ATMMalScan

Introduction ATMMalScan is a commandline tool for Windows operating systems version 7 and higher, which helps to search for malware traces on an ATM during the DFIR process. This tool examines the running processes of a system, as well as the hard disk, depending on the specified file path. To sc...

CVE-2020-29667

CVE-2020-29667 Insufficient Session Expiration | Predefined Cookie Value Suggested description In Lan ATMService M3 ATM Monitoring System 6.1.0, a remote attacker able to use a default cookie value, such as PHPSESSID=LANIT-IMANAGER, can achieve control over the system and operate remote ATM...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: net: atm: reject out-of-range traffic classes in QoS validation The ATM traffic classes exceeding ATMANYCLASS are rejected in checktp. SOATMQOS stores the provided QoS after checkqos succeeds; thus, accepting larger values result...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: usb: atm: usbatm: fix invalid cirange initialization SyZBot reported a shift-out-of-bounds condition in vccconnect: UBSAN: shift-out-of-bounds in net/atm/common.c:382:32 The shift exponent -1 is negative CPU: 0 UID: 0 PID: 5987...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: usb: atm: ueagle-atm: waits for pre-firmware load in .disconnect ueagle-atm uses the asynchronous requestfirmwarenowait in .probe, but does not wait for its completion, not even in .disconnect; thus, if the device is unplugged...

CLEANSTART-2023-BR29142 ATM parser in tcpdump before 4

Security vulnerability affects the tcpdump package. The ATM parser in tcpdump before 4...

CLEANSTART-2023-OW45255 Classical IP over ATM parser in tcpdump before 4

Security vulnerability affects the tcpdump package. The Classical IP over ATM parser in tcpdump before 4...

CLEANSTART-2023-LV28656 Juniper PPPoE ATM parser in tcpdump before 4

Security vulnerability affects the tcpdump package. The Juniper PPPoE ATM parser in tcpdump before 4...

CLEANSTART-2023-PM16684 ATM parser in tcpdump before 4

Security vulnerability affects the tcpdump package. The ATM parser in tcpdump before 4...

Linux kernel Heap Buffer Overflow DoS

The vulnerability in the atmchangeqos function within the net/atm/common.c component of the Linux kernel operating system is related to an improper implementation of the control flow. Exploitation of this vulnerability may allow an attacker to compromise the confidentiality and availability of...

CLSA-2026-1769610819 kernel: Fix of 42 CVEs

Bluetooth: hcisysfs: Fix attempting to call deviceadd multiple times CVE-2022-50419 - firewire: net: fix use after free in fwnetfinishincomingpacket CVE-2023-53432 - wifi: brcmfmac: fix use-after-free bug in brcmfnetdevstartxmit CVE-2022-50408 - wifi: brcmfmac: slab-out-of-bounds read in...

CLSA-2026-1768669128 kernel: Fix of 42 CVEs

Bluetooth: hcisysfs: Fix attempting to call deviceadd multiple times CVE-2022-50419 - firewire: net: fix use after free in fwnetfinishincomingpacket CVE-2023-53432 - wifi: brcmfmac: fix use-after-free bug in brcmfnetdevstartxmit CVE-2022-50408 - wifi: brcmfmac: slab-out-of-bounds read in...

kernel: Fix of 7 CVEs

KVM: nSVM: avoid picking up unsupported bits from L2 in intctl CVE-2021-3653 CVE-2021-3653 - xen/netfront: fix leaking data in shared pages CVE-2022-33740 - xfs: fix up non-directory creation in SGID directories CVE-2021-4037 - netsched: clsroute: remove from list when handle is 0 CVE-2022-2588 -...

CLSA-2024-1709204660 kernel: Fix of 7 CVEs

KVM: nSVM: avoid picking up unsupported bits from L2 in intctl CVE-2021-3653 CVE-2021-3653 - xen/netfront: fix leaking data in shared pages CVE-2022-33740 - xfs: fix up non-directory creation in SGID directories CVE-2021-4037 - netsched: clsroute: remove from list when handle is 0 CVE-2022-2588 -...

Astra Linux – vulnerability in linux-6.1, linux-6.12

In the Linux kernel, the following vulnerability has been resolved: atm: lec: fix use-after-free in sockdefreadable There is a race condition occurring between lecatmclose setting priv-lecd to NULL and concurrent access to priv-lecd in sendtolecd, lechandlebridge, and lecatmsend. When the socket ...

Astra Linux – vulnerability in linux-6.1, linux-6.12

In the Linux kernel, the following vulnerability has been resolved: atm: lec: fix null-ptr-deref in lecarpclearvccs Syzkaller reported a null-ptr-deref in lecarpclearvccs. This issue can be easily reproduced using the Syzkaller reproducer. In the ATM LANE LAN Emulation module, the same atmvcc can...

CLSA-2026-1768775579 kernel: Fix of 49 CVEs

scsi: ses: Fix slab-out-of-bounds in sesenclosuredataprocess CVE-2023-53803 - md/raid1: Fix stack memory use after return in raid1reshape CVE-2025-38445 - ALSA: usb-audio: Fix out-of-bounds read in sndusbgetaudioformatuac3 CVE-2025-38249 - atm: clip: Fix infinite recursive call of clippush...

CLSA-2024-1707478061 kernel: Fix of 12 CVEs

netfilter: nftables: reject QUEUE/DROP verdict parameters CVE-2024-1086 - RDMA/core: Refactor rdmabindaddr CVE-2023-2176 - RDMA/cma: Do not change route.addr.srcaddr outside state checks - RDMA/cma: Ensure rdmaaddrcancel happens before issuing more requests - drm/amdgpu: Fix potential fence...

CLSA-2026-1777614769 kernel: Fix of 18 CVEs

crypto: algifaead - Fix minimum RX size check for decryption - crypto: afalg - Fix page reassignment overflow in afalgpulltsgl - crypto: authencesn - Fix src offset when decrypting in-place - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption - crypto: authenc - use...

CLSA-2026-1771077729 kernel: Fix of 108 CVEs

net/ieee802154: don't warn zero-sized rawsendmsg CVE-2022-50706 - bpf: Don't redirect packets with invalid pktlen CVE-2022-49975 - media: uvcvideo: Fix 1-byte out-of-bounds read in uvcparseformat CVE-2025-38680 - ipv6: addrlabel: fix infoleak when sending struct ifaddrlblmsg to network...