Security Bulletin: Vulnerability in Network Time Protocol (NTP) affects IBM Integrated Analytics System [CVE-2023-26552]

Summary Redhat provided Network Time Protocol NTP is used by IBM Integrated Analytics System. IBM Integrated Analytics System has addressed the applicable CVE CVE-2023-26552 Vulnerability Details CVEID:CVE-2023-26552 DESCRIPTION: NTP is vulnerable to a denial of service, caused by an out-of-bound...

The vulnerability of the NTP synchronization protocol lies in the use of insufficiently random values, which allows a perpetrator to cause a service failure.

The vulnerability of the NTP synchronization protocol lies in the use of insufficiently random values. Exploiting this vulnerability allows a remote attacker to cause a service failure...

PTZOptics PT30X-SDI/NDI-xx 安全漏洞

PTZOptics PT30X-SDI/NDI-xx is a series of HD cameras from PTZOptics. A security vulnerability exists in PTZOptics PT30X-SDI/NDI-xx versions prior to 6.3.40, which stems from insufficient validation of the ntpaddr configuration value. An attacker could use this vulnerability to execute arbitrary...

ptp: fix integer overflow in max_vclocks_store

...

The vulnerability of the microprogrammed software in the ControlLogix/GuardLogix 5580 and CompactLogix/Compact GuardLogix 5380 systems, related to errors in processing input data, allows a intruder to trigger a service failure.

The vulnerability of the microprogrammed software in programmable logic controllers such as ControlLogix/GuardLogix 5580 and CompactLogix/Compact GuardLogix 5380 is related to errors in processing input data. Exploiting this vulnerability can allow an attacker, operating remotely, to cause a...

DEBIAN-CVE-2024-45238

An issue was discovered in Fort before 1.6.3. A malicious RPKI repository that descends from a trusted Trust Anchor can serve via rsync or RRDP a resource certificate containing a bit string that doesn't properly decode into a Subject Public Key. OpenSSL does not report this problem during parsin...

kernel: ice: Don't process extts if PTP is disabled

In the Linux kernel, the following vulnerability has been resolved: ice: Don't process extts if PTP is disabled The iceptpexttsevent function can race with iceptprelease and result in a NULL pointer dereference which leads to a kernel panic. Panic occurs because the iceptpexttsevent function call...

kernel: bnxt: prevent skb UAF after handing over to PTP worker

A possible use-after-free after handing over to PTP worker was found in the Linux kernel. This may lead to a crash...

kernel: bnxt: prevent skb UAF after handing over to PTP worker

A possible use-after-free after handing over to PTP worker was found in the Linux kernel. This may lead to a crash...

SUSE CVE-2024-42107

In the Linux kernel, the following vulnerability has been resolved: ice: Don't process extts if PTP is disabled The iceptpexttsevent function can race with iceptprelease and result in a NULL pointer dereference which leads to a kernel panic. Panic occurs because the iceptpexttsevent function call...

SUSE CVE-2024-42139

In the Linux kernel, the following vulnerability has been resolved: ice: Fix improper extts handling Extts events are disabled and enabled by the application ts2phc. However, in case where the driver is removed when the application is running, a specific extts event remains enabled and can cause ...

The vulnerability of the /goform/set_ntp file in the HTTP Request Handler of the microprogramming-based routing software D-Link DIR-823X AX3000 allows a attacker to execute arbitrary code.

The vulnerability of the /goform/setntp file in the HTTP Request Handler of the microprogramming-based routing software for D-Link DIR-823X AX3000 router is related to insufficient input data validation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a...

AZL-54194 CVE-2024-42139 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: ice: Fix improper extts handling Extts events are disabled and enabled by the application ts2phc. However, in case where the driver is removed when the application is running, a specific extts event remains enabled and can cause ...

DEBIAN-CVE-2024-42139

In the Linux kernel, the following vulnerability has been resolved: ice: Fix improper extts handling Extts events are disabled and enabled by the application ts2phc. However, in case where the driver is removed when the application is running, a specific extts event remains enabled and can cause ...

AZL-55217 CVE-2024-42107 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: ice: Don't process extts if PTP is disabled The iceptpexttsevent function can race with iceptprelease and result in a NULL pointer dereference which leads to a kernel panic. Panic occurs because the iceptpexttsevent function call...

AZL-55184 CVE-2024-42107 affecting package kernel 6.6.126.1-1

In the Linux kernel, the following vulnerability has been resolved: ice: Don't process extts if PTP is disabled The iceptpexttsevent function can race with iceptprelease and result in a NULL pointer dereference which leads to a kernel panic. Panic occurs because the iceptpexttsevent function call...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the iceptpextsevent function being processed in the ice module despite PTP being disabled, which could lead ...

PT-2024-29753 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.6.43 Description: The issue is related to the igc driver in the Linux kernel, where the igc ptp init function is called before register netdev, resulting in a log entry using an uninitialized netdev. This caus...

PT-2024-38056 · F Logic · F-Logic Datacube3

Name of the Vulnerable Software and Affected Versions: F-logic DataCube3 version 1.0 Description: A critical issue has been found in the HTTP POST Request Handler component, specifically in the file /admin/config time sync.php. The manipulation of the ntp server argument leads to os command...

kernel: net: micrel: Fix receiving the timestamp in the frame for lan8841

In the Linux kernel, the following vulnerability has been resolved: net: micrel: Fix receiving the timestamp in the frame for lan8841 The blamed commit started to use the ptp workqueue to get the second part of the timestamp. And when the port was set down, then this workqueue is stopped. But if...