CVE-2022-22423: Improper Input Validation

IBM Common Cryptographic Architecture CCA 5.x MTM for 4767 and CCA 7.x MTM for 4769 could allow a local user to cause a denial of service due to improper input validation. IBM X-Force ID: 223596...

PT-2024-8460 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.0.0-rc4-00133-g64ae13ed4784 Description: The vulnerability is related to a NULL dereference in the bond rr gen slave id function of the bonding driver. This occurs when a bond is initially created with an...

IBM AIX Command Injection Vulnerability

IBM AIX is an open standards-based UNIX operating system developed by International Business Machines IBM for the IBM Power architecture. IBM AIX versions 7.1, 7.2, 7.3, and VIOS version 3.1 contain a security vulnerability. Attackers exploit the vulnerability to gain root privileges...

GSD-2022-1006310 ext4: add EXT4_INODE_HAS_XATTR_SPACE macro in xattr.h

ext4: add EXT4INODEHASXATTRSPACE macro in xattr.h This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.326 by commit...

PT-2022-34078 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.137 Description: The issue concerns invalid memory access via the node onlineNUMA NO NODE function. It was introduced in version v2.6.33 and fixed in version v5.10.137. The actual impact and attack...

PT-2022-34432 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.256 Description: The issue is related to a warning for CONFIG CPUMASK OFFSTACK in the cpuinfo area of the MIPS architecture. The actual impact and potential for attack have not been proven yet...

PT-2022-34162 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to 5.10.137 Description: The issue concerns a potential security vulnerability in the Linux Kernel related to starting a new thread on arm64 architecture, where a syscall is not properly handled. The actual impact...

PT-2022-34428 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.256 Description: The issue is related to the arm64 architecture in the Linux Kernel, where a syscall is not properly handled when starting a new thread. The actual impact and attack plausibility of this...

PT-2022-34020 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.138 Description: The issue is related to the RISC-V architecture in the Linux Kernel. It involves the crash kexec function, which has a potential security impact that has not yet been fully proven. The...

PT-2022-33580 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.2 Description: The issue is related to the arm64 architecture and the selection of TRACE IRQFLAGS NMI SUPPORT. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

PT-2022-33474 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.2 Description: The issue is related to the removal of a UUID from the s390 debug log in the vfio/ccw component. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linu...

PT-2022-33600 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.2 Description: A potential security issue has been identified, although its actual impact and attack plausibility have not yet been proven. The issue is related to the cpuinfo functionality in the MIPS...

PT-2022-33627 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.13 through v5.19.1 Description: The issue concerns an incorrect user mode PC for kernel mode registers in RISC-V. This problem was introduced in version v5.13 and is fixed in Linux Kernel version v5.19.2. The actual...

PT-2022-33599 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.2 Description: The issue is related to the Linux Kernel, where the kasan kernel address sanitizer does not instrument stacktrace.c on arm64 architectures. The actual impact and attack plausibility have not...

PT-2022-33642 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.13 through v5.19.0 Description: The issue concerns the arm64 architecture, specifically the setting of UXN on swapper page tables. The actual impact and attack plausibility have not yet been proven. Recommendations: F...

CISA and NSA Publish Open Radio Access Network Security Considerations

CISA and the National Security Agency NSA have published Open Radio Access Network Security Considerations. This product—generated by the Enduring Security Framework ESF Open Radio Access Network RAN Working Panel, a subgroup within the cross-sector working group—assessed the benefits and securit...

kernel: KVM: x86/mmu: make apf token non-zero to fix bug

A hang vulnerability is possible in the Linux kernel in arch/x86/kvm/mmu/mmu.c. This issue may lead to compromised availability...

Microsoft Windows DPAPI 安全漏洞

Microsoft Windows is a suite of operating systems for personal devices from the U.S.-based Microsoft Corporation. A security vulnerability exists in Microsoft Windows DPAPI Data Protection Application Programming Interface. The following products and versions are affected: Windows 11 for x64-base...

Academy Learning Management System 5.7 Shell Upload

Exploit Title: Academy Learning Management System 5.7 Shell Upload Exploit Author: th3d1gger Vendor Homepage: https://codecanyon.net Software Link: https://codecanyon.net/item/academy-course-based-learning-management-system/22703468 Version: 5.7 Tested on Ubuntu 18.04 Totally wrong architecture f...

CVE-2022-33178. A vulnerability in the radius authentication system could allow arbitrary code execution.

A vulnerability in the radius authentication system of Brocade Fabric OS before Brocade Fabric OS 9.0 could allow a remote attacker to execute arbitrary code on the Brocade switch. Due to improper input validation, the privileged attacker could provide a script as Brocade-Auth-Role parameter that...