USN-6766-2: Linux kernel vulnerabilities

It was discovered that the Open vSwitch implementation in the Linux kernel could overflow its stack during recursive action operations under certain conditions. A local attacker could use this to cause a denial of service system crash. CVE-2024-1151 Sander Wiebing, Alvise de Faveri Tron, Herbert...

BIT-CILIUM-2024-28860

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Users of IPsec transparent encryption in Cilium may be vulnerable to cryptographic attacks that render the transparent encryption ineffective. In particular, Cilium is vulnerable to chosen plaintext, key...

BIT-CILIUM-OPERATOR-2024-28860

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Users of IPsec transparent encryption in Cilium may be vulnerable to cryptographic attacks that render the transparent encryption ineffective. In particular, Cilium is vulnerable to chosen plaintext, key...

Security Bulletin: IBM QRadar SIEM protocols are vulnerable to information exposure and denial of service (CVE-2023-31582, CVE-2023-51775)

Summary The Jose4j library is vulnerable to a denial of service, caused by improper input validation. It could also allow a remote attacker to obtain sensitive information using cryptographic attacks. Vulnerability Details CVEID:CVE-2023-31582 DESCRIPTION: Jose4J could allow a remote attacker to...

The vulnerability of the `__sev_platform_shutdown_locked()` function in the Linux operating system’s cryptographic processor driver by AMD allows a hacker to trigger a shutdown failure.

The vulnerability of the sevplatformshutdownlocked function in the drivers/crypto/ccp/sev-dev.c file of the Linux operating system’s cryptographic processor driver software is related to the assignment of a zero pointer. Exploiting this vulnerability could allow an attacker to trigger a service...

Dell PowerScale OneFS Encryption Issue Vulnerability

Dell PowerScale OneFS is a proprietary operating system developed by Dell for its PowerScale horizontally scalable NAS network attached storage solution. Dell PowerScale OneFS has a cryptographic issue vulnerability that arises from the presence of a vulnerability in the use of corrupted or risky...

TYPO3 vulnerable to an Uncontrolled Resource Consumption in the ShowImageController

Problem The ShowImageController eID txcmsshowpic lacks a cryptographic HMAC-signature on the frame HTTP query parameter e.g. /index.php?eID=txcmsshowpic?file=3&...&frame=12345. This allows adversaries to instruct the system to produce an arbitrary number of thumbnail images on the server side...

CVE-2024-30020

Windows Cryptographic Services Remote Code Execution Vulnerability...

CVE-2024-30020

Windows Cryptographic Services Remote Code Execution Vulnerability...

CVE-2024-30016

Windows Cryptographic Services Information Disclosure Vulnerability...

CVE-2024-30016

Windows Cryptographic Services Information Disclosure Vulnerability...

CVE-2024-30020 Windows Cryptographic Services Remote Code Execution Vulnerability

...

CVE-2024-30020 Windows Cryptographic Services Remote Code Execution Vulnerability

...

CVE-2024-30020

CVE-2024-30020 corresponds to a Remote Code Execution vulnerability in Windows Cryptographic Services. Affected: Windows Cryptographic Services component; vulnerability type is RCE. From the CVE entry, the CVSS v3.1 base score is 8.1 (High) with Network attack vector, high attack complexity, no p...

CVE-2024-30016 Windows Cryptographic Services Information Disclosure Vulnerability

...

CVE-2024-30016 Windows Cryptographic Services Information Disclosure Vulnerability

...

CVE-2024-30016

CVE-2024-30016 affects Windows Cryptographic Services . The vulnerability is described as an information disclosure with impact to confidentiality (high) and is listed in sources as a Windows component issue with a CVSS v3.1 base score of 5.5 (attack vector: local; privileges required: low; user ...

CVE-2024-34358

TYPO3 is an enterprise content management system. Starting in version 9.0.0 and prior to versions 9.5.48 ELTS, 10.4.45 ELTS, 11.5.37 LTS, 12.4.15 LTS, and 13.1.1, the ShowImageController eID txcmsshowpic lacks a cryptographic HMAC-signature on the frame HTTP query parameter e.g...

CVE-2024-30209

A vulnerability has been identified in SIMATIC RTLS Locating Manager 6GT2780-0DA00 All versions V3.0.1.1, SIMATIC RTLS Locating Manager 6GT2780-0DA10 All versions V3.0.1.1, SIMATIC RTLS Locating Manager 6GT2780-0DA20 All versions V3.0.1.1, SIMATIC RTLS Locating Manager 6GT2780-0DA30 All versions...

CVE-2024-25968

Dell PowerScale OneFS versions 8.2.x through 9.7.0.2 contains a use of a broken or risky cryptographic algorithm vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to information disclosure...