UVI-2021-1000225 net: Only allow init netns to set default tcp cong to a restricted algo

net: Only allow init netns to set default tcp cong to a restricted algo This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.4 by commit...

GSD-2021-1000341 net: Only allow init netns to set default tcp cong to a restricted algo

net: Only allow init netns to set default tcp cong to a restricted algo This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.37 by commit...

USN-4968-2: LZ4 vulnerability

USN-4968-1 fixed a vulnerability in LZ4. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Original advisory details: It was discovered that LZ4 incorrectly handled certain memory operations. If a user or automated system were tricked into uncompressing a...

PT-2021-28882

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.119 Description The issue allows only the init netns to set the default TCP congestion algorithm to a restricted one. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2021-24922

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.191 Description: The issue allows only the init netns to set the default TCP congestion algorithm to a restricted algorithm. The actual impact and attack plausibility have not yet been proven...

PT-2021-28916

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.191 Description The issue allows only the init netns to set the default TCP congestion algorithm to a restricted algorithm. The actual impact and attack plausibility have not yet been proven. Recommendation...

PT-2021-24888

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.119 Description: The issue allows only the init netns to set the default TCP congestion algorithm to a restricted one. The actual impact and attack plausibility have not yet been proven. Recommendations: Fo...

PT-2021-28690

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.12.4 Description The issue allows only the init netns to set the default TCP congestion algorithm to a restricted one. This is an automated ID intended to aid in the discovery of potential security...

PT-2021-24696

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.12.4 Description The issue allows only the init netns to set the default TCP congestion algorithm to a restricted one. This is an automated ID intended to aid in the discovery of potential security...

PT-2021-24812

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.37 Description: The issue allows only the init netns to set the default TCP congestion algorithm to a restricted one. The actual impact and attack plausibility have not yet been proven. Recommendations: Fo...

PT-2021-28806

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.37 Description The issue allows only the init netns to set the default TCP congestion algorithm to a restricted one. The actual impact and attack plausibility have not yet been proven. Recommendations For...

Schneider Electric homeLYnk and spaceLYnk Unauthorized Access Vulnerability

Schneider Electric homeLYnk and spaceLYnk are both automation programming software for different logic controllers from Schneider Electric, France. An unauthorized access vulnerability exists in Schneider Electric homeLYnk and spaceLYnk, which arises from the presence of a broken or dangerous...

CVE-2021-22738

Use of a Broken or Risky Cryptographic Algorithm vulnerability exists in homeLYnk Wiser For KNX and spaceLYnk V2.60 and prior that could cause unauthorized access when credentials are discovered after a brute force attack...

Design/Logic Flaw

Use of a Broken or Risky Cryptographic Algorithm vulnerability exists in homeLYnk Wiser For KNX and spaceLYnk V2.60 and prior that could cause unauthorized access when credentials are discovered after a brute force attack...

CVE-2021-22738

Use of a Broken or Risky Cryptographic Algorithm vulnerability exists in homeLYnk Wiser For KNX and spaceLYnk V2.60 and prior that could cause unauthorized access when credentials are discovered after a brute force attack...

CVE-2021-22738

CVE-2021-22738 affects Schneider Electric homeLYnk and spaceLYnk (versions up to and including 2.60). The root cause is use of a broken or risky cryptographic algorithm that could allow unauthorized access after credentials are discovered via brute force. The Red Hat, CNVD, CVE/NVD entries corrob...

CVE-2021-22738

Use of a Broken or Risky Cryptographic Algorithm vulnerability exists in homeLYnk Wiser For KNX and spaceLYnk V2.60 and prior that could cause unauthorized access when credentials are discovered after a brute force attack...

CVE-2021-22160

If Apache Pulsar is configured to authenticate clients using tokens based on JSON Web Tokens JWT, the signature of the token is not validated if the algorithm of the presented token is set to "none". This allows an attacker to connect to Pulsar instances as any user incl. admins...

Code injection

If Apache Pulsar is configured to authenticate clients using tokens based on JSON Web Tokens JWT, the signature of the token is not validated if the algorithm of the presented token is set to "none". This allows an attacker to connect to Pulsar instances as any user incl. admins...

CVE-2021-22160

If Apache Pulsar is configured to authenticate clients using tokens based on JSON Web Tokens JWT, the signature of the token is not validated if the algorithm of the presented token is set to "none". This allows an attacker to connect to Pulsar instances as any user incl. admins...