EUVD-2015-1245

Malware in sbrugna...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-410269)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-410269 advisory. In the Linux kernel, the following vulnerability has been resolved: net: add more sanity checks to qdiscpktleninit One path takes care of SKBGSODODGY, assuming skb-l...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-49948)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-49948 advisory. - In the Linux kernel, the following vulnerability has been resolved: net: add more sanity checks to...

CVE-2024-50033

In the Linux kernel, the following vulnerability has been resolved: slip: make slhcremember more robust against malicious packets syzbot found that slhcremember was missing checks against malicious packets 1. slhcremember only checked the size of the packet was at least 20, which is not good...

CVE-2024-50033 slip: make slhc_remember() more robust against malicious packets

In the Linux kernel, the following vulnerability has been resolved: slip: make slhcremember more robust against malicious packets syzbot found that slhcremember was missing checks against malicious packets 1. slhcremember only checked the size of the packet was at least 20, which is not good...

AZL-52620 CVE-2024-49948 affecting package kernel for versions less than 5.15.173.1-1

In the Linux kernel, the following vulnerability has been resolved: net: add more sanity checks to qdiscpktleninit One path takes care of SKBGSODODGY, assuming skb-len is bigger than hdrlen. virtionethdrtoskb does not fully dissect TCP headers, it only make sure it is at least 20 bytes. It is...

CVE-2024-49948

In the Linux kernel, the following vulnerability has been resolved: net: add more sanity checks to qdiscpktleninit One path takes care of SKBGSODODGY, assuming skb-len is bigger than hdrlen. virtionethdrtoskb does not fully dissect TCP headers, it only make sure it is at least 20 bytes. It is...

CVE-2024-49948 net: add more sanity checks to qdisc_pkt_len_init()

In the Linux kernel, the following vulnerability has been resolved: net: add more sanity checks to qdiscpktleninit One path takes care of SKBGSODODGY, assuming skb-len is bigger than hdrlen. virtionethdrtoskb does not fully dissect TCP headers, it only make sure it is at least 20 bytes. It is...

CVE-2024-49948 net: add more sanity checks to qdisc_pkt_len_init()

In the Linux kernel, the following vulnerability has been resolved: net: add more sanity checks to qdiscpktleninit One path takes care of SKBGSODODGY, assuming skb-len is bigger than hdrlen. virtionethdrtoskb does not fully dissect TCP headers, it only make sure it is at least 20 bytes. It is...

PT-2021-29528

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.12.13 Description The issue is related to out of bounds parsing of TCP options and headers. It was introduced in version v4.19 and fixed in Linux Kernel version v5.12.13. The actual impact and attack...

PT-2021-29448

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.46 Description The issue is related to out of bounds parsing of TCP options and headers. It was introduced in version v4.19 and fixed in version v5.10.46. The actual impact and attack plausibility have not...

PT-2021-29385

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.128 Description The issue is related to out of bounds parsing of TCP options and headers. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior t...

PT-2021-25454

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.46 Description: The issue is related to out of bounds parsing of TCP options and headers. It was introduced in version v4.19 and fixed in version v5.10.46. The actual impact and attack plausibility have no...

PT-2021-25534

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.12.13 Description: The issue is related to out of bounds parsing of TCP options and headers. It was introduced in version v4.19 and fixed in version v5.12.13. The actual impact and attack plausibility have no...

How To Enable Citrix SD-WAN Auto MTU Detect Feature

This article describes how to enable Citrix SD-WAN auto MTU detect feature. Background Adding headers to packets affect the maximum transmission MTU size Downstream devices may do their own encapsulation as well e.g. VPNs The per packet delivery that the Virtual WAN provides is accomplished by...

Design/Logic Flaw

The kernel in Apple iOS before 8.3, Apple OS X before 10.10.3, and Apple TV before 7.2 does not properly handle TCP headers, which allows man-in-the-middle attackers to cause a denial of service via unspecified vectors...

CVE-2015-1102

CVE-2015-1102 affects the Apple kernel in iOS before 8.3, OS X before 10.10.3, and Apple TV before 7.2, where improper handling of TCP headers can be exploited to cause a denial of service via unspecified vectors. The vulnerability allows a MITM-style condition that can crash or stall the device ...

PT-2015-5086

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 8.3 Apple OS X versions prior to 10.10.3 Apple TV versions prior to 7.2 Description The issue is related to the kernel's handling of TCP headers, which can be exploited by man-in-the-middle attackers to cause a deni...

CVE-2015-1102: Improper Input Validation

The kernel in Apple iOS before 8.3, Apple OS X before 10.10.3, and Apple TV before 7.2 does not properly handle TCP headers, which allows man-in-the-middle attackers to cause a denial of service via unspecified vectors...

Ubuntu 8.10 : linux regression (USN-661-1)

Version 2.6.27 of the Linux kernel changed the order of options in TCP headers. While this change was RFC-compliant, it was found that some old routers and consumer DSL modems would not route traffic for these systems when TCP timestamps were enabled. As a workaround, TCP timestamps were disabled...