CVE-2024-52615

A flaw was found in Avahi-daemon, which relies on fixed source ports for wide-area DNS queries. This issue simplifies attacks where malicious DNS responses are injected...

DEBIAN-CVE-2024-52615

A flaw was found in Avahi-daemon, which relies on fixed source ports for wide-area DNS queries. This issue simplifies attacks where malicious DNS responses are injected...

CVE-2024-52615

A flaw was found in Avahi-daemon, which relies on fixed source ports for wide-area DNS queries. This issue simplifies attacks where malicious DNS responses are injected...

CVE-2024-52616

A flaw was found in the Avahi-daemon, where it initializes DNS transaction IDs randomly only once at startup, incrementing them sequentially after that. This predictable behavior facilitates DNS spoofing attacks, allowing attackers to guess transaction IDs...

CVE-2024-52616

A flaw was found in the Avahi-daemon, where it initializes DNS transaction IDs randomly only once at startup, incrementing them sequentially after that. This predictable behavior facilitates DNS spoofing attacks, allowing attackers to guess transaction IDs...

CVE-2024-52615 Avahi: avahi wide-area dns uses constant source port

A flaw was found in Avahi-daemon, which relies on fixed source ports for wide-area DNS queries. This issue simplifies attacks where malicious DNS responses are injected...

CVE-2024-52615

CVE-2024-52615 affects Avahi-daemon (DNS service discovery) with a flaw in fixed source ports for wide-area DNS queries, enabling easier DNS response injection. Public advisories (SUSE/SLE, EulerOS, MiracleLinux/OpenSUSE openSUSE, Unity Linux, etc.) reflect remediation via security fixes (e.g., S...

CVE-2024-52615 Avahi: avahi wide-area dns uses constant source port

A flaw was found in Avahi-daemon, which relies on fixed source ports for wide-area DNS queries. This issue simplifies attacks where malicious DNS responses are injected...

CVE-2024-52615

A flaw was found in Avahi-daemon, which relies on fixed source ports for wide-area DNS queries. This issue simplifies attacks where malicious DNS responses are injected...

CVE-2022-43934

Brocade SANnav before Brocade SANnav 2.2.2 supports key exchange algorithms, which are considered weak on ports 24, 6514, 18023, 19094, and 19095...

CVE-2024-52615

A flaw was found in Avahi-daemon, which relies on fixed source ports for wide-area DNS queries. This issue simplifies attacks where malicious DNS responses are injected...

Avahi 安全特征问题漏洞

Avahi is the Avahi open source set of local service discovery tools for Linux. A security vulnerability exists in Avahi that stems from a dependency on fixed source ports for wide-area DNS lookups, simplifying the injection of malicious DNS response attacks...

kernel: rcu: dump vmalloc memory info safely

A flaw was found in the Read-Copy-Update RCU core of the Linux kernel related to how memory information for vmalloc-allocated objects is dumped. Under certain sequences, calling callrcu may lead to the invocation of vmallocdumpobj while holding the vmaparealock spinlock in an interrupt context...

uprobes: fix kernel info leak via "[uprobes]" vma

...

PT-2024-8142 · Schneider Electric · Schneider Electric Modicon Mc80 Bmkc80 +2

Name of the Vulnerable Software and Affected Versions: Schneider Electric Modicon M340 CPU BMXP34 versions affected versions not specified Schneider Electric Modicon MC80 BMKC80 versions affected versions not specified Schneider Electric Modicon Momentum Unity M1E Processor 171CBU versions affect...

Siemens PP TeleControl Server 代码问题漏洞

TeleControl Server Basic allows remote monitoring and control of plants via WAN/LAN. A deserialization vulnerability exists in Siemens TeleControl Server Basic, which can be exploited by an attacker to execute arbitrary code on a device with SYSTEM privileges...

The vulnerability of the Cisco IOS XE network devices in the Cisco Catalyst 9000 Series operating system, related to integer overflow, allows a attacker to cause service interruptions.

The vulnerability of the Cisco IOS XE network devices in the Cisco Catalyst 9000 series operating system is related to a potential overflow condition during the processing of frames with the VLAN tag. Exploiting this vulnerability could allow an attacker to cause service interruptions remotely...

PT-2024-34413 · Unknown · Abantecart

Name of the Vulnerable Software and Affected Versions: AbanteCart version 1.4.0 Description: A SQL Injection issue was discovered in the update function in public html/admin/controller/responses/listing grid/email templates.php. The issue is exploitable via the id parameter. Recommendations: For...

Apple macOS 安全漏洞

Apple macOS is a proprietary operating system from Apple Inc. developed specifically for Mac computers. A security vulnerability exists in Apple macOS version 13.7.1, which originates from a malicious application that may be able to create symbolic links pointing to a protected area of the disk...

SUSE CVE-2022-48977

In the Linux kernel, the following vulnerability has been resolved: can: afcan: fix NULL pointer dereference in canrcvfilter Analogue to commit 8aa59e355949 "can: afcan: fix NULL pointer dereference in canrxregister" we need to check for a missing initialization of mlpriv in the receive path of C...