CVE-2021-31364

An Improper Check for Unusual or Exceptional Conditions vulnerability combined with a Race Condition in the flow daemon flowd of Juniper Networks Junos OS on SRX300 Series, SRX500 Series, SRX1500, and SRX5000 Series with SPC2 allows an unauthenticated network based attacker sending specific traff...

CVE-2021-35067

Meross MSG100 devices before 3.2.3 allow an attacker to replay the same data or similar data e.g., an attacker who sniffs a Close message can transmit an acceptable Open message...

CVE-2021-35067: Authentication Bypass by Capture-replay

Meross MSG100 devices before 3.2.3 allow an attacker to replay the same data or similar data e.g., an attacker who sniffs a Close message can transmit an acceptable Open message...

The vulnerability of the Linux kernel driver in Nitro Enclaves, related to pointer arithmetic errors, allows an attacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Linux kernel driver in Nitro Enclaves is related to errors in pointer assignment when closing file descriptors for enclaves. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

ROS-2-1410

2.1410 Multiple Exim Server Vulnerabilities 1. Vulnerability description: CVE-2020-28007 A vulnerability in the Exim message forwarding agent, is related to a symbolic link in the Exim log directory. Exploitation of the vulnerability could allow an attacker to create a special symbolic link to a...

SUSE: Security Advisory (SUSE-SU-2021:2824-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Node.js -- July 2021 Security Releases (2)

Node.js reports: Use after free on close http2 on stream canceling High CVE-2021-22930 Node.js is vulnerable to a use after free attack where an attacker might be able to exploit the memory corruption, to change process behavior...

GSD-2021-1001058 udp: fix race between close() and udp_abort()

udp: fix race between close and udpabort This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.13 by commit...

UVI-2021-1000979 udp: fix race between close() and udp_abort()

udp: fix race between close and udpabort This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.46 by commit...

GSD-2021-1000979 udp: fix race between close() and udp_abort()

udp: fix race between close and udpabort This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.46 by commit...

GSD-2021-1000917 udp: fix race between close() and udp_abort()

udp: fix race between close and udpabort This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.128 by commit...

PT-2021-29523

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.12.13 Description The issue is related to a race condition between close and udp abort in the UDP protocol. This problem was introduced in version v4.9 and is fixed in Linux Kernel version v5.12.13. The actual...

PT-2021-25388

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.128 Description: The issue is related to a race between close and udp abort in the UDP protocol. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel version...

PT-2021-29389

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.128 Description A memory leak issue was discovered in the mkiss close function. The actual impact and attack plausibility have not yet been proven. This issue was introduced in version v2.6.14 and fixed in...

PT-2021-29382

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.128 Description The issue is related to a race condition between the close function and the udp abort function in the UDP protocol implementation. This race condition may potentially lead to security...

PT-2021-29535

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.12.13 Description A memory leak issue was discovered in the mkiss close function. The actual impact and attack plausibility have not yet been proven. This issue was introduced in version v2.6.14 and is fixed i...

PT-2021-25541

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 2.6.14 through 5.12.12 Description: A memory leak issue was discovered in the mkiss close function. The actual impact and attack plausibility have not yet been proven. This issue was introduced in version 2.6.14 and fixe...

PT-2021-25395

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 2.6.14 through 5.4.127 Description: A memory leak was discovered in the mkiss close function. The issue was introduced in version 2.6.14 and is fixed in version 5.4.128. The actual impact and attack plausibility have not...

PT-2021-29444

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.46 Description The issue is related to a race condition between the close function and the udp abort function in the UDP protocol implementation. This race condition was introduced in version v4.9 and is...

PT-2021-25450

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.46 Description: The issue is related to a race between close and udp abort in the UDP protocol. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel version...