Virtuozzo Hybrid Infrastructure 5.2 Hotfix 1 (5.2.0-141)

This update provides important fixes for the compute service. Vulnerability id: VSTOR-56942 If a virtual machine is connected to a VLAN-based physical network, the VM may have no network connectivity after its migration due to a missing ARP announcement. Vulnerability id: VSTOR-56792, VSTOR-56789...

VLANPWN - VLAN Attacks Toolkit

VLAN attacks toolkit DoubleTagging.py - This tool is designed to carry out a VLAN Hopping attack. As a result of injection of a frame with two 802.1Q tags, a test ICMP request will also be sent. DTPHijacking.py - A script for conducting a DTP Switch Spoofing/Hijacking attack. Sends a malicious...

PT-2022-32377

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.15 Description The issue is related to a NULL pointer dereference in dsa port reset vlan filtering. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-32445

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.13 Description A memory leak issue was discovered in the vlan newlink function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v5.18.1...

Fedora: Security Advisory for golang-github-mdlayher-ethernet (FEDORA-2022-ea8f4e232d)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 36 Update: golang-github-mdlayher-ethernet-0-0.6.20201109git0394541.fc36

The Golang package ethernet implements marshaling and unmarshaling of IEEE 802.3 Ethernet II frames and IEEE 802.1Q VLAN tags...

Fedora: Security Advisory for golang-github-mdlayher-ethernet (FEDORA-2022-3969b64d4b)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 35 Update: golang-github-mdlayher-ethernet-0-0.5.20201109git0394541.fc35

The Golang package ethernet implements marshaling and unmarshaling of IEEE 802.3 Ethernet II frames and IEEE 802.1Q VLAN tags...

PT-2025-8569

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak issue has been identified in the Linux kernel, specifically in the vlan newlink function. This occurs when a memory allocation fails in vlan changelink after other...

BD Pyxis

1. EXECUTIVE SUMMARY CVSS v3 8.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Becton, Dickinson and Company BD Equipment: Pyxis Vulnerability: Not Using Password Aging 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to gain access to...

GHSA-8Q95-JJ7P-X93X Openstack Neutron vulnerable to eavesdropping on private traffic

Live-migrated instances are briefly able to inspect traffic for other instances on the same hypervisor. This brief window could be extended indefinitely if the instance's port is set administratively down prior to live-migration and kept down after the migration is complete. This is possible due ...

GSD-2022-1001807 net: hns3: add vlan list lock to protect vlan list

net: hns3: add vlan list lock to protect vlan list This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.33 by commit...

GSD-2022-1001241 net: dsa: Avoid cross-chip syncing of VLAN filtering

net: dsa: Avoid cross-chip syncing of VLAN filtering This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.2 by commit...

GSD-2022-1001168 net: hns3: add vlan list lock to protect vlan list

net: hns3: add vlan list lock to protect vlan list This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.2 by commit...

PT-2022-29514

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.2 Description The issue concerns the net: dsa, which is related to VLAN filtering. It has been noted that cross-chip syncing of VLAN filtering should be avoided. The actual impact and attack plausibility ha...

PT-2022-29441

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.2 Description The issue is related to the lack of protection for the VLAN list in the hns3 network driver. This could potentially lead to security vulnerabilities, although the actual impact and attack...

GSD-2022-1000634 net: bridge: vlan: fix memory leak in __allowed_ingress

net: bridge: vlan: fix memory leak in allowedingress This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.5 by commit...

PT-2022-28831

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.16 through v5.16.10 Description A use-after-free issue was discovered in the ocelot vlan del function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions v5.16...

GSD-2022-1000267 net: bridge: vlan: fix memory leak in __allowed_ingress

net: bridge: vlan: fix memory leak in allowedingress This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.19 by commit...

GSD-2022-1000203 net: bridge: vlan: fix memory leak in __allowed_ingress

net: bridge: vlan: fix memory leak in allowedingress This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.96 by commit...