42 matches found
PT-2024-20391 · Magma +1 · Magma +1
Name of the Vulnerable Software and Affected Versions: Magma version 1.8.0 OAI EPC Federation version 1.20 Description: The issue is related to an out-of-bounds read in the amf as establish req function at /tasks/amf/amf as.cpp. This allows attackers to cause a Denial of Service DoS via a crafted...
DEBIAN-CVE-2024-47749
In the Linux kernel, the following vulnerability has been resolved: RDMA/cxgb4: Added NULL check for lookupatid The lookupatid function can return NULL if the ATID is invalid or does not exist in the identifier table, which could lead to dereferencing a null pointer without a check in the...
AZL-50673 CVE-2024-47749 affecting package kernel for versions less than 6.6.56.1-5
In the Linux kernel, the following vulnerability has been resolved: RDMA/cxgb4: Added NULL check for lookupatid The lookupatid function can return NULL if the ATID is invalid or does not exist in the identifier table, which could lead to dereferencing a null pointer without a check in the...
AZL-50682 CVE-2024-47749 affecting package kernel for versions less than 5.15.173.1-1
In the Linux kernel, the following vulnerability has been resolved: RDMA/cxgb4: Added NULL check for lookupatid The lookupatid function can return NULL if the ATID is invalid or does not exist in the identifier table, which could lead to dereferencing a null pointer without a check in the...
UBUNTU-CVE-2024-47749
In the Linux kernel, the following vulnerability has been resolved: RDMA/cxgb4: Added NULL check for lookupatid The lookupatid function can return NULL if the ATID is invalid or does not exist in the identifier table, which could lead to dereferencing a null pointer without a check in the...
PT-2024-32794
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.58 Description A null pointer dereference issue was found in the RDMA/cxgb4 component of the Linux kernel. The lookup atid function can return NULL if the ATID is invalid or does not exist in the identifier...
kernel: RDMA/cxgb4: Fix potential null-ptr-deref in pass_establish()
In the Linux kernel, the following vulnerability has been resolved: RDMA/cxgb4: Fix potential null-ptr-deref in passestablish If getepfromtid fails to lookup non-NULL value for ep, ep is dereferenced later regardless of whether it is empty. This patch adds a simple sanity check to fix the issue...
TA445 Targeting Government and Military Sectors in Ukraine and Poland
Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary TA455 conducts ongoing campaigns targeting government entities, military organizations, and civilians in Ukraine and Poland to steal information and establish remote access, using multi-stage infection...
PT-2023-35519
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A stack-buffer-overflow crash was reported, specifically a WRITE 1 crash type, occurring in the ntlm phase 3 and establish http proxy passthru functions...
CVE-2022-24695
Bluetooth Classic in Bluetooth Core Specification through 5.3 does not properly conceal device information for Bluetooth transceivers in Non-Discoverable mode. By conducting an efficient over-the-air attack, an attacker can fully extract the permanent, unique Bluetooth MAC identifier, along with...
PT-2023-36667
Уязвимость функции pass establish модуля drivers/infiniband/hw/cxgb4/cm.c драйвера InfiniBand ядра операционной системы Linux связана с разыменованием указателей. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...
PT-2025-38185
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the RDMA/cxgb4 component where a null pointer dereference could occur in the pass establish function. This happens if get ep from tid fails to locate ...
PT-2022-37296
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a stack buffer overflow, which occurs during the ntlm phase 3 and establish http proxy passthru functions in the fuzz proxy.c file...
Junos OS: Deleted dynamic VPN users are allowed to establish VPN connections until reboot (JSA10915)
According to its self-reported version number, the remote Juniper Junos device is affected by a vulnerability that allows deleted dynamic VPN users to establish dynamic VPN connections until the device is rebooted. TRUSTED...
Backdoorme - Powerful Auto-Backdooring Utility
Tools like metasploit are great for exploiting computers, but what happens after you've gained access to a computer? Backdoorme answers that question by unleashing a slew of backdoors to establish persistence over long periods of time. Once an SSH connection has been established with the target,...
xorg-x11-server denial of service vulnerability
The xorg-x11-server is an X Window System display server bundled with multiple vendor operating systems. A security vulnerability exists in the 'ProcEstablishConnection' function in versions of xorg-x11-server prior to 1.19.5, which stems from a lack of extra length detection in the program. An...
ALPINE-CVE-2017-12176
xorg-x11-server before 1.19.5 was missing extra length validation in ProcEstablishConnection function allowing malicious X client to cause X server to crash or possibly execute arbitrary code...
January 19, 2018—KB4057400 (Preview of Monthly Rollup)
None None...
Joomla! Extra Search Component SQL Injection Vulnerability
Joomla! is a fairly well-known content management system in foreign countries. Extra Search is used in Joomla category management search system components. Extra Search is a component of Joomla that is used to manage category searches. An SQL injection vulnerability exists in the ESTABLENAME...
TP-Link SC2020n Authenticated Telnet Injection
This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class MetasploitModule 'TP-Link SC2020n Authenticated Telnet Injection', 'Description' = %q The TP-Link SC2020n Network Video Camera is vulnerable to O...