CVE-2022-34144 Reachable assertion in Modem

Transient DOS due to reachable assertion in Modem during OSI decode scheduling...

CVE-2022-34144: Reachable Assertion

Transient DOS due to reachable assertion in Modem during OSI decode scheduling...

PT-2023-13796 · Qualcomm · 315 5G Iot Modem Firmware +164

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a Transient Denial of Service DOS that occurs when a UE User Equipment receives a Downlink Data Indication message from the...

CVE-2022-40508: Reachable Assertion

Transient DOS due to reachable assertion in Modem while processing config related to cross carrier scheduling, which is not supported...

CVE-2022-40504: Reachable Assertion

Transient DOS due to reachable assertion in Modem when UE received Downlink Data Indication message from the network...

PT-2023-13342 · Modem · Modem

Name of the Vulnerable Software and Affected Versions: Modem affected versions not specified Description: The issue is related to a Transient DOS due to a reachable assertion in the Modem during OSI decode scheduling. Recommendations: At the moment, there is no information about a newer version...

PT-2023-13799 · Qualcomm · 315 5G Iot Modem Firmware +78

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a Transient DOS Denial of Service due to a reachable assertion in the Modem while processing configuration related to cross...

Important: openldap

Issue Overview: An issue was discovered in OpenLDAP 2.x before 2.4.48. When using SASL authentication and session encryption, and relying on the SASL security layers in slapd access controls, it is possible to obtain access that would otherwise be denied via a simple bind for any identity covered...

Amazon Linux 2 : openldap (ALAS-2023-2033)

The version of openldap installed on the remote host is prior to 2.4.44-25. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2023-2033 advisory. An issue was discovered in OpenLDAP 2.x before 2.4.48. When using SASL authentication and session encryption, and relyi...

Command Injection

redis is vulnerable to Command Injection. The vulnerability allows authenticated users to use the 'MSETNX' command to trigger a runtime assertion and termination withing the redis server process...

PT-2023-26458

Name of the Vulnerable Software and Affected Versions Avahi affected versions not specified Description A vulnerability was found in Avahi, where a reachable assertion exists in the avahi alternative host name function. Recommendations At the moment, there is no information about a newer version...

PT-2023-9390

Name of the Vulnerable Software and Affected Versions Avahi affected versions not specified Description A vulnerability exists in Avahi due to a reachable assertion in the avahi dns packet append record function. This issue can be exploited to cause a denial of service. Recommendations At the...

PT-2023-9394

Name of the Vulnerable Software and Affected Versions Avahi affected versions not specified Description A vulnerability exists in the Avahi service discovery system, related to a reachable assertion in the dbus set host name function. This issue can be exploited to cause a denial of service...

PT-2023-7434

Name of the Vulnerable Software and Affected Versions Avahi affected versions not specified Description A vulnerability exists in the avahi rdata parse function of Avahi, which is related to a reachable assertion. This issue can be exploited by an attacker to cause a denial of service...

Fedora 38 : frr (2023-77d00facd0)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-77d00facd0 advisory. New version 8.5 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

Fedora 36 : frr (2023-14ec79ae02)

The remote Fedora 36 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-14ec79ae02 advisory. New version 8.5 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

BIND DNS Server DoS

The vulnerability of the BIND DNS server relates to the possibility of exploiting certain vulnerabilities during DNS query processing. Exploiting this vulnerability allows a malicious actor to send repetitive request patterns to servers with enabled DNSSEC-Vvalidated Cache synth-from-dnssec,...

FreeBSD : py-tensorflow -- denial of service vulnerability (ae132c6c-d716-11ed-956f-7054d21a9e2a)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the ae132c6c-d716-11ed-956f-7054d21a9e2a advisory. - TensorFlow is an open source platform for machine learning. The implementation of...

UBUNTU-CVE-2023-29536

An attacker could cause the memory manager to incorrectly free a pointer that addresses attacker-controlled memory, resulting in an assertion, memory corruption, or a potentially exploitable crash. This vulnerability affects Firefox 112, Focus for Android 112, Firefox ESR 102.10, Firefox for...

NewStart CGSL CORE 5.05 / MAIN 5.05 : openldap Multiple Vulnerabilities (NS-SA-2023-0016)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has openldap packages installed that are affected by multiple vulnerabilities: - A flaw was found in OpenLDAP. This flaw allows an attacker who can send a malicious packet to be processed by OpenLDAP's slapd server, to trigger ...