Moderate: Red Hat Security Advisory: rhc security update

An update for rhc is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CV...

Linux nfsd Privilege Escalation

The vulnerability of the nfsd component in Linux operating systems is related to memory management errors after freeing memory. Exploiting this vulnerability can allow an attacker to gain elevated privileges within the system...

RHEL 9 : rhc (RHSA-2024:10759)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:10759 advisory. rhc is a client tool and daemon that connects the system to Red Hat hosted services enabling system and subscription management. Security Fixes:...

CVE-2024-36620

A flaw was found in Moby. This vulnerability allows an attacker to cause a NULL pointer dereference, potentially leading to a denial of service via improper handling of specific requests in the image history functionality...

libreswan: Invalid IKEv1 repeat IKE SA delete causes crash and restart

A NULL pointer dereference vulnerability was found in the Libreswan package. When an IKEv1 ISAKMP SA Informational Exchange packet contains a Delete/Notify payload followed by further Notifies that act on the ISAKMP SA, such as a duplicated Delete/Notify message, a NULL pointer dereference on the...

libreswan: Invalid IKEv1 Quick Mode ID causes restart

A NULL pointer dereference flaw was found in Libreswan when processing IKEv1 Quick Mode requests. When an IKEv1 Quick Mode connection configured with IDIPV4ADDR or IDIPV6ADDR receives an IDcr payload with IDFQDN, it triggers a NULL pointer dereference error. This flaw allows a malicious client or...

libreswan: Invalid IKEv2 REKEY proposal causes restart

An assertion failure flaw was found in the Libreswan package that occurs when processing IKEv2 REKEY requests. When an IKEv2 Child SA REKEY packet contains an invalid IPsec protocol ID number of 0 or 1, an error notification INVALIDSPI is sent back. The notify payload's protocol ID is copied from...

PT-2024-37418

Name of the Vulnerable Software and Affected Versions: LXD versions 4.0 through 5.21.1 Description: A security issue was discovered in LXD's PKI mode, where a client's certificate could be used to bypass authentication if the certificate is present in the trust store, even if it is not signed by ...

Juniper Junos OS Vulnerability (JSA88138)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA88138 advisory. - An Improper Check for Unusual or Exceptional Conditions vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an...

GHSA-Q59J-VV4J-V33C NULL Pointer Dereference on moby image history

moby v25.0.0 - v26.0.2 is vulnerable to NULL Pointer Dereference via daemon/images/imagehistory.go...

AZL-53828 CVE-2024-36620 affecting package moby-engine for versions less than 25.0.3-9

moby v25.0.0 - v26.0.2 is vulnerable to NULL Pointer Dereference via daemon/images/imagehistory.go...

CVE-2024-36620

moby v25.0.0 - v26.0.2 is vulnerable to NULL Pointer Dereference via daemon/images/imagehistory.go...

[SECURITY] Fedora 41 Update: tuned-2.24.1-1.fc41

The tuned package contains a daemon that tunes system settings dynamically. It does so by monitoring the usage of several system components periodically. Based on that information components will then be put into lower or higher power saving modes to adapt to the current usage. Currently only...

CVE-2024-36620

moby v25.0.0 - v26.0.2 is vulnerable to NULL Pointer Dereference via daemon/images/imagehistory.go...

PT-2024-9588

Name of the Vulnerable Software and Affected Versions moby versions 25.0.0 through 26.0.2 Description The issue is related to a NULL Pointer Dereference in the daemon/images/image history.go file. This could potentially allow a remote attacker to cause a denial of service. Recommendations For mob...

CVE-2024-36620

moby v25.0.0 - v26.0.2 is vulnerable to NULL Pointer Dereference via daemon/images/imagehistory.go...

HPESBMU04762 rev.1 - HPE IceWall Products, Remote Unauthorized Data Modification

Potential Security Impact: Remote: Unauthorized Data Modification SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. IceWall Gen11 Enterprise Edition certd RHEL 7, 8, 9 and Windows IceWall Gen11 Standard Edition certd RHEL 7, 8, 9 and Windows IceWall SSO certd 10.0 HP-UX CVSS Scores:...

Juniper Networks Routing Protocol Demon DoS

The vulnerability of the routing protocol demon pdrd in Juniper Networks’ Junos OS and Junos OS Evolved systems is related to memory release errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

[SECURITY] Fedora 41 Update: needrestart-3.8-1.fc41

needrestart checks which daemons need to be restarted after library upgrades. It is inspired by checkrestart from the debian-goodies package...

Juniper Junos OS Vulnerability (JSA88099)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA88099 advisory. - An Improper Validation of Consistency within Input vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an...