SUSE CVE-2008-2136

Memory leak in the ipip6rcv function in net/ipv6/sit.c in the Linux kernel 2.4 before 2.4.36.5 and 2.6 before 2.6.25.3 allows remote attackers to cause a denial of service memory consumption via network traffic to a Simple Internet Transition SIT tunnel interface, related to the pskbmaypull and...

GSD-2023-1001001 ipv6/sit: use DEV_STATS_INC() to avoid data-races

ipv6/sit: use DEVSTATSINC to avoid data-races This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.86 by commit...

GSD-2023-1000567 ipv6/sit: use DEV_STATS_INC() to avoid data-races

ipv6/sit: use DEVSTATSINC to avoid data-races This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

PT-2023-33644 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.16 Description: The issue is related to a potential data-race in the ipv6/sit module. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

PT-2023-34078

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.86 Description The issue is related to a potential data-race in the ipv6/sit module. The actual impact and attack plausibility have not yet been proven. Recommendations For versions prior to v5.15.86, updat...

CVE-2022-3616

Affected software/area: OctoRPKI (github.com/cloudflare/cfrpki) in the octorpki command. Root cause / vulnerability detail: Attackers can construct long chains of Certificate Authorities (CAs) that exhaust the max iterations limit, causing OctoRPKI to crash and fail validation, resulting in a den...

PT-2025-37575

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel's f2fs file system related to data block recovery. An inconsistency between the SIT table and inode mapping table can trigger a warning during SIT table...

sit-sc.com Cross Site Scripting vulnerability OBB-2637059

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2025-8297

Name of the Vulnerable Software and Affected Versions Linux kernel version 5.17 Description A bug in the F2FS file system has been identified, which can cause a panic when updating the SIT table with an invalid block address. The issue occurs when the block mapping information in the inode become...

PT-2021-27221

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.11 Description The issue is related to a potential security vulnerability in the Linux Kernel, where the function ipip6 dev free is called from sit init net. The actual impact and attack plausibility have n...

PT-2021-27146

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.168 Description The issue is related to a potential security vulnerability in the Linux Kernel, where the function ipip6 dev free is called from sit init net. The actual impact and attack plausibility have n...

PT-2021-27173

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.88 Description The issue is related to a potential security problem in the Linux Kernel, where the function ipip6 dev free is called from sit init net. The actual impact and attack plausibility have not yet...

PT-2021-27124

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.222 Description The issue is related to a potential security vulnerability in the Linux Kernel, where the function ipip6 dev free is called from sit init net. The actual impact and attack plausibility have...

PT-2021-27103

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.259 Description The issue is related to a potential security problem in the Linux Kernel, where the function ipip6 dev free is called from sit init net. The actual impact and attack plausibility have not ye...

PT-2021-8217

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.16.0-rc5-syzkaller Description The vulnerability is related to a memory corruption issue in the sit init net function. The ipip6 dev free function is called from sit init net, but it is already called by regist...

Security Advisory 2021-08-01-1 - XSS via missing input validation of host names displayed (CVE-2021-32019)

DESCRIPTION Missing input validation of host names displayed in OpenWrt LuCI web-interface leads to Cross-site scripting, which can be used to gain full control over the affected system. REQUIREMENTS Users need to visit the LuCI “Connection status” page of the router and activate the host name...

Unbreakable Enterprise kernel-container security update

5.4.17-2102.203.5 - rds/ib: move rdsibclearirqmiss to .h file Manjunath Patil Orabug: 33044344 5.4.17-2102.203.4 - rds/ib: recover rds connection from interrupt loss scenario Manjunath Patil Orabug: 32974199 - Revert 'Allow mce to reset instead of panic on UE' William Roche Orabug: 32820275 - bpf...

Sitel CAP/PRX 访问控制错误漏洞

Sitel CAP/PRX is an operating system from Sitel France. It is used for central processing units that have a 180 MHz ARM9 architecture. An information disclosure vulnerability exists in SITEL CAP/PRX firmware 5.2.01, which can be exploited by an attacker to access the device's internal configurati...

kernel: Memory leak in sit_init_net() in net/ipv6/sit.c

A flaw was found in the way the sitinitnet function in the Linux kernel handled resource cleanup on errors. This flaw allows an attacker to use the error conditions to crash the system...

kernel: Memory leak in sit_init_net() in net/ipv6/sit.c

A flaw was found in the way the sitinitnet function in the Linux kernel handled resource cleanup on errors. This flaw allows an attacker to use the error conditions to crash the system...