Huawei EulerOS: Security Advisory for bind (EulerOS-SA-2021-1939)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2021-29160

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.34 through 4.9.270 Description A memory leak issue was discovered in the smsc75xx bind function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions 2.6.34...

PT-2021-29145

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.235 Description A memory leak issue was discovered in the smsc75xx bind function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2021-29128

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.193 Description A memory leak issue exists in the smsc75xx bind function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v4.19.193,...

PT-2021-29104

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.34 through 5.4.123 Description A memory leak issue exists in the smsc75xx bind function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions 2.6.34 through...

PT-2021-29036

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.12.9 Description A potential issue exists due to a race between isotp bind and isotp setsockopt. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2021-29028

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.34 through 5.12.8 Description A memory leak issue exists in the smsc75xx bind function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions 2.6.34 through...

PT-2021-25151

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.235 Description A memory leak issue was discovered in the smsc75xx bind function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2021-25042

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.12.9 Description The issue is related to a potential race condition between the isotp bind and isotp setsockopt functions. This could potentially lead to security vulnerabilities, although the actual impact an...

PT-2021-25134

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.193 Description A memory leak issue was discovered in the smsc75xx bind function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

SUSE SLED15 / SLES15 Security Update : bind (SUSE-SU-2021:1826-1)

This update for bind fixes the following issues : CVE-2021-25214: Fixed a broken inbound incremental zone update IXFR which could have caused named to terminate unexpectedly bsc1185345. CVE-2021-25215: Fixed an assertion check which could have failed while answering queries for DNAME records that...

EulerOS 2.0 SP9 : bind (EulerOS-SA-2021-1918)

According to the version of the bind packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - BIND servers are vulnerable if they are running an affected version and are configured to use GSS-TSIG features. In a configuration which uses BIND's...

EulerOS 2.0 SP9 : bind (EulerOS-SA-2021-1939)

According to the version of the bind packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - BIND servers are vulnerable if they are running an affected version and are configured to use GSS-TSIG features. In a configuration which uses BIND's...

DNS BIND DoS

The vulnerability of the DNS BIND server is related to the lack of use of the assert function. Exploiting this vulnerability allows a malicious actor to cause a service failure through a specially crafted request...

BIND DNS Server DoS

The vulnerability of the BIND DNS server component is related to the lack of use of the assert function. Exploiting this vulnerability allows a remote attacker to cause a service failure...

runc: vulnerable to symlink exchange attack

The runc package is vulnerable to a symlink exchange attack whereby an attacker can request a seemingly innocuous container configuration that results in the host filesystem being bind-mounted into the container. The highest threat from this vulnerability is to data confidentiality and integrity ...

runc: vulnerable to symlink exchange attack

The runc package is vulnerable to a symlink exchange attack whereby an attacker can request a seemingly innocuous container configuration that results in the host filesystem being bind-mounted into the container. The highest threat from this vulnerability is to data confidentiality and integrity ...

PT-2021-3824

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.12.10 Description The issue is related to a NULL pointer dereference in the net/nfc/llcp sock.c component of the Linux kernel. It can be exploited by local unprivileged users to cause a denial of service by...

PT-2021-28951

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 4.9.267 through 4.9.268 Description The issue is related to a use-after-free error in the llcp sock bind/connect function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kern...

PT-2021-28927

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 4.19.187 through 4.19.190 Description A use-after-free issue was discovered in the net/nfc component, specifically affecting llcp sock bind and connect functions. The actual impact and attack plausibility have not yet bee...