GSD-2021-1002496 rxrpc: Fix rxrpc_local leak in rxrpc_lookup_peer()

rxrpc: Fix rxrpclocal leak in rxrpclookuppeer This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.84 by commit...

GSD-2021-1002495 rxrpc: Fix rxrpc_peer leak in rxrpc_look_up_bundle()

rxrpc: Fix rxrpcpeer leak in rxrpclookupbundle This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.84 by commit...

PT-2021-26918

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.164 Description The issue is related to a leak in the rxrpc lookup peer function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2021-26964

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.84 Description The issue is related to a leak in the rxrpc lookup peer function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2021-26963

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.84 Description The issue is related to a potential security leak in the rxrpc look up bundle function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-27034

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.7 Description A potential security issue exists due to a leak in the rxrpc lookup peer function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2021-27033

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.7 Description The issue is related to a potential security vulnerability in the rxrpc module. It involves a leak in the rxrpc look up bundle function. The actual impact and attack plausibility have not yet...

PT-2021-26888

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.220 Description The issue is related to a leak in the rxrpc lookup peer function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2019-1528)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2017-7482

Keberos 5 tickets being decoded when using the RXRPC keys incorrectly assumes the size of a field. This could lead to the size-remaining variable wrapping and the data pointer going over the end of the buffer. This could possibly lead to memory corruption and possible privilege escalation...

Denial Of Service (DoS)

Linux kernel is vulnerable to denial of service DoS attacks. The vulnerability is due to insufficient validation of Kerberos tickets by the affected system. An attacker could cause a buffer overflow which could allow the attacker to gain elevated privileges on targeted systems by submitting a...

CVE-2017-7482

In the Linux kernel before version 4.12, Kerberos 5 tickets decoded when using the RXRPC keys incorrectly assumes the size of a field. This could lead to the size-remaining variable wrapping and the data pointer going over the end of the buffer. This could possibly lead to memory corruption and...

CVE-2017-7482

In the Linux kernel before version 4.12, Kerberos 5 tickets decoded when using the RXRPC keys incorrectly assumes the size of a field. This could lead to the size-remaining variable wrapping and the data pointer going over the end of the buffer. This could possibly lead to memory corruption and...

DEBIAN-CVE-2017-7482

In the Linux kernel before version 4.12, Kerberos 5 tickets decoded when using the RXRPC keys incorrectly assumes the size of a field. This could lead to the size-remaining variable wrapping and the data pointer going over the end of the buffer. This could possibly lead to memory corruption and...

CVE-2017-7482

In the Linux kernel before version 4.12, Kerberos 5 tickets decoded when using the RXRPC keys incorrectly assumes the size of a field. This could lead to the size-remaining variable wrapping and the data pointer going over the end of the buffer. This could possibly lead to memory corruption and...

CVE-2017-7482

In the Linux kernel before version 4.12, Kerberos 5 tickets decoded when using the RXRPC keys incorrectly assumes the size of a field. This could lead to the size-remaining variable wrapping and the data pointer going over the end of the buffer. This could possibly lead to memory corruption and...

CVE-2017-7482

CVE-2017-7482 affects the Linux kernel prior to 4.12. When Kerberos 5 tickets are decoded using RXRPC keys, the code incorrectly assumes the size of a field, causing the size-remaining calculation to wrap and the data pointer to extend past the buffer end. This can lead to memory corruption and p...

CVE-2017-7482: Integer Overflow or Wraparound

In the Linux kernel before version 4.12, Kerberos 5 tickets decoded when using the RXRPC keys incorrectly assumes the size of a field. This could lead to the size-remaining variable wrapping and the data pointer going over the end of the buffer. This could possibly lead to memory corruption and...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2018-4041)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-4041 advisory. - KEYS: Remove keytype::match in favour of overriding default by matchpreparse Tim Tianyang Chen Orabug: 25757946 CVE-2017-6951 - tcp: initialize...

Unbreakable Enterprise kernel security update

2.6.39-400.298.3 - ext4: limit group search loop for non-extent files Lachlan McIlroy Orabug: 17488415 - ext4: fixup 64-bit divides in 3.0-stable backport of upstream fix Todd Poynor Orabug: 17488415 - ext4: use atomic64t for the per-flexbg freeclusters count Theodore Ts'o Orabug: 17488415 - ext4...