kernel: net: bridge: xmit: make sure we have at least eth header len bytes

A vulnerability was found in the Linux kernel in the net: bridge component, where the xmit function in the bridge device could trigger an uninitialized value error if a short skb less than the required ETHHLEN bytes is sent. This condition could cause unexpected behavior due to insufficient check...

kernel: net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()

A vulnerability was found in the icebridgesetlink function in the Linux kernel. A missing check to verify whether the nlmsgfindattr function returns NULL or not could lead to a NULL pointer dereference, system instability, or crashes...

Adobe Bridge 缓冲区错误漏洞

Adobe Bridge is a file viewer from the American company Audobee Adobe. Adobe Bridge suffers from an out-of-bounds write vulnerability that can be exploited by an attacker to execute arbitrary code in the context of the current user...

Adobe Bridge 安全漏洞

Adobe Bridge is a file viewer from the American company Audobee Adobe. Adobe Bridge suffers from an out-of-bounds read vulnerability that can be exploited by an attacker to cause a sensitive memory leak...

CVE-2024-41840: Out-of-bounds Write

Bridge versions 13.0.8, 14.1.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2024-39778: Undefined Security Weakness

When a stateless virtual server is configured on BIG-IP system with a High-Speed Bridge HSB, undisclosed requests can cause TMM to terminate. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2024-39387: Out-of-bounds Read

Bridge versions 13.0.8, 14.1.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim...

Adobe Bridge 缓冲区错误漏洞

Adobe Bridge is a file viewer from the American company Audobee Adobe. Adobe Bridge suffers from an out-of-bounds write vulnerability that can be exploited by an attacker to execute arbitrary code in the context of the current user...

CVE-2024-39386: Out-of-bounds Write

Bridge versions 13.0.8, 14.1.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

PT-2024-28672 · F5 · Big-Ip

Name of the Vulnerable Software and Affected Versions: BIG-IP affected versions not specified Description: The issue occurs when a stateless virtual server is configured on a BIG-IP system with a High-Speed Bridge HSB, allowing undisclosed requests to cause the TMM to terminate. Recommendations: ...

CVE-2024-38146

Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability...

CVE-2024-38145

Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability...

CVE-2024-38145

Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability...

CVE-2024-38146 Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability

...

CVE-2024-38146 Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability

...

CVE-2024-38145 Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability

...

Important: Red Hat Security Advisory: firefox security update

An update for firefox is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions, and Red Hat Enterprise Linux 8.4 Telecommunications Update Service. Red Hat Product Security has rated this update as...

kernel: net: bridge: xmit: make sure we have at least eth header len bytes

A vulnerability was found in the Linux kernel in the net: bridge component, where the xmit function in the bridge device could trigger an uninitialized value error if a short skb less than the required ETHHLEN bytes is sent. This condition could cause unexpected behavior due to insufficient check...

Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability

...

Adobe Bridge 13.x < 13.0.9 / 14.x < 14.1.2 Multiple Vulnerabilities (APSB24-59)

The version of Adobe Bridge installed on the remote Windows host is prior to 13.0.9 or 14.1.2. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb24-59 advisory. - Bridge versions 13.0.8, 14.1.1 and earlier are affected by an out-of-bounds write vulnerability that cou...