USN-6898-2: Linux kernel vulnerabilities

Ziming Zhang discovered that the DRM driver for VMware Virtual GPU did not properly handle certain error conditions, leading to a NULL pointer dereference. A local attacker could possibly trigger this vulnerability to cause a denial of service. CVE-2022-38096 Gui-Dong Han discovered that the...

PT-2024-5287 · Cisco · Cisco Intelligent Node

Name of the Vulnerable Software and Affected Versions: Cisco Intelligent Node iNode Software affected versions not specified Description: The issue is related to the use of a hard-coded cryptographic key in the software, which could allow a remote attacker to exploit the vulnerability and impact...

The vulnerability of the Windows Enroll Engine component in Windows operating systems allows a hacker to bypass security restrictions.

The vulnerability of the Windows Enroll Engine component in Windows operating systems is related to errors in verifying the cryptographic signature. Exploiting this vulnerability could allow a perpetrator to circumvent security restrictions...

Ubuntu 20.04 LTS : Linux kernel vulnerabilities (USN-6896-3)

The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6896-3 advisory. It was discovered that the ATA over Ethernet AoE driver in the Linux kernel contained a race condition, leading to a use-after-free vulnerability. An...

ROS-20240717-03

A vulnerability in the implementation of the gnutlspkcs7verify function of the GnuTLS cryptographic library is related to double release errors occurring during verification of pkcs7 signatures. Exploitation of the vulnerability could Allow an attacker acting remotely to cause a denial of service...

Ubuntu 20.04 LTS / 22.04 LTS : Linux kernel vulnerabilities (USN-6898-2)

The remote Ubuntu 20.04 LTS / 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6898-2 advisory. Ziming Zhang discovered that the DRM driver for VMware Virtual GPU did not properly handle certain error conditions, leading to a NULL pointe...

IBM Datacap Navigator Encryption Issue Vulnerability

IBM Datacap Navigator is a Web client for Datacap from International Business Machines IBM. IBM Datacap Navigator suffers from a cryptographic issue vulnerability that stems from the use of a weaker-than-expected encryption algorithm, which could be exploited by an attacker to decrypt highly...

The vulnerability of Cryptographic Service Provider (CSP) and Key Storage Provider (KSP) services in Windows operating systems allows attackers to circumvent security restrictions.

The vulnerability of Cryptographic Service Provider CSP and Key Storage Provider KSP services in Windows operating systems is related to the use of cryptographic algorithms that contain vulnerabilities. Exploiting this vulnerability can allow a malicious actor to bypass security restrictions...

Ubuntu 22.04 LTS : Linux kernel vulnerabilities (USN-6900-1)

The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6900-1 advisory. It was discovered that the ATA over Ethernet AoE driver in the Linux kernel contained a race condition, leading to a use-after-free vulnerability. An...

USN-6896-2: Linux kernel vulnerabilities

It was discovered that the ATA over Ethernet AoE driver in the Linux kernel contained a race condition, leading to a use-after-free vulnerability. An attacker could use this to cause a denial of service or possibly execute arbitrary code. CVE-2023-6270 It was discovered that the Atheros 802.11ac...

USN-6893-2 linux-gke, linux-nvidia vulnerabilities

It was discovered that a race condition existed in the Bluetooth subsystem in the Linux kernel when modifying certain settings values through debugfs. A privileged local attacker could use this to cause a denial of service. CVE-2024-24857, CVE-2024-24858, CVE-2024-24859 Several security issues we...

USN-6893-2: Linux kernel vulnerabilities

It was discovered that a race condition existed in the Bluetooth subsystem in the Linux kernel when modifying certain settings values through debugfs. A privileged local attacker could use this to cause a denial of service. CVE-2024-24857, CVE-2024-24858, CVE-2024-24859 Several security issues we...

PT-2024-8105 · Unknown · Data Center Expert

Name of the Vulnerable Software and Affected Versions: Data Center Expert affected versions not specified Description: The issue is related to an improper verification of cryptographic signature, which could compromise the Data Center Expert software. This vulnerability allows an attacker to...

Huawei EulerOS: Security Advisory for gnutls (EulerOS-SA-2024-1884)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 24.04 LTS : Linux kernel vulnerabilities (USN-6893-2)

"The remote Ubuntu 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6893-2 advisory. It was discovered that a race condition existed in the Bluetooth subsystem in the Linux kernel when modifying certain settings values through debugfs. A...

Huawei EulerOS: Security Advisory for gnutls (EulerOS-SA-2024-1908)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 22.04 LTS : Linux kernel vulnerabilities (USN-6895-2)

The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6895-2 advisory. It was discovered that the ATA over Ethernet AoE driver in the Linux kernel contained a race condition, leading to a use-after-free vulnerability. An...

USN-6898-1: Linux kernel vulnerabilities

Ziming Zhang discovered that the DRM driver for VMware Virtual GPU did not properly handle certain error conditions, leading to a NULL pointer dereference. A local attacker could possibly trigger this vulnerability to cause a denial of service. CVE-2022-38096 Gui-Dong Han discovered that the...

CVE-2024-39731

CVE-2024-39731 affects IBM Datacap Navigator 9.1.5–9.1.9, where weaker-than-expected cryptographic algorithms could allow an attacker to decrypt highly sensitive information. The issue is documented across multiple sources, including IBM’s security bulletin and Red Hat’s entry, with additional re...

CVE-2024-39731 IBM Datacap Navigator information disclosure

IBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, and 9.1.9 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 295970...