CVE-2022-26657

CVE-2022-26657 affects Pexip Infinity prior to 27.3, where an input validation error in One Touch Join allows remote attackers to trigger a software abort, causing denial of service. The issue is documented across multiple feeds (Red Hat, CNVD, NVD) with the same impact. Affected product/version:...

CVE-2022-26656

Pexip Infinity before 27.3 allows remote attackers to trigger a software abort, and possibly enumerate usernames, via One Touch Join...

CVE-2022-26656

CVE-2022-26656 affects Pexip Infinity prior to 27.3. The vulnerability is described across multiple sources as an input validation error in the One Touch Join flow that can allow remote attackers to trigger a software abort and potentially enumerate usernames. Concrete affected product/version: P...

CVE-2022-26655

Pexip Infinity 27.x before 27.3 has Improper Input Validation. The client API allows remote attackers to trigger a software abort via a gateway call into Teams...

CVE-2022-26654

Pexip Infinity vulnerable before 27.3, where an HTTP-based flaw allows remote attackers to force a software abort. Products affected: Pexip Infinity prior to 27.3 (per CVE-2022-26654). The issue is described as an injection/abort condition triggered via HTTP, with impact stated as a software abor...

PT-2022-18702 · Pexip · Pexip Infinity

Name of the Vulnerable Software and Affected Versions: Pexip Infinity versions prior to 27.3 Description: The issue allows remote attackers to trigger a software abort via HTTP. Recommendations: For versions prior to 27.3, update to version 27.3 or later to resolve the issue...

PT-2022-18704 · Pexip · Pexip Infinity

Name of the Vulnerable Software and Affected Versions: Pexip Infinity versions prior to 27.3 Description: The issue allows remote attackers to trigger a software abort via H.323. Recommendations: For versions prior to 27.3, update to version 27.3 or later to resolve the issue...

Pexip Infinity 安全漏洞

Pexip Infinity Pexip Video Conferencing Cloud Collaboration Platform is a video conferencing cloud collaboration platform from Pexip, a Norwegian company. Pexip Infinity is vulnerable to an input validation error that could be exploited by an attacker to trigger a software abort via One Touch Joi...

PT-2022-18701 · Pexip · Pexip Infinity

Name of the Vulnerable Software and Affected Versions: Pexip Infinity versions prior to 27.3 Description: The issue allows remote attackers to trigger a software abort via One Touch Join. Recommendations: For versions prior to 27.3, update to version 27.3 or later to resolve the issue...

PT-2022-18703 · Pexip · Pexip Infinity

Name of the Vulnerable Software and Affected Versions: Pexip Infinity versions prior to 27.3 Description: The issue allows remote attackers to trigger a software abort via Epic Telehealth. Recommendations: For versions prior to 27.3, update to version 27.3 or later to resolve the issue...

PT-2022-17987 · Pexip · Pexip Infinity

Name of the Vulnerable Software and Affected Versions: Pexip Infinity versions prior to 27.3 Description: The issue allows remote attackers to force a software abort via HTTP. Recommendations: For versions prior to 27.3, update to version 27.3 or later to resolve the issue...

PT-2022-21188 · Pexip · Pexip Infinity

Name of the Vulnerable Software and Affected Versions: Pexip Infinity versions prior to 28.1 Description: The issue allows remote attackers to trigger a software abort via G.719. Recommendations: For versions prior to 28.1, update to version 28.1 or later to resolve the issue...

PT-2022-18696 · Pexip · Pexip Infinity

Name of the Vulnerable Software and Affected Versions: Pexip Infinity versions 27.0 through 27.2 Description: The issue allows remote attackers to trigger a software abort via HTTP. Recommendations: For versions 27.0 through 27.2, update to version 27.3 or later to resolve the issue...

Pexip Infinity 安全漏洞

Pexip Infinity Pexip Video Conferencing Cloud Collaboration Platform is a video conferencing cloud collaboration platform from the Norwegian company Pexip. Pexip Infinity is vulnerable to an input validation error that could be exploited by attackers to trigger a software abort, resulting in a...

Pexip Infinity 输入验证错误漏洞

Pexip Infinity Pexip Video Conferencing Cloud Collaboration Platform is a video conferencing cloud collaboration platform from the Norwegian company Pexip. Pexip Infinity is vulnerable to an input validation error that could be exploited by attackers to trigger a software abort, resulting in a...

PT-2022-18700 · Pexip · Pexip Infinity

Name of the Vulnerable Software and Affected Versions: Pexip Infinity versions prior to 27.3 Description: The issue allows remote attackers to trigger a software abort via One Touch Join. Recommendations: For versions prior to 27.3, update to version 27.3 or later to resolve the issue...

Pexip Infinity 安全漏洞

Pexip Infinity Pexip Video Conferencing Cloud Collaboration Platform is a video conferencing cloud collaboration platform from the Norwegian company Pexip. Pexip Infinity is vulnerable to an input validation error that could be exploited by attackers to trigger a software abort, resulting in a...

Important: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

Important: kernel security and bug fix update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: buffer overflow in IPsec ESP transformation code CVE-2022-27666 kernel: out-of-bounds read in fbcongetfont function CVE-2020-28915 For more details about the security issues, including th...

GSD-2022-1003400 scsi: lpfc: Fix SCSI I/O completion and abort handler deadlock

scsi: lpfc: Fix SCSI I/O completion and abort handler deadlock This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.46 by commit...