4110 matches found
Azure Linux 3.0 Security Update: kernel (CVE-2025-38260)
"The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-38260 advisory. - In the Linux kernel, the following vulnerability has been resolved: btrfs: handle csum tree error with...
Azure Linux 3.0 Security Update: kernel (CVE-2025-21789)
The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-21789 advisory. - In the Linux kernel, the following vulnerability has been resolved: LoongArch: csum: Fix OoB access in IP...
Azure Linux 3.0 Security Update: qemu (CVE-2024-3567)
The version of qemu installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-3567 advisory. - A flaw was found in QEMU. An assertion failure was present in the updatesctpchecksum function in...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004271)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004271 advisory. An issue was discovered in cancangwrcv in net/can/gw.c in the Linux kernel through 4.19.13. The CAN frame modification rules allow bitwise logical operations that ca...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000703)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000703 advisory. The 1 udprecvmsg and 2 udpv6recvmsg functions in the Linux kernel before 4.0.6 do not properly consider yielding a processor, which allows remote attackers to cause ...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000894)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000894 advisory. The 1 udprecvmsg and 2 udpv6recvmsg functions in the Linux kernel before 4.0.6 provide inappropriate -EAGAIN return values, which allows remote attackers to cause a...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002424)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002424 advisory. The 1 udprecvmsg and 2 udpv6recvmsg functions in the Linux kernel before 4.0.6 do not properly consider yielding a processor, which allows remote attackers to cause ...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002802)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002802 advisory. The ipcmsgrecvchecksum function in net/ipv4/ipsockglue.c in the Linux kernel before 4.10.1 has incorrect expectations about skb data layout, which allows local users...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001866)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001866 advisory. The 1 udprecvmsg and 2 udpv6recvmsg functions in the Linux kernel before 4.0.6 provide inappropriate -EAGAIN return values, which allows remote attackers to cause a...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002818)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002818 advisory. The ipcmsgrecvchecksum function in net/ipv4/ipsockglue.c in the Linux kernel before 4.10.1 has incorrect expectations about skb data layout, which allows local users...
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: sunrpc: Fixed the issue of null pointer dereferencing on zero-length checksums. In xdrstreamdecodeopaqueauth, the value of checksum.len causes checksum.data to be set to NULL. This triggers a NPD when accessing checksum.data in...
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: net: stmmac: Properly handles Rx checksum offload errors. The stmmacrx function previously set skb-ipsummed to CHECKSUMUNNECESSARY if hardware checksum offloading was enabled and the packet had a known IP ethertype. However, this...
MiracleLinux 8 : perl-CPAN-2.18-402.el8_10 (AXSA:2025-9982:02)
The remote MiracleLinux 8 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2025-9982:02 advisory. perl-CPAN: Bypass of verification of signatures in CHECKSUMS files CVE-2020-16156 Tenable has extracted the preceding description block directly from the...
MiracleLinux 9 : kernel-5.14.0-503.16.1.el9_5 (AXSA:2025-9539:03)
The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2025-9539:03 advisory. kernel: net/smc: fix illegal rmbdesc access in SMC-D connection dump CVE-2024-26615 kernel: block: initialize integrity buffer to zero before writin...
CVE-2022-38538
Archery v1.7.0 to v1.8.5 was discovered to contain a SQL injection vulnerability via the checksum parameter in the report module...
CVE-2020-7982
An issue was discovered in OpenWrt 18.06.0 to 18.06.6 and 19.07.0, and LEDE 17.01.0 to 17.01.7. A bug in the fork of the opkg package manager before 2020-01-25 prevents correct parsing of embedded checksums in the signed repository index, allowing a man-in-the-middle attacker to inject arbitrary...
CVE-2020-10180
The ESET AV parsing engine allows virus-detection bypass via a crafted BZ2 Checksum field in an archive. This affects versions before 1294 of Smart Security Premium, Internet Security, NOD32 Antivirus, Cyber Security Pro macOS, Cyber Security macOS, Mobile Security for Android, Smart TV Security,...
CVE-2020-24722
An issue was discovered in the GAEN aka Google/Apple Exposure Notifications protocol through 2020-10-05, as used in COVID-19 applications on Android and iOS. The encrypted metadata block with a TX value lacks a checksum, allowing bitflipping to amplify a contamination attack. This can cause...
CVE-2022-23442
An improper access control vulnerability CWE-284 in FortiOS versions 6.2.0 through 6.2.11, 6.4.0 through 6.4.8 and 7.0.0 through 7.0.5 may allow an authenticated attacker with a restricted user profile to gather the checksum information about the other VDOMs via CLI commands...