PT-2025-54086

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.4.0 28 Description The Linux kernel contains a flaw related to memory management within the macb Multi-port Ethernet Controller with Buffer driver in extended buffer descriptor mode. The issue manifests as a...

Driver Disk for Cisco enic 4.4.0.1-930.6 - For Citrix Hypervisor 8.2 LTSR

Who should install this driver disk? Customers running the Citrix Hypervisor 8.2 LTSR release who use Cisco's enic driver and wish to use the latest version of the following: Driver Module| Driver Type| Version ---|---|--- enic| Ethernet/NIC| 4.4.0.1-930.6 Issues resolved in this driver disk...

MiniIGD Service RCE

The vulnerability of the MiniIGD service’s Gigabit Ethernet chips from Realtek, the RTL81xx series, is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to execute arbitrary code using specially crafted requests like NewInternalClient...

PT-2023-3059 · Juniper Networks · Qfx10000 Series +2

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions prior to 19.4R3-S10 Juniper Networks Junos OS version 20.1R1 and later versions Juniper Networks Junos OS versions prior to 20.2R3-S6 Juniper Networks Junos OS versions prior to 20.3R3-S6 Juniper Networks...

USN-6007-1: Linux kernel (GCP) vulnerabilities

It was discovered that the Upper Level Protocol ULP subsystem in the Linux kernel did not properly handle sockets entering the LISTEN state in certain protocols, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service system crash or possibly execut...

CVE-2023-28224

Windows Point-to-Point Protocol over Ethernet PPPoE Remote Code Execution Vulnerability...

Authorization Bypass

github.com/moby/moby is vulnerable to Authorization Bypass. Encrypted overlay networks accept cleartext VXLAN datagrams tagged with the VNI of the network, which allows remote attackers to arbitrary inject ethernet frames into the encrypted overlay network...

Microsoft Windows Point-to-Point Protocol over Ethernet 安全漏洞

Microsoft Windows Point-to-Point Protocol over Ethernet is the PPPoE protocol used in Windows from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Point-to-Point Protocol over Ethernet PPPoE. The following products and versions are affected: Windows 10 Version 21H2...

CVE-2023-28224: Sensitive Data Storage in Improperly Locked Memory

Windows Point-to-Point Protocol over Ethernet PPPoE Remote Code Execution Vulnerability...

PT-2023-2404 · Microsoft · Windows Point-To-Point Protocol Over Ethernet +1

Name of the Vulnerable Software and Affected Versions: Windows Point-to-Point Protocol over Ethernet PPPoE affected versions not specified Description: The issue is related to errors in synchronization when using a shared resource, specifically a "race condition" in the implementation of the...

Denial Of Service (DoS)

docker is vulnerable to Denial of Service DoS attacks. The injection of arbitrary ethernet frames allow remote attackers to enable denial of service attacks, such as establishing a UDP or TCP connection or smuggling packets into the overlay network...

CVE-2023-28840

A vulnerability was found in Moby due to an unprotected alternate channel within encrypted overlay networks. This issue could allow a malicious user to cause a denial of service by sending a specially crafted request to inject arbitrary Ethernet frames into the encrypted overlay network...

Docker Swarm encrypted overlay network with a single endpoint is unauthenticated

Moby is an open source container framework developed by Docker Inc. that is distributed as Docker, Mirantis Container Runtime, and various other downstream projects/products. The Moby daemon component dockerd, which is developed as moby/moby is commonly referred to as Docker. Swarm Mode, which is...

GHSA-6WRF-MXFJ-PF5P Docker Swarm encrypted overlay network with a single endpoint is unauthenticated

Moby is an open source container framework developed by Docker Inc. that is distributed as Docker, Mirantis Container Runtime, and various other downstream projects/products. The Moby daemon component dockerd, which is developed as moby/moby is commonly referred to as Docker. Swarm Mode, which is...

A flaw use after free in the Linux kernel Xircom 16-bit PCMCIA (PC-card) Ethernet driver was found.A local user could use this flaw to crash the system or potentially escalate their privileges on the system.

...

Moby 安全漏洞

Moby is an open source project that aims to drive containerization of software and help the ecosystem mainstream container technology. A security vulnerability exists in Moby version 1.12 and later. An attacker exploited the vulnerability to inject arbitrary Ethernet frames into a cryptographic...

HPESBGN04448 rev.1 - HPE Intel 700 and E810 Series Ethernet Controllers, INTEL-SA-00754, Intel Ethernet Controllers and Adapters Advisory, Local Denial of Service

Potential Security Impact: Local: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Ethernet 1Gb 2-port 368FLR-MMT Adapter -Prior to CVL 4.10/FVL 9.10 - Intel Ethernet 700 Series Controller HPE Ethernet 1Gb 2-port 368i Adapter -Prior to CVL 4.10/FVL 9.10 -...

DEBIAN-CVE-2023-1670

A flaw use after free in the Linux kernel Xircom 16-bit PCMCIA PC-card Ethernet driver was found.A local user could use this flaw to crash the system or potentially escalate their privileges on the system...

AZL-25900 CVE-2023-1670 affecting package hyperv-daemons for versions less than 5.15.107.1-1

A flaw use after free in the Linux kernel Xircom 16-bit PCMCIA PC-card Ethernet driver was found.A local user could use this flaw to crash the system or potentially escalate their privileges on the system...

CVE-2023-1670

A flaw use after free in the Linux kernel Xircom 16-bit PCMCIA PC-card Ethernet driver was found.A local user could use this flaw to crash the system or potentially escalate their privileges on the system...