CVE-2022-48925

CVE-2022-48925 affects the Linux kernel RDMA/CMA path. The issue arises when the state is not idle: resolve_prepare_src() may overwrite route.addr.src_addr, potentially corrupting the source address and triggering a use-after-free trace in cma_cancel_listens() paths. The bug can occur with states...

The vulnerability of the Packet Forwarding Engine (PFE) module of Juniper Networks’ Junos OS allows a hacker to trigger a service failure.

The vulnerability of the Packet Forwarding Engine PFE module in Juniper Networks’ Junos OS is related to insufficient checking of exceptional states. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability of the Dynamic Rendering Daemon (drend) in Juniper Networks’ Junos OS and Junos OS Evolved operating systems allows a attacker to cause service interruptions.

The vulnerability of the dynamic rendering daemon drend in Juniper Networks’ Junos OS and Junos OS Evolved operating systems is related to insufficient checking of unusual or exceptional states. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

PT-2024-6544 · Intel · Intel Ethernet Network Controllers/Adapters E810 Series

Name of the Vulnerable Software and Affected Versions: Linux kernel mode driver for IntelR Ethernet Network Controllers and Adapters E810 Series versions prior to 28.3 Description: The issue is related to an improper conditions check in the Linux kernel mode driver, which may allow an authenticat...

CVE-2024-26623

In the Linux kernel, the following vulnerability has been resolved: pdscore: Prevent race issues involving the adminq There are multiple paths that can result in using the pdsc's adminq. 1 pdscadminqisr and the resulting work from queuework, i.e. pdscworkthread-pdscprocessadminq 2 pdscadminqpost...

CVE-2024-26623

In the Linux kernel, the following vulnerability has been resolved: pdscore: Prevent race issues involving the adminq There are multiple paths that can result in using the pdsc's adminq. 1 pdscadminqisr and the resulting work from queuework, i.e. pdscworkthread-pdscprocessadminq 2 pdscadminqpost...

CVE-2021-46919

In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: fix wq size store permission state WQ size can only be changed when the device is disabled. Current code allows change when device is enabled but wq is disabled. Change the check to detect device state...

The vulnerability of the DNS Response Handler component of the Universal Monitoring System Agent in Zabbix allows a attacker to trigger buffer overflows.

The vulnerability of the DNS Response Handler component of the Zabbix universal monitoring agent is related to insufficient checking of exceptional states. Exploiting this vulnerability could allow a malicious actor to trigger a buffer overflow...

The vulnerability of the GSER and HID USB host on Azure RTOS USBX interfaces allows a perpetrator to execute arbitrary code.

The vulnerability of the GSER and HID USB interfaces in Azure RTOS USBX is related to insufficient checking of exclusive states due to the pointer being set to an expired value. Exploiting this vulnerability allows a perpetrator to execute arbitrary code...

The vulnerability of Juniper Networks Junos OS devices in the SRX series allows a hacker to cause a service failure.

The vulnerability of Juniper Networks Junos OS devices in the SRX series is related to insufficient checking of exceptional states. Exploiting this vulnerability can allow a malicious actor to trigger a service failure by sending specially crafted packets...

The vulnerability of the Packet Forwarding Engine (PFE) module of the JunOS operating system, which allows a hacker to trigger a service failure.

The vulnerability of the Packet Forwarding Engine PFE module in the JunOS operating system is related to insufficient checking of exceptional states. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the Cipher.update_into function in the Python programming language-based cryptography interpreter allows a attacker to compromise the integrity and accessibility of the output data.

The vulnerability of the Cipher.updateinto function in the Python programming language’s cryptographic library is related to insufficient checking of unusual or exceptional states. Exploiting this vulnerability could allow a malicious actor to compromise the integrity and accessibility of the...

The vulnerability of the Cisco Discovery Protocol implementation in Cisco Unified Communications Manager (CM) and Cisco Unified Communications Manager Session Management Edition (SME) systems allows a attacker to cause service interruptions.

The vulnerability of the Cisco Discovery Protocol implementation in Cisco Unified Communications Manager CM and Cisco Unified Communications Manager Session Management Edition SME systems is related to insufficient checking of unusual or exceptional states. Exploiting this vulnerability could all...

The vulnerability of the openssl extension (ext/openssl/openssl.c) in the PHP programming language interpreter allows a attacker to cause a service failure.

The vulnerability of the openssl extension ext/openssl/openssl.c in the PHP programming language interpreter is related to insufficient checking of unusual or exceptional states. Exploiting this vulnerability could allow a malicious actor to cause service failures...

GSD-2022-1000848 RDMA/cma: Do not change route.addr.src_addr outside state checks

RDMA/cma: Do not change route.addr.srcaddr outside state checks This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.103 by commit...

The vulnerability of the Packet Forwarding Engine (PFE) module in Juniper Networks’ Junos OS allows a hacker to trigger a service failure.

The vulnerability of the Packet Forwarding Engine PFE module in Juniper Networks’ Junos OS is related to insufficient checking of exceptional states. Exploiting this vulnerability can allow a malicious actor to trigger a service failure by sending specially crafted packets...

The vulnerability of Juniper Networks Junos OS routers of the MX and EX9200 series lies in insufficient checking of unusual or exceptional states, allowing a hacker to trigger a service failure.

The vulnerability of Juniper Networks’ Junos OS routers of the MX and EX9200 series lies in insufficient checking of unusual or exceptional states during packet processing in MPLS. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

CVE-2020-27925

An issue existed in the handling of incoming calls. The issue was addressed with additional state checks. This issue is fixed in iOS 14.2 and iPadOS 14.2. A user may answer two calls simultaneously without indication they have answered a second call...

CVE-2020-27925

An issue existed in the handling of incoming calls. The issue was addressed with additional state checks. This issue is fixed in iOS 14.2 and iPadOS 14.2. A user may answer two calls simultaneously without indication they have answered a second call...

Code injection

An issue existed in the handling of incoming calls. The issue was addressed with additional state checks. This issue is fixed in iOS 14.2 and iPadOS 14.2. A user may answer two calls simultaneously without indication they have answered a second call...