How to Configure Multipath Boot from SAN during XenServer Upgrade or Patch

This article describes how to configure multipath boot from Storage Area Network SAN when upgrading or patching XenServer. The upgrade or patching of XenServer can leave the initial ram disk initrd without multipath support...

kernel: can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds

In the Linux kernel, the following vulnerability has been resolved: can: dev: canputechoskb: don't crash kernel if canpriv::echoskb is accessed out of bounds If the "struct canpriv::echooskb" is accessed out of bounds, this would cause a kernel crash. Instead, issue a meaningful warning message a...

kernel: wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes

CVE-2024-35789 is a vulnerability in the Linux kernel’s Wi-Fi subsystem mac80211. It occurs when a station is moved out of a VLAN, and the VLAN is subsequently deleted. A reference to the deleted VLAN’s network device may remain, leading to a use-after-free condition. This can result in system...

CVE-2024-6044

Certain models of D-Link wireless routers have a path traversal vulnerability. Unauthenticated attackers on the same local area network can read arbitrary system files by manipulating the URL...

CVE-2024-6044 D-Link router - Arbitrary File Reading

Certain models of D-Link wireless routers have a path traversal vulnerability. Unauthenticated attackers on the same local area network can read arbitrary system files by manipulating the URL...

The vulnerability of the pch_can_rx_normal() function in the Linux operating system’s CAN controller area network driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the pchcanrxnormal function in the drivers/net/can/pchcan.c file of the Linux operating system’s CAN controller area network driver is related to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of Teltonika RUT240 router microprogramming software, related to improper access control, allows attackers to bypass existing security restrictions and gain unauthorized access to the IPv6 WAN interface.

The vulnerability of Teltonika RUT240 router microprogramming software is related to improper access control. Exploiting this vulnerability can allow a malicious actor to bypass existing security restrictions and gain unauthorized access to the IPv6 WAN interface...

The vulnerability of microprogramming software in VMware SD-WAN Edge devices, related to authentication procedures that allow attackers to access the BIOS configuration.

The vulnerability of microprogramming software in VMware SD-WAN Edge devices related to authentication procedures’ deficiencies. Exploiting this vulnerability could allow attackers to access the BIOS configuration...

Mercusys MW325R 安全漏洞

The Mercusys MW325R is an enhanced wireless router from Mercusys of China. A security vulnerability exists in the Mercusys MW325R V31.11.0 221019 version, which stems from the fact that no authentication will be performed on data sent by the user, and a WAN attacker can make the management...

UBUNTU-CVE-2021-47520

In the Linux kernel, the following vulnerability has been resolved: can: pchcan: pchcanrxnormal: fix use after free After calling netifreceiveskbskb, dereferencing skb is unsafe. Especially, the canframe cf which aliases skb memory is dereferenced just after the call netifreceiveskbskb. Reorderin...

PT-2024-11294 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue arises from the tcf skbmod act function assuming that packets use Ethernet as their L2 protocol, which is not always the case. This can lead to silent corruption of packets...

Broadcom Brocade SANnav 安全漏洞

Broadcom Brocade SANnav is a suite of SAN management platforms from Broadcom USA. A security vulnerability exists in Brocade SANnav versions v2.3.1 and v2.3.0a, which stems from a Docker instance within the appliance that has an insecure mounting point that allows read and write access to sensiti...

Broadcom Brocade SANnav 安全漏洞

Broadcom Brocade SANnav is a suite of SAN management platforms from Broadcom USA. A security vulnerability exists in Brocade SANnav versions v2.3.1 and v2.3.0a, which stems from Docker instances having an insecure architecture and configuration, resulting in multiple vulnerabilities. the Docker...

Tenda AC500 安全漏洞

Tenda AC500 is the wireless controller device introduced, designed for small and medium-sized businesses, with support for managing wireless networks across VLANs. A buffer overflow vulnerability exists in the Tenda AC500, which stems from the vlan parameter of the formSetVlanInfo method failing ...

PT-2024-2406 · Tenda · Tenda Ac15

Name of the Vulnerable Software and Affected Versions: Tenda AC15 versions 15.03.05.18 through 15.03.20 multi Description: A critical issue affects the function formSetSpeedWan of the file /goform/SetSpeedWan. The manipulation of the argument speed dir leads to a stack-based buffer overflow. This...

PT-2024-7141 · NetGear · Netgear Ex6120

Name of the Vulnerable Software and Affected Versions: Netgear EX6120 version 1.0.0.68 Description: The issue is related to a Command Injection vulnerability in the genie fix2.cgi script via the wan dns1 pri parameter. This vulnerability may allow a remote attacker to execute arbitrary commands...

kernel: NULL pointer dereference in can_rcv_filter

A NULL pointer dereference issue was found in the can protocol in net/can/afcan.c in the Linux kernel, where mlpriv may not be initialized in the receive path of CAN frames. This flaw allows a local user to crash the system or cause a denial of service...

CVE-2023-31728

Teltonika RUT240 devices with firmware before 07.04.2, when bridge mode is used, sometimes make SSH and HTTP services available on the IPv6 WAN interface even though the UI shows that they are only available on the LAN interface...

Teltonika RUT240 Security Vulnerability

Teltonika RUT router is a series of industrial routers. A security vulnerability exists in Teltonika RUT240 versions prior to 07.04.2 that stems from SSH and HTTP services sometimes being provided on the IPv6 WAN interface when using bridge mode...

CVE-2024-24775

When a virtual server is enabled with VLAN group and SNAT listener is configured, undisclosed traffic can cause the Traffic Management Microkernel TMM to terminate. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...