The Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. A security vulnerability exists in the Linux kernel, which stems from a post-release reuse vulnerability in the Performance Events system that can be exploited to implement a local power lift...

Serenity Serene 授权问题漏洞

Serenity Serene is serenity open source is an ASP.NET Core / TypeScript application platform. A security vulnerability exists in Serenity Serene StartSharp versions prior to 6.7.0, which originated when a password reset link was sent via e-mail. The link contains a token that is used to reset a...

PT-2023-23274 · Unknown · Startsharp +1

Name of the Vulnerable Software and Affected Versions: Serenity Serene versions prior to 6.7.0 StartSharp versions prior to 6.7.0 Description: An issue was discovered where password reset links sent by email contain a token that remains valid even after the password reset, allowing it to be used...

CVE-2023-31287

An issue was discovered in Serenity Serene and StartSharp before 6.7.0. Password reset links are sent by email. A link contains a token that is used to reset the password. This token remains valid even after the password reset and can be used a second time to change the password of the...

CVE-2023-31287

CVE-2023-31287 affects Serenity Serene and StartSharp (before 6.7.0). A password-reset link token is valid after use and can be replayed to reset a password, with the token expiring after 3 hours and sent as a query parameter. An attacker with browser-history access could reuse the token to take ...

CVE-2023-31287

An issue was discovered in Serenity Serene and StartSharp before 6.7.0. Password reset links are sent by email. A link contains a token that is used to reset the password. This token remains valid even after the password reset and can be used a second time to change the password of the...

[SECURITY] [DLA 3398-1] curl security update

Debian LTS Advisory DLA-3398-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany April 21, 2023 https://wiki.debian.org/LTS Package : curl Version : 7.64.0-4+deb10u6 CVE ID : CVE-2023-27533 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538 Several security vulnerabilitie...

Amazon Linux AMI : curl (ALAS-2023-1727)

The version of curl installed on the remote host is prior to 7.61.1-12.105. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2023-1727 advisory. The curl advisory describes this issue as follows: curl supports communicating using the TELNET protocol and as a part o...

CBL Mariner 2.0 Security Update: cmake / curl / mysql / rust / tensorflow (CVE-2023-27536)

The version of cmake / curl / mysql / rust / tensorflow installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-27536 advisory. - An authentication bypass vulnerability exists libcurl 8.0.0 in the...

The vulnerability of the btsdioremove() function in the drivers\bluetooth\btsdio.c driver of the Linux operating system’s Bluetooth kernel allows a attacker to cause a service failure.

The vulnerability of the btsdioremove function in the drivers\bluetooth\btsdio.c driver of the Linux operating system’s Bluetooth kernel relates to the reutilization of previously freed memory due to a race condition. Exploiting this vulnerability could allow an attacker to cause a service failur...

The vulnerability of the indexing filter of the traffic control system tcindex (net/sched/cls_tcindex.c) in the Linux operating system allows a hacker to increase their privileges.

The vulnerability of the indexing filter in the tcindex traffic control system net/sched/clstcindex.c in the Linux operating system is related to improper handling of filters, resulting in the re-release of previously released memory. Exploiting this vulnerability can allow an attacker to increas...

The vulnerability of the libcurl library lies in the absence of mutexes or flow locks, allowing attackers to exploit memory after it is freed.

The vulnerability of the libcurl library is related to the absence of mutexes or flow locks. Exploiting this vulnerability allows a remote attacker to perform re-locking operations or utilize memory after it has been freed. As a result, the same data can be reused in a combined attack...

The vulnerability of the libcurl library, related to bypassing the authentication process, allows a perpetrator to reuse an inappropriate connection.

The vulnerability of the libcurl library relates to bypassing the authentication process. Exploiting this vulnerability allows a malicious actor to easily manipulate two SSH parameters, which may lead to the reuse of an inappropriate connection. As a result, an already established SSH connection...