SUSE CVE-2022-42328

Guests can trigger deadlock in Linux netback driver This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. The patch for XSA-392 introduced another issue which might result in a deadlock when trying to free the SKB of a packe...

SUSE CVE-2022-44566

A denial of service vulnerability present in ActiveRecord's PostgreSQL adapter 7.0.4.1 and 6.1.7.1. When a value outside the range for a 64bit signed integer is provided to the PostgreSQL connection adapter, it will treat the target column type as numeric. Comparing integer values against numeric...

SUSE CVE-2022-45141

Since the Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability was disclosed by Microsoft on Nov 8 2022 and per RFC8429 it is assumed that rc4-hmac is weak, Vulnerable Samba Active Directory DCs will issue rc4-hmac encrypted tickets despite the target server supporting better encryption...

SUSE CVE-2023-22796

A regular expression based DoS vulnerability in Active Support 6.1.7.1 and 7.0.4.1. A specially crafted string passed to the underscore method can cause the regular expression engine to enter a state of catastrophic backtracking. This can cause the process to use large amounts of CPU and memory,...

UBUNTU-CVE-2023-23529

A type confusion issue was addressed with improved checks. This issue is fixed in iOS 15.7.4 and iPadOS 15.7.4, iOS 16.3.1 and iPadOS 16.3.1, macOS Ventura 13.2.1, Safari 16.3. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this...

CVE-2023-21816

Windows Active Directory Domain Services API Denial of Service Vulnerability...

CVE-2023-21816

Windows Active Directory Domain Services API Denial of Service Vulnerability...

CVE-2023-21816

Windows Active Directory Domain Services API Denial of Service Vulnerability...

Denial of service

Windows Active Directory Domain Services API Denial of Service Vulnerability...

CVE-2023-21816 Windows Active Directory Domain Services API Denial of Service Vulnerability

...

CVE-2023-21816

No concrete technical details about CVE-2023-21816 are present in the connected documents. The initial description only notes a Windows AD DS DoS. Monitor official advisories and vendor updates for remediation, affected versions, impact, and patch information.

CVE-2023-21816 Windows Active Directory Domain Services API Denial of Service Vulnerability

...

February 14, 2023—KB5022840 (OS Build 17763.4010) - EXPIRED

None None...

Windows Active Directory Domain Services API Denial of Service Vulnerability

...

Description of the security update for SharePoint Server 2019: February 14, 2023 (KB5002342)

None None...

February 14, 2023—KB5022842 (OS Build 20348.1547)

None None...

Description of the security update for SharePoint Server Subscription Edition: February 14, 2023 (KB5002353)

None None...

JSA10648 - 2014-09 Out of Cycle Security Bulletin: Multiple Products: Shell Command Injection Vulnerability in Bash

Edit: 4th of March 2024 - This isn't an active SA and any new edits are part of an article maintenance project. Bash or the Bourne again shell has vulnerabilities in the way it handles environment variables when it is invoked. Under some scenarios, network based remote attackers can inject shell...

JSA10413 - Pulse Connect Secure (PCS) and Pulse Policy Secure (PPS) products - Security Bundle - Authentication & Authorization Issue

Ivanti 4th of March 2024 - This isn't an active SA and any new edits are part of an article maintenance project. Authentication & Authorization vulnerability found and fixed through a combination of internal and external proactive security testing: - When using NTLMv1 or NTLMv2 authentication...

Patch Now: Apple's iOS, iPadOS, macOS, and Safari Under Attack with New Zero-Day Flaw

Apple on Monday rolled out security updates for iOS, iPadOS, macOS, and Safari to address a zero-day flaw that it said has been actively exploited in the wild. Tracked as CVE-2023-23529 , the issue relates to a type confusion bug in the WebKit browser engine that could be activated when processin...