CVE-2022-4296

TP-Link TL-WR740N ARP Handler contains a resource consumption issue (DoS) exploitable within the local network. Affected function is unknown in ARP handling; exploitation has been disclosed. Several sources lack details on affected versions or available fixes, and at least one entry notes no info...

CVE-2022-4296 TP-Link TL-WR740N ARP resource consumption

A vulnerability classified as problematic has been found in TP-Link TL-WR740N. Affected is an unknown function of the component ARP Handler. The manipulation leads to resource consumption. The attack needs to be done within the local network. The exploit has been disclosed to the public and may b...

Important: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 8.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

UBUNTU-CVE-2022-3624

A vulnerability was found in Linux Kernel and classified as problematic. Affected by this issue is the function rlbarpxmit of the file drivers/net/bonding/bondalb.c of the component IPsec. The manipulation leads to memory leak. It is recommended to apply a patch to fix this issue. The identifier ...

Linux kernel 安全漏洞

Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. Linux kernel is vulnerable to a security flaw that affects the function rlbarpxmit in the component IPsec's file drivers/net/bonding/bondalb.c. This operation leads to a memory leak. leak. No details of...

CVE-2021-27853

Layer 2 network filtering capabilities such as IPv6 RA guard or ARP inspection can be bypassed using combinations of VLAN 0 headers and LLC/SNAP headers...

Design/Logic Flaw

Layer 2 network filtering capabilities such as IPv6 RA guard or ARP inspection can be bypassed using combinations of VLAN 0 headers and LLC/SNAP headers...

L2 network security controls can be bypassed using VLAN 0 stacking and/or 802.3 headers

Overview Layer-2 L2 network security controls provided by various devices, such as switches, routers, and operating systems, can be bypassed by stacking Ethernet protocol headers. An attacker can send crafted packets through vulnerable devices to cause Denial-of-service DoS or to perform a...

PT-2022-5834 · Tp Link · Tp-Link Tl-Wr740N

Name of the Vulnerable Software and Affected Versions: TP-Link TL-WR740N affected versions not specified Description: A problematic vulnerability has been found in the ARP Handler component, leading to resource consumption when manipulated. The attack must be carried out within the local network...

PVS PXE boot fails: No more network devices / No bootable device

PXE boot fails TFTP transfer after receiving a valid DHCP configuration. Sample failure of this type in screenshot below. Network traces show correct ARP responses going both ways. The target device will not send the first read request unless the ARP response is correct. line 13 in the screenshot...

FreeBSD : zeek -- potential DoS vulnerabilities (3110b29e-c82d-4287-9f6c-db82bb883b1e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 3110b29e-c82d-4287-9f6c-db82bb883b1e advisory. - Tim Wojtulewicz of Corelight reports: Fix a possible overflow and crash in the ARP analyzer when...

zeek -- potential DoS vulnerabilities

Tim Wojtulewicz of Corelight reports: Fix a possible overflow and crash in the ARP analyzer when receiving a specially crafted packet. Due to the possibility of this happening with packets received from the network, this is a potential DoS vulnerability. Fix a possible overflow and crash in the...

SUSE-SU-2022:2861-1 Security update for open-iscsi

This update for open-iscsi fixes the following issues: - CVE-2020-17437: Fixed an out of bounds memory access when the TCP urgent flag is set. bsc1179908. Non-security fixes: - Fix an issue with ARP booting when using different subnets bsc1058463. - Allow target discovery using 'db' mode bsc11094...

CVE-2022-24006

CVE-2022-24006 describes a buffer overflow in the GetValue functionality of TCL LinkHub Mesh Wi‑Fi MS1G_00_01.00_14, specifically in the arpbrocast binary. The root cause is a mismatch between the output buffer size (destination buffer on the stack) and the data retrieved via GetValue/GetCfmValue...

Fedora: Security Advisory for golang-github-j-keck-arping (FEDORA-2022-ea8f4e232d)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Softing Secure Integration Server v1.22 Remote Code Execution

This module chains two vulnerabilities CVE-2022-1373 and CVE-2022-2334 to achieve authenticated remote code execution against Softing Secure Integration Server v1.22. In CVE-2022-1373, the restore configuration feature is vulnerable to a directory traversal vulnerablity when processing zip files...

Fedora: Security Advisory for golang-github-j-keck-arping (FEDORA-2022-3969b64d4b)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Unbreakable Enterprise kernel-container security update

4.14.35-2047.515.3.el7 - uek-rpm: Enable Pensando EMMC reset controller Thomas Tai Orabug: 34325721 - mfd: pensandoelbasr: Add Pensando Elba System Resource Chip Brad Larson Orabug: 34325721 - dsc-drivers: update drivers for 1.15.9-C-65 Shannon Nelson Orabug: 34325721 4.14.35-2047.515.2.el7 -...

Unbreakable Enterprise kernel security update

4.14.35-2047.515.3 - uek-rpm: Enable Pensando EMMC reset controller Thomas Tai Orabug: 34325721 - mfd: pensandoelbasr: Add Pensando Elba System Resource Chip Brad Larson Orabug: 34325721 - dsc-drivers: update drivers for 1.15.9-C-65 Shannon Nelson Orabug: 34325721 4.14.35-2047.515.2 - net/rds:...

Nginx 1.20.0 - Denial of Service Exploit

Exploit Title: Nginx 1.20.0 - Denial of Service DOS Exploit Author: Mohammed Alshehri - https://Github.com/M507 Vendor Homepage: https://nginx.org/ Software Link: https://github.com/nginx/nginx/releases/tag/release-1.20.0 Version: 0.6.18 - 1.20.0 Tested on: Ubuntu 18.04.4 LTS bionic CVE:...