GSD-2021-1000149 mmc: uniphier-sd: Fix a resource leak in the remove function

mmc: uniphier-sd: Fix a resource leak in the remove function This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.36 by commit...

UVI-2021-1000079 mmc: uniphier-sd: Fix a resource leak in the remove function

mmc: uniphier-sd: Fix a resource leak in the remove function This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.3 by commit...

UVI-2021-1000149 mmc: uniphier-sd: Fix a resource leak in the remove function

mmc: uniphier-sd: Fix a resource leak in the remove function This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.36 by commit...

GSD-2021-1000180 mmc: uniphier-sd: Fix a resource leak in the remove function

mmc: uniphier-sd: Fix a resource leak in the remove function This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.118 by commit...

UVI-2021-1000116 mmc: uniphier-sd: Fix a resource leak in the remove function

mmc: uniphier-sd: Fix a resource leak in the remove function This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.11.20 by commit...

UVI-2021-1000180 mmc: uniphier-sd: Fix a resource leak in the remove function

mmc: uniphier-sd: Fix a resource leak in the remove function This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.118 by commit...

Cisco SD-WAN vManage Information Disclosure (cisco-sa-sdwanvman-infodis1-YuQScHB)

According to its self-reported version, Cisco SD-WAN vManage Software is affected by a vulnerability in the web-based management interface due to insufficient access control. An authenticated, remote attacker can exploit this to read arbitrary files. Note that Nessus has not tested for this issue...

Cisco SD-WAN Software Signature Verification Bypass (cisco-sa-sdwan-sigverbypass-gPYXd6Mk)

According to its self-reported version, Cisco SD-WAN Viptela Software is affected by a vulnerability due to improper verification of digital signatures for patch images. An authenticated, remote attacker with Administrator credentials can exploit this to install a malicious software patch on an...

Cisco SD-WAN vManage SQLi (cisco-sa-sdw-sqlinj-HDJUeEAX)

According to its self-reported version, Cisco SD-WAN vManage Software is affected by a vulnerability in the web-based management interface due to improper validation of SQL queries. An authenticated, remote attacker can exploit this to execute SQL. Note that Nessus has not tested for this issue b...

GLSA-202105-03 : GPT fdisk: Integer underflow

The remote host is affected by the vulnerability described in GLSA-202105-03 GPT fdisk: Integer underflow It was discovered that ReadLogicalParts function in basicmbr.cc was missing a bounds check. Impact : A local attacker could entice a user to insert a malicious formatted block device USB stic...

GPT fdisk: Integer underflow

Background GPT fdisk consisting of the gdisk, cgdisk, sgdisk, and fixparts programs is a set of text-mode partitioning tools for Linux, FreeBSD, Mac OS X, and Windows. Description It was discovered that ReadLogicalParts function in basicmbr.cc was missing a bounds check. Impact A local attacker...

systemd security, bug fix, and enhancement update

239-45.0.1 - backport upstream pstore tmpfiles patch Orabug: 31420486 - udev rules: fix memory hot add and remove Orabug: 31310273 - fix to enable systemd-pstore.service Orabug: 30951066 - journal: change support URL shown in the catalog entries Orabug: 30853009 - fix to generate...

Cisco SD-WAN vManage Directory Traversal (cisco-sa-vman-dir-trav-Bpwc5gtm)

According to its self-reported version, Cisco SD-WAN vManage is affected by a directory traversal vulnerability due to insufficient validation of HTTP requests. An authenticated, remote attacker can exploit this by sending crafted HTTP requests in order to obtain read access to sensitive files...

Cisco SD-WAN vDaemon Buffer Overflow (cisco-sa-sdwan-vdaemon-bo-RuzzEA2)

According to its self-reported version, Cisco SD-WAN vManage Software is affected by a buffer overflow vulnerability due to incomplete bounds checks for vDaemon service data. An authenticated, local attacker can exploit this, by sending malicious data, in order to cause a denial of service DoS...

aloha-sd (>=1.0.0 <=1.0.7) potentially affected by CVE-2021-23386 via dns-packet (=1.1.1)

dns-packet NPM version =1.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on dns-packet and may be impacted: - aloha-sd =1.0.0, =1.0.7 Source cves: CVE-2021-23386 Source advisory: OSV:GHSA-3WCQ-X3MQ-6R9P...

SD-WAN Virtual Path DEAD and path NOT sending VP headbeart

Virtual PathVP between SD-WAN MCNmaster control node and all branches is DEAD. In MCN GUI statistic, Virtual Path detailed VP status shows dead reason is "SILENCE". MCN---Branch direction path. NO hearbeat being sent out from "kbps" column with 0 results. MCN could receive branch's heartbeat...

The vulnerability of the cluster-mode programmable Cisco SD-WAN architecture allows a intruder to gain unauthorized access to services within the vulnerable system.

The vulnerability of the programmable network-based Cisco SD-WAN architecture in cluster mode is related to lack of access control. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to services within the vulnerable system...

The vulnerability of the programmatically defined Cisco SD-WAN API component allows attackers to execute cross-site scripting (XSS) attacks.

The vulnerability of the programmable Cisco SD-WAN API component is related to the lack of security measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting XSS attacks remotely...

The vulnerability of the cluster software-defined networking control interface of Cisco SD-WAN allows a intruder to gain unauthorized access to protected information.

The vulnerability of the Cisco SD-WAN programmatically-defined network management interface is related to privilege management errors. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

aloha-sd (>=1.0.0 <=1.0.7) potentially affected by CVE-2021-23386 via dns-packet (=1.1.1)

dns-packet NPM version =1.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on dns-packet and may be impacted: - aloha-sd =1.0.0, =1.0.7 Source cves: CVE-2021-23386 Source advisory: SNYK:JS-DNSPACKET-1293563...