PT-2022-36305 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.156 Description: The issue concerns error handling in the ata tport add function. It was introduced in version v2.6.37 and fixed in version v5.10.156. The actual impact and attack plausibility have not yet...

PT-2022-36003 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.10 Description: The issue is related to a fix for double ata host put in ata tport add. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior t...

PT-2022-36001 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.10 Description: The issue concerns error handling in the ata tlink add function. It was introduced in version v2.6.37 and fixed in version v6.0.10. The actual impact and attack plausibility have not yet bee...

PT-2022-36485

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.267 Description The issue is related to a fix for a potential double ata host put in ata tport add. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-36170

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.80 Description The issue is related to a fix for a potential double ata host put in ata tport add. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versio...

PT-2022-36168

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.80 Description The issue concerns error handling in the ata tlink add function. It was introduced in version v2.6.37 and fixed in version v5.15.80. The actual impact and attack plausibility have not yet bee...

PT-2022-36304

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.156 Description The issue concerns error handling in the ata tlink add function. It was introduced in version v2.6.37 and fixed in version v5.10.156. The actual impact and attack plausibility have not yet...

PT-2022-36406 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.225 Description: The issue is related to a fix for double ata host put in ata tport add. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior ...

CVE-2022-20691

A vulnerability in the Cisco Discovery Protocol functionality of Cisco ATA 190 Series Adaptive Telephone Adapter firmware could allow an unauthenticated, adjacent attacker to cause a DoS condition of an affected device. This vulnerability is due to missing length validation of certain Cisco...

CVE-2022-20691

CVE-2022-20691 affects Cisco ATA 190 Series Adaptive Telephone Adapter firmware. The issue is a lack of length validation in the Cisco Discovery Protocol (CDP) packet headers, allowing an unauthenticated adjacent attacker to trigger a DoS by exhausting memory and causing the service to restart. M...

CVE-2022-20690

Cisco ATA 190 Series Analog Telephone Adapter firmware contains multiple vulnerabilities in the Cisco Discovery Protocol (CDP) processing due to missing length validation when handling CDP messages. An unauthenticated, adjacent attacker can send a crafted CDP packet, potentially causing memory co...

CVE-2022-20689

Multiple vulnerabilities in the Cisco Discovery Protocol functionality of Cisco ATA 190 Series Analog Telephone Adapter firmware could allow an unauthenticated, adjacent attacker to cause Cisco Discovery Protocol memory corruption on an affected device. These vulnerabilities are due to missing...

CVE-2022-20689

CVE-2022-20689 concerns multiple vulnerabilities in the Cisco Discovery Protocol (CDP) handling in Cisco ATA 190 Series Analog Telephone Adapter firmware. The root cause is missing length validation when processing CDP messages, which can allow an unauthenticated, adjacent attacker to send a craf...

CVE-2022-20688

The CVE-2022-20688 issue affects Cisco ATA 190 Series Analog Telephone Adapter devices and is caused by missing length validation in Cisco Discovery Protocol (CDP) header fields, enabling an unauthenticated remote attacker to execute arbitrary code and cause the CDP service to restart (DoS). Mult...

CVE-2022-20687

Multiple vulnerabilities in the Link Layer Discovery Protocol LLDP functionality of Cisco ATA 190 Series Analog Telephone Adapter firmware could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device and cause the LLDP service to restart. These vulnerabilities a...

CVE-2022-20687

CVE-2022-20687 affects Cisco ATA 190 Series Analog Telephone Adapter firmware, targeting the LLDP functionality. The issue arises from missing length validation of LLDP packet header fields and a buffer overflow read, allowing an unauthenticated, remote attacker to execute arbitrary code on the d...

CVE-2022-20686

Multiple vulnerabilities in the Link Layer Discovery Protocol LLDP functionality of Cisco ATA 190 Series Analog Telephone Adapter firmware could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device and cause the LLDP service to restart. These vulnerabilities a...

CVE-2022-20686

CVE-2022-20686 affects Cisco ATA 190 Series Analog Telephone Adapter firmware, specifically the LLDP functionality. The root cause is missing length validation in certain LLDP packet header fields, allowing an unauthenticated, remote attacker to execute arbitrary code on the device and cause the ...

CVE-2022-20691: Uncontrolled Resource Consumption

A vulnerability in the Cisco Discovery Protocol functionality of Cisco ATA 190 Series Adaptive Telephone Adapter firmware could allow an unauthenticated, adjacent attacker to cause a DoS condition of an affected device. This vulnerability is due to missing length validation of certain Cisco...

CVE-2022-20689: Improper Handling of Length Parameter Inconsistency

Multiple vulnerabilities in the Cisco Discovery Protocol functionality of Cisco ATA 190 Series Analog Telephone Adapter firmware could allow an unauthenticated, adjacent attacker to cause Cisco Discovery Protocol memory corruption on an affected device. These vulnerabilities are due to missing...