Intel Ethernet Adapters and Intel Ethernet Controller I225 Manageability firmware security vulnerability

Intel Ethernet Adapters and Intel Ethernet Controllers are products of Intel Corporation, USA. Intel Ethernet Adapters are Ethernet adapters. Intel Ethernet Controllers are Ethernet controllers. Intel Ethernet Adapters and Intel Ethernet Controllers are products of Intel Corporation. A security...

PT-2024-10952

Name of the Vulnerable Software and Affected Versions IntelR Ethernet Adapters and IntelR Ethernet Controller I225 Manageability firmware affected versions not specified Description The issue is related to improper input validation in the firmware, which may allow an unauthenticated user to...

Multiple Siemens Products Communication Channel Source Verification Error Vulnerability

The SIMATIC CP 343-1 is a communication processor CP that provides Ethernet communication for the SIMATIC S7-300 cpu. SIPLUS Extreme products are designed for reliable operation under extreme conditions and are based on SIMATIC, LOGO!, SITOP, SINAMICS, SIMOTION, SCALANCE or other devices. SIPLUS...

Ubuntu: Security Advisory (USN-6625-3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

kernel: IGB driver inadequate buffer size for frames larger than MTU

A flaw was found in igbconfigurerxring in drivers/net/ethernet/intel/igb/igbmain.c in the IGB driver in the Linux kernel. An overflow of the contents from a packet that is too large will overflow into the kernel's ring buffer, leading to a system integrity issue...

USN-6625-3 linux-raspi, linux-raspi-5.4 vulnerabilities

Marek Marczykowski-Górecki discovered that the Xen event channel infrastructure implementation in the Linux kernel contained a race condition. An attacker in a guest VM could possibly use this to cause a denial of service paravirtualized device unavailability. CVE-2023-34324 Zheng Wang discovered...

CVE-2024-22727

Teltonika TRB1-series devices with firmware before TRB1R00.07.05.2 allow attackers to exploit a firmware vulnerability via Ethernet LAN or USB...

CVE-2024-22727

Teltonika TRB1-series devices with firmware before TRB1R00.07.05.2 allow attackers to exploit a firmware vulnerability via Ethernet LAN or USB...

Design/Logic Flaw

Teltonika TRB1-series devices with firmware before TRB1R00.07.05.2 allow attackers to exploit a firmware vulnerability via Ethernet LAN or USB...

CVE-2024-22727

Teltonika TRB1-series devices with firmware before TRB1R00.07.05.2 allow attackers to exploit a firmware vulnerability via Ethernet LAN or USB...

CVE-2024-22727

CVE-2024-22727 affects Teltonika TRB1-series gateways running firmware earlier than TRB1_R_00.07.05.2. Reports across sources consistently describe a firmware vulnerability exploitable over Ethernet LAN or USB. The Red Hat and NVD entries corroborate the affected device family and version boundar...

Teltonika Networks TRB1 Series Security Vulnerability

Teltonika Networks TRB1 Series is a series of IoT gateways from Teltonika Networks. A security vulnerability exists in Teltonika Networks TRB1 Series versions prior to TRB1R00.07.05.2. An attacker could exploit this vulnerability to perform malicious attacks over an Ethernet LAN or USB...

CVE-2024-22727

Teltonika TRB1-series devices with firmware before TRB1R00.07.05.2 allow attackers to exploit a firmware vulnerability via Ethernet LAN or USB...

PT-2024-19546

Name of the Vulnerable Software and Affected Versions Teltonika TRB1-series devices versions prior to TRB1 R 00.07.05.2 Description The issue allows attackers to exploit a firmware vulnerability via Ethernet LAN or USB. Recommendations For versions prior to TRB1 R 00.07.05.2, update the firmware ...

USN-6626-3: Linux kernel (Azure) vulnerabilities

Quentin Minster discovered that a race condition existed in the KSMBD implementation in the Linux kernel when handling sessions operations. A remote attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2023-32250, CVE-2023-32252, CVE-2023-32257...

USN-6626-3 linux-azure, linux-azure-5.15, linux-azure-fde, linux-azure-fde-5.15 vulnerabilities

Quentin Minster discovered that a race condition existed in the KSMBD implementation in the Linux kernel when handling sessions operations. A remote attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2023-32250, CVE-2023-32252, CVE-2023-32257...

CVE-2022-23087

The e1000 network adapters permit a variety of modifications to an Ethernet packet when it is being transmitted. These include the insertion of IP and TCP checksums, insertion of an Ethernet VLAN header, and TCP segmentation offload "TSO". The e1000 device model uses an on-stack buffer to generat...

Stack overflow

The e1000 network adapters permit a variety of modifications to an Ethernet packet when it is being transmitted. These include the insertion of IP and TCP checksums, insertion of an Ethernet VLAN header, and TCP segmentation offload "TSO". The e1000 device model uses an on-stack buffer to generat...

CVE-2022-23087

The CVE-2022-23087 issue affects the e1000 device emulation in bhyve on FreeBSD, where the device model uses an on‑stack buffer to modify transmitted packets. When checksum offload is requested, a guest‑provided checksum offset is accepted without validation for certain packet types, enabling a m...

CVE-2023-39432

Improper access control element in some IntelR Ethernet tools and driver install software, before versions 28.2, may allow an authenticated user to potentially enable escalation of privilege via local access...