Security Bulletin: Vulnerability in Pluggable Authentication Modules (PAM) affects IBM SAN Volume Controller and Storwize Family (CVE-2015-3238)

Summary There is a vulnerability in Pluggable Authentication Modules PAM that is used by IBM SAN Volume Controller and Storwize Family. These issues were disclosed by Red Hat in August 2015. Vulnerability Details CVEID: CVE-2015-3238 DESCRIPTION: Linux-PAM could allow a local attacker to obtain...

PT-2025-18820 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to the fixed version Description: A system hang was observed due to the IOCB counts being out of order, blocking commands and subsequently hanging the system. The issue was resolved by synchronizing the IOCB count ...

K05211147: Kernel vulnerabilities CVE-2014-8559, CVE-2015-0275, CVE-2015-1333, CVE-2015-3212, and CVE-2015-4700

Security Advisory Description CVE-2014-8559 The dwalk function in fs/dcache.c in the Linux kernel through 3.17.2 does not properly maintain the semantics of renamelock, which allows local users to cause a denial of service deadlock and system hang via a crafted application. CVE-2015-0275 The...

SUSE CVE-2007-2829

The 802.11 network stack in net80211/ieee80211input.c in MadWifi before 0.9.3.1 allows remote attackers to cause a denial of service system hang via a crafted length field in nested 802.3 Ethernet frames in Fast Frame packets, which results in a NULL pointer dereference...

SUSE CVE-2013-6885

The microcode on AMD 16h 00h through 0Fh processors does not properly handle the interaction between locked instructions and write-combined memory types, which allows local users to cause a denial of service system hang via a crafted application, aka the errata 793 issue...

SUSE CVE-2014-8559

The dwalk function in fs/dcache.c in the Linux kernel through 3.17.2 does not properly maintain the semantics of renamelock, which allows local users to cause a denial of service deadlock and system hang via a crafted application...

SUSE CVE-2016-7796

The managerdispatchnotifyfd function in systemd allows local users to cause a denial of service system hang via a zero-length message received over a notify socket, which causes an error to be returned and the notification handler to be disabled...

SUSE CVE-2020-12988

A potential denial of service DoS vulnerability exists in the integrated chipset that may allow a malicious attacker to hang the system when it is rebooted...

Information Disclosure

github.com/fortio/proxy is vulnerable to Information Disclosure. The vulnerability exists in the DebugOnHostFunc function in proxymain.go due to the unsafe use of DebugHandler, which results in disclosure of sensitive information or/and a system hang...

CVE-2022-37907

ArubaOS bootloader on 7xxx series Mobility Controllers is affected by a DoS vulnerability that can cause a system hang requiring a power cycle. The issue stems from the bootloader and impacts availability (CVE-2022-37907). The public description consistently states DoS as the outcome; explicit ex...

CVE-2022-37907

A vulnerability exists in the ArubaOS bootloader on 7xxx series controllers which can result in a denial of service DoS condition on an impacted system. A successful attacker can cause a system hang which can only be resolved via a power cycle of the impacted controller...

CVE-2022-37907

A vulnerability exists in the ArubaOS bootloader on 7xxx series controllers which can result in a denial of service DoS condition on an impacted system. A successful attacker can cause a system hang which can only be resolved via a power cycle of the impacted controller...

Oracle MySQL 安全漏洞

Oracle MySQL Server is a relational database from Oracle Corporation USA.A denial-of-service vulnerability exists in the InnoDB component of Oracle MySQL Server. An attacker can exploit the vulnerability to access the network via multiple protocols, which can compromise MySQL Server and cause MyS...

PT-2022-34753 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0 Description: A potential issue exists in the btrfs filesystem, which may cause a hang during unmount when stopping a space reclaim worker. The actual impact and attack plausibility have not yet been proven...

Regular Expression Denial Of Service (ReDoS)

steal is vulnerable to regular expression denial of service. A remote attacker is able to supply a malicious input through the string variables in babel.js causing a hang in the system...

Oracle Solaris 输入验证错误漏洞

Oracle Solaris is a UNIX operating system from Oracle. Oracle Systems' Oracle Solaris has a security vulnerability that allows a low-privilege attacker to compromise Oracle Solaris by logging on to the infrastructure that executes Oracle Solaris.A successful attack requires human interaction with...

Important: microcode_ctl

Issue Overview: A flaw was found in microcode. Under complex microarchitectural conditions, an unexpected code breakpoint may cause a system hang. The hang was observed on a Skylake server processor, and subsequent analysis indicated additional potentially affected processors. This flaw allows a...

CVE-2021-0127

A flaw was found in microcode. Under complex microarchitectural conditions, an unexpected code breakpoint may cause a system hang. The hang was observed on a Skylake server processor, and subsequent analysis indicated additional potentially affected processors. This flaw allows a possible tempora...

Mageia: Security Advisory (MGASA-2013-0343)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Important: kernel

Issue Overview: A use-after-free flaw was found in the Linux kernel's NFC LLCP protocol implementation in the way the user performs manipulation with an unknown input for the llcpsockbind function. This flaw allows a local user to crash or escalate their privileges on the system. CVE-2020-25670 A...