PT-2021-29758

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.51 Description A memory leak issue was discovered in the RDMA/cma component, specifically in the rdma resolve route function. The actual impact and attack plausibility of this issue have not yet been proven...

PT-2021-29684

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.13.3 Description A memory leak issue was discovered in the RDMA/cma component, specifically in the rdma resolve route function. The actual impact and attack plausibility of this issue have not yet been proven...

PT-2021-25763

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.51 Description A memory leak issue was discovered in the RDMA/cma component, specifically in the rdma resolve route function. The actual impact and attack plausibility have not yet been proven...

PT-2021-25822

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.133 Description A memory leak issue was discovered in the RDMA/cma component, specifically in the rdma resolve route function. The actual impact and attack plausibility of this issue have not yet been proven...

PT-2021-25863

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.198 Description A memory leak issue was discovered in the RDMA/cma component, specifically in the rdma resolve route function. The actual impact and attack plausibility of this issue have not yet been prove...

openSUSE Security Update : the Linux Kernel (openSUSE-2020-2193)

The openSUSE Leap 15.2 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : - CVE-2020-29371: An issue was discovered in romfsdevread in fs/romfs/storage.c where uninitialized memory leaks to userspace, aka CID-bcf85fcedfdd bnc1179429. -...

Security update for the Linux Kernel (important)

openSUSE Security Update: Security update for the Linux Kernel Announcement ID: openSUSE-SU-2020:2193-1 Rating: important References: 1050242 1050536 1050545 1056653 1056657 1056787 1064802 1066129 1103990 1103992 1104389 1104393 1109837 1110096 1111666 1112178 1112374 1118657 1122971 1136460...

OracleVM 3.4 : Unbreakable / etc (OVMSA-2019-0056)

The remote OracleVM system is missing necessary patches to address critical security updates : - ocfs2: protect extent tree in ocfs2prepareinodeforwrite Shuning Zhang Orabug: 30036349 - ocfs2: direct-IO: protect getblocks Junxiao Bi Orabug: 30036349 - SUNRPC: Remove xprtconnectstatus Trond...

Unbreakable Enterprise kernel security update

4.1.12-124.33.4 - ocfs2: protect extent tree in ocfs2prepareinodeforwrite Shuning Zhang Orabug: 30036349 - ocfs2: direct-IO: protect getblocks Junxiao Bi Orabug: 30036349 - SUNRPC: Remove xprtconnectstatus Trond Myklebust Orabug: 30165838 - SUNRPC: Handle ENETDOWN errors Trond Myklebust Orabug:...

Unbreakable Enterprise kernel security update

4.1.12-124.24.1 - pinctrl: amd: Use devmpinctrlregister for pinctrl registration Laxman Dewangan Orabug: 27539246 CVE-2017-18174 - mlock: fix mlock count can not decrease in race condition Yisheng Xie Orabug: 27677611 CVE-2017-18221 - perf/core: Fix the perfcputimemaxpercent check Tan Xiaojun...

Security Bulletin: IBM Capacity Management Analytics is affected by a plaintext password vulnerability (CVE-2015-7433)

Summary IBM Capacity Management Analytics could allow a local user on the CMA install machine to obtain other CMA user's usernames and passwords in plaintext during the CMA install. Vulnerability Details CVEID: CVE-2015-7433 DESCRIPTION: IBM Capacity Management Analytics could allow a local user ...

Unbreakable Enterprise kernel security update

4.1.12-124.14.2 - scsi: iscsitcp: set BDICAPSTABLEWRITES when data digest enabled Jianchao Wang Orabug: 27726302 - block: fix biowillgap for first bvec with offset Ming Lei Orabug: 27775588 - block: relax check on sg gap Ming Lei Orabug: 27775588 - block: don't optimize for non-cloned bio in...

CVE-2015-7433: Exposure of Sensitive Information to an Unauthorized Actor

IBM Capacity Management Analytics 2.1.0.0 allows local users to discover cleartext usernames and passwords by leveraging access to the CMA install machine. IBM X-Force ID: 107862...

Security Advisory - Sensitive Information Leak Vulnerability in Some Huawei Smart Phones

There is a sensitive information leak vulnerability in the CMA implementation of some Huawei smart phones. An attacker can trick a user to install a malicious application to exploit this vulnerability. Successful exploitation may cause sensitive information leak. Vulnerability ID:...

PT-2017-6788

Name of the Vulnerable Software and Affected Versions Polycom RealPresence Resource Manager versions prior to 8.4 Description The issue allows local users with access to the plcm account to gain privileges due to a sudo misconfiguration. This is related to a script in...

CVE-2015-4685: Undefined Security Weakness

Polycom RealPresence Resource Manager aka RPRM before 8.4 allows local users with access to the plcm account to gain privileges via a script in /var/polycom/cma/upgrade/scripts, related to a sudo misconfiguration...

UBUNTU-CVE-2014-2739

The cmareqhandler function in drivers/infiniband/core/cma.c in the Linux kernel 3.14.x through 3.14.1 attempts to resolve an RDMA over Converged Ethernet aka RoCE address that is properly resolved within a different module, which allows remote attackers to cause a denial of service incorrect...

PT-2014-4895 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel versions 3.14.x through 3.14.1 Description: The issue is related to the cma req handler function in the Linux kernel, which attempts to resolve an RDMA over Converged Ethernet RoCE address. This can be exploited by remote attacke...

Linux Kernel随机内存指针间接引用拒绝服务漏洞

Bugtraq ID:66775 CVE ID:CVE-2014-2739 Linux Kernel是Linux操作系统的内核。 Linux kernel的cma req处理程序在解析passive端RoC3 L2地址时存在错误，成功利用后可导致IB/core崩溃，造成拒绝服务。 0 Linux kernel 目前厂商已经发布了升级补丁以修复漏洞，请下载使用： http://www.kernel.org/...

PT-2013-5315

Name of the Vulnerable Software and Affected Versions Sophos Web Appliance versions prior to 3.7.9.1 Sophos Web Appliance version 3.8 before 3.8.1.1 Description The issue allows local users to gain privileges via shell metacharacters in the second argument passed to the close connections function...