Ubuntu 20.04 LTS / 22.04 LTS : Linux kernel vulnerabilities (USN-5594-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5594-1 advisory. Asaf Modelevsky discovered that the IntelR 10GbE PCI Express ixgbe Ethernet driver for the Linux kernel performed insufficient control flow...

CVE-2022-1841 Out-of-bound write in tcp_flags

In subsys/net/ip/tcp.c , function tcpflags , when the incoming parameter flags is ECN or CWR , the buf will out-of-bounds write a byte zero...

PT-2022-14159 · Zephyrproject +1 · Zephyr

Name of the Vulnerable Software and Affected Versions: No specific software or version is mentioned. Description: The issue occurs in the tcp flags function within the subsys/net/ip/tcp.c file. When the incoming parameter flags is set to ECN or CWR, it causes an out-of-bounds write of a byte with...

Denial Of Service (DoS)

dlt-daemon is vulnerable to denial of service DoS attacks. An issue in dltconfigfileparser.c function allows attackers to cause a double free condition via crafted TCP packets resulting in denial of service conditions...

Hitachi Energy RTU500 series

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: Hitachi Energy Equipment: RTU500 series Vulnerability: Improper Input Validation 2. RISK EVALUATION Successful exploitation of this vulnerability could cause an internal buffer overflow, which can...

SUSE-SU-2022:2910-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-2639: Fixed integer underflow that could lead to out-of-bounds write in reservesfasize bsc1202154. - CVE-2020-36516: Fixed TCP session data injection...

Ubuntu: Security Advisory (USN-3956-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Hitachi Energy RTU500 series CMU firmware buffer overflow vulnerability

RTU500 is a series of industrial control components from Hitachi, Japan, mainly used in industrial control systems. A buffer overflow vulnerability exists in the Hitachi Energy RTU500 series CMU firmware HCI Modbus TCP function. The vulnerability, which originates when HCI Modbus TCP is enabled a...

Ubuntu: Security Advisory (USN-2447-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MGASA-2022-0305 Updated kernel packages fix security vulnerabilities

This kernel update is based on upstream 5.15.62 and fixes at least the following security issues: A use-after-free flaw was found in the Linux kernel Atheros wireless adapter driver in the way a user forces the ath9khtcwaitfortarget function to fail with some input messages. This flaw allows a...

Updated kernel packages fix security vulnerabilities

This kernel update is based on upstream 5.15.62 and fixes at least the following security issues: A use-after-free flaw was found in the Linux kernel Atheros wireless adapter driver in the way a user forces the ath9khtcwaitfortarget function to fail with some input messages. This flaw allows a...

CISA Warns of Active Exploitation of Palo Alto Networks' PAN-OS Vulnerability

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Monday added a security flaw impacting Palo Alto Networks PAN-OS to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. The high-severity vulnerability, tracked as CVE-2022-0028 CVSS score: 8.6, i...

PT-2022-4414 · Hitachi Energy · Rtu500

Name of the Vulnerable Software and Affected Versions: Hitachi Energy RTU500 versions affected versions not specified Description: The issue is related to a vulnerability in the HCI interface, functioning via the Modbus TCP protocol, which can cause a buffer overflow in memory. This can be...

SUSE SLES12 Security Update : open-iscsi (SUSE-SU-2022:2861-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2022:2861-1 advisory. - CVE-2020-17437: Fixed an out of bounds memory access when the TCP urgent flag is set. bsc1179908. Non-security fixes: - Fix an issue with ARP booting...

Hitachi Energy RTU500

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: Hitachi Energy Equipment: RTU500 Series Vulnerability: Stack-based Buffer Overflow 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to send a specially crafted...

The vulnerability of the RemoteCapture function in the microprogrammed software of industrial switches SCALANCE W1788-1 M12, SCALANCE W1788-2 EEC M12, SCALANCE W1788-2 M12, and SCALANCE W1788-2IA M12 allows a intruder to trigger a service failure.

The vulnerability of the RemoteCapture function in the microprogrammed software of industrial switches SCALANCE W1788-1 M12, SCALANCE W1788-2 EEC M12, SCALANCE W1788-2 M12, and SCALANCE W1788-2IA M12 exists due to insufficient verification of input data. Exploiting this vulnerability can allow a...

Security Bulletin: IBM Tivoli Storage Manager FastBack Server Opcode 1332 Directory Traversal Remote Code Execution Vulnerability (CVE-2015-1942)

Summary An attacker can force IBM Tivoli Storage Manager FastBack Server to write arbitrary data to an arbitrary file under the privilege of SYSTEM. Vulnerability Details CVEID: CVE-2015-1942 DESCRIPTION: IBM Tivoli Storage Manager FastBack could allow a remote attacker to write and execute a fil...

Security Bulletin: IBM Tivoli Storage Manager FastBack Server Opcode 1329 Information Disclosure Vulnerability (CVE-2015-1941)

Summary An attacker can force IBM Tivoli Storage Manager FastBack Server to read an arbitrary file and return the contents under the privilege of SYSTEM. Vulnerability Details CVEID: CVE-2015-1941 DESCRIPTION: IBM Tivoli Storage Manager FastBack could allow a remote attacker to read any file on t...

Important: kernel

Issue Overview: An out-of-bounds write flaw was found in the Linux kernels framebuffer-based console driver functionality in the way a user triggers ioctl FBIOPUTVSCREENINFO with malicious data. This flaw allows a local user to crash or potentially escalate their privileges on the system...

Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2022-2225)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...