GSD-2022-1007947 tipc: fix the msg->req tlv len check in tipc_nl_compat_name_table_dump_header

tipc: fix the msg-req tlv len check in tipcnlcompatnametabledumpheader This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.79 by commit...

PT-2022-36044 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.9 Description: A potential security issue exists due to an incorrect check of the msg-req TLV length in the tipc nl compat name table dump header function. The actual impact and attack plausibility have not...

PT-2022-36425 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.225 Description: A potential security issue exists due to an incorrect check of the msg-req TLV length in the tipc nl compat name table dump header function. The actual impact and attack plausibility have n...

PT-2022-36500 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.267 Description: A potential security issue exists due to an incorrect check of the msg-req TLV length in the tipc nl compat name table dump header function. The actual impact and attack plausibility have...

PT-2022-36331

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.155 Description The issue concerns a problem with the msg-req TLV length check in the tipc nl compat name table dump header function. It was introduced in version v5.0 and fixed in version v5.10.155. The...

PT-2022-36609

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.334 Description The issue concerns a problem with the msg-req tlv len check in the tipc nl compat name table dump header function. The actual impact and potential for attack have not been proven yet...

SUSE: Security Advisory (SUSE-SU-2022:3683-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2022:3683-1 Security update for libksba

This update for libksba fixes the following issues: - CVE-2022-3515: Fixed a possible overflow in the TLV parser bsc1204357...

SUSE-SU-2022:3681-1 Security update for libksba

This update for libksba fixes the following issues: - CVE-2022-3515: Fixed a possible overflow in the TLV parser bsc1204357...

Stack-based Buffer Overflow

libksba is vulnerable to stack-based buffer overflow. The vulnerability exists due to an overflow directly in the TLV parser which allows an attacker to execute remote codes...

CVE-2022-22224

An Improper Check or Handling of Exceptional Conditions vulnerability in the processing of a malformed OSPF TLV in Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent attacker to cause the periodic packet management daemon PPMD process to go into an infinite loop,...

Input validation

An Improper Check or Handling of Exceptional Conditions vulnerability in the processing of a malformed OSPF TLV in Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent attacker to cause the periodic packet management daemon PPMD process to go into an infinite loop,...

CVE-2022-22224 Junos OS and Junos OS Evolved: PPMD goes into infinite loop upon receipt of malformed OSPF TLV

An Improper Check or Handling of Exceptional Conditions vulnerability in the processing of a malformed OSPF TLV in Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent attacker to cause the periodic packet management daemon PPMD process to go into an infinite loop,...

CVE-2022-22224: Improper Check or Handling of Exceptional Conditions

An Improper Check or Handling of Exceptional Conditions vulnerability in the processing of a malformed OSPF TLV in Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent attacker to cause the periodic packet management daemon PPMD process to go into an infinite loop,...

PT-2022-6680 · Juniper Networks · Junos Evolved +1

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions prior to 19.1R3-S9 Juniper Networks Junos OS versions 19.2 prior to 19.2R3-S5 Juniper Networks Junos OS versions 19.3 prior to 19.3R3-S3 Juniper Networks Junos OS versions 19.4 prior to 19.4R3-S9 Juniper...

Juniper Junos OS Vulnerability (JSA69874)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA69874 advisory. - An Improper Check or Handling of Exceptional Conditions vulnerability in the processing of a malformed OSPF TLV in Juniper Networks Junos OS and Junos OS Evolved allows an...

CVE-2022-3354

A vulnerability has been found in Open5GS up to 2.4.10 and classified as problematic. This vulnerability affects unknown code in the library lib/core/ogs-tlv-msg.c of the component UDP Packet Handler. The manipulation leads to denial of service. The exploit has been disclosed to the public and ma...

CVE-2022-3354 Open5GS UDP Packet ogs-tlv-msg.c denial of service

A vulnerability has been found in Open5GS up to 2.4.10 and classified as problematic. This vulnerability affects unknown code in the library lib/core/ogs-tlv-msg.c of the component UDP Packet Handler. The manipulation leads to denial of service. The exploit has been disclosed to the public and ma...

CVE-2022-3354: Improper Resource Shutdown or Release

A vulnerability has been found in Open5GS up to 2.4.10 and classified as problematic. This vulnerability affects unknown code in the library lib/core/ogs-tlv-msg.c of the component UDP Packet Handler. The manipulation leads to denial of service. The exploit has been disclosed to the public and ma...

CVE-2021-33315

The TRENDnet TI-PG1284i switchhw v2.0R prior to version 2.0.2.S0 suffers from an integer underflow vulnerability. This vulnerability exists in its lldp related component. Due to lack of proper validation on length field of PortID TLV, by sending a crafted lldp packet to the device, integer...