Ubuntu 22.04 LTS : Linux kernel (GKE) vulnerabilities (USN-6351-1)

The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6351-1 advisory. It was discovered that the NTFS file system implementation in the Linux kernel did not properly validate MFT flags in certain situations. An attacker cou...

Linux kernel connection.c file out-of-bounds read vulnerability

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. An out-of-bounds read vulnerability exists in versions of Linux kernel prior to 6.3.8, which stems from the fact that fs/smb/server/connection.c does not validate the...

CVE-2023-38429

The CVE-2023-38429 issue is reported in the Linux kernel (pre-6.3.4) within ksmbd: fs/ksmbd/connection.c contains an off-by-one error in memory allocation (ksmbd_smb2_check_message), which can cause out-of-bounds access. Connected advisories (Astra Linux, Nessus plugin references) corroborate the...

CVE-2021-45480

Mode C: CVE-2021-45480 affects the Linux kernel up to 5.15.10 (before 5.15.11). Root cause: memory leak in __rds_conn_create() in net/rds/connection.c under certain conditions. Impact: potential memory leak; CVE details state a leak rather than remote code execution. Public references note mitiga...

CVE-2016-4817

H2O vulnerability CVE-2016-4817 affects lib/http2/connection.c: disconnection handling causes a use-after-free in HTTP/2 processing. A crafted packet can lead to denial of service (application crash) and possibly arbitrary code execution. Affected versions are H2O before 1.7.3 and 2.x before 2.0....

CVE-2016-0741

Summary: CVE-2016-0741 affects 389-ds-base (389 Directory Server) with a DoS by abnormally closed connections. The vulnerability occurs in slapd/connection.c across 1.3.4.x branches prior to 1.3.4.7, where worker threads fail to detect closed connections, enabling an infinite loop and connection ...

CVE-2011-5268

connection.c in Bip before 0.8.9 does not properly close sockets, which allows remote attackers to cause a denial of service file descriptor consumption and crash via multiple failed SSL handshakes, a different vulnerability than CVE-2013-4550. NOTE: this issue was SPLIT from CVE-2013-4550 becaus...

CVE-2011-5268

connection.c in Bip before 0.8.9 does not properly close sockets, which allows remote attackers to cause a denial of service file descriptor consumption and crash via multiple failed SSL handshakes, a different vulnerability than CVE-2013-4550. NOTE: this issue was SPLIT from CVE-2013-4550 becaus...