8420 matches found
USN-5381-1: Linux kernel (OEM) vulnerabilities
David Bouman discovered that the netfilter subsystem in the Linux kernel did not properly validate passed user register indices. A local attacker could use this to cause a denial of service or possibly execute arbitrary code. CVE-2022-1015 It was discovered that the block layer subsystem in the...
EulerOS 2.0 SP10 : kernel (EulerOS-SA-2022-1508)
According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in the Linux kernel through 5.10.1, as used with Xen through 4.14.x. The Linux kernel PV block backend expects the kerne...
Cisco IOS XR BGP DoS
The vulnerability of the Border Gateway Protocol BGP implementation in the Ethernet VPN EVPN technology of the Cisco IOS XR operating system is related to resource management errors. Exploiting this vulnerability allows a malicious actor to trigger a service failure by sending a specially crafted...
CVE-2022-20758
A vulnerability in the implementation of the Border Gateway Protocol BGP Ethernet VPN EVPN functionality in Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. This vulnerability is due to the incorrect processing of a BGP update messa...
Cisco IOS XR BGP Ethernet VPN Denial of Service Vulnerability
Cisco IOS XR is a set of operating systems developed by Cisco for its network devices.A denial-of-service vulnerability exists in Cisco IOS XR BGP Ethernet VPN, which can be exploited by attackers to cause a denial of service...
CVE-2022-20758
A vulnerability in the implementation of the Border Gateway Protocol BGP Ethernet VPN EVPN functionality in Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. This vulnerability is due to the incorrect processing of a BGP update messa...
Cisco IOS XR resource management error vulnerabilities
Cisco IOS XR is a set of operating systems developed by Cisco for its network devices.A denial-of-service vulnerability exists in Cisco IOS XR BGP Ethernet VPN, which can be exploited by attackers to cause a denial of service...
PT-2022-2276
Name of the Vulnerable Software and Affected Versions Cisco IOS XR Software affected versions not specified Description A vulnerability in the implementation of the Border Gateway Protocol BGP Ethernet VPN EVPN functionality could allow an unauthenticated, remote attacker to cause a denial of...
CVE-2022-22560
Dell EMC PowerScale OneFS 8.1.x - 9.1.x contain hard coded credentials. This allows a local user with knowledge of the credentials to login as the admin user to the backend ethernet switch of a PowerScale cluster. The attacker can exploit this vulnerability to take the switch offline...
CVE-2022-22560
Dell EMC PowerScale OneFS 8.1.x–9.1.x is affected by a vulnerability due to hard coded credentials that allow a locally authenticated attacker to log in as the admin user to the backend Ethernet switch of a PowerScale cluster, potentially taking the switch offline. Root cause: hard coded credenti...
CVE-2022-26335
A vulnerability has been identified in SCALANCE X302-7 EEC 230V, SCALANCE X302-7 EEC 230V, coated, SCALANCE X302-7 EEC 24V, SCALANCE X302-7 EEC 24V, coated, SCALANCE X302-7 EEC 2x 230V, SCALANCE X302-7 EEC 2x 230V, coated, SCALANCE X302-7 EEC 2x 24V, SCALANCE X302-7 EEC 2x 24V, coated, SCALANCE...
CVE-2022-22560: Use of Hard-coded Credentials
Dell EMC PowerScale OneFS 8.1.x - 9.1.x contain hard coded credentials. This allows a local user with knowledge of the credentials to login as the admin user to the backend ethernet switch of a PowerScale cluster. The attacker can exploit this vulnerability to take the switch offline...
PT-2022-15529
Name of the Vulnerable Software and Affected Versions Dell EMC PowerScale OneFS versions 8.1.x through 9.1.x Description The issue concerns hard-coded credentials in the software, allowing a local user with knowledge of these credentials to login as the admin user to the backend ethernet switch o...
PT-2022-3762 · Schneider Electric · Modicon M340 Cpu +4
Name of the Vulnerable Software and Affected Versions: Modicon M340 CPUs versions prior to V3.40 Modicon M340 X80 Ethernet Communication modules: BMXNOE0100 H, BMXNOE0110 H BMXNOE all versions BMXNOR versions prior to v1.7 IR24 Description: A vulnerability exists that could cause a denial of...
USN-5368-1: Linux kernel vulnerabilities
It was discovered that the BPF verifier in the Linux kernel did not properly restrict pointer types in certain situations. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2022-23222 It was discovered that the network traffic contro...
FreeBSD -- Bhyve e82545 device emulation out-of-bounds write
Problem Description: The e1000 network adapters permit a variety of modifications to an Ethernet packet when it is being transmitted. These include the insertion of IP and TCP checksums, insertion of an Ethernet VLAN header, and TCP segmentation offload "TSO". The e1000 device model uses an...
CVE-2021-33096
A denial-of-service flaw was found due to improper isolation of shared resources in the network on chip for the IntelR 82599 Ethernet Controllers and Adapters. This may allow an authenticated user to potentially create a denial of service via local access. Mitigation Mitigation for this issue is...
Rockwell Automation Logix Controllers
1. EXECUTIVE SUMMARY CVSS v3 10.0 ATTENTION: Exploitable remotely/low attack complexity Vendor: Rockwell Automation Equipment: Logix Controllers Vulnerability: Inclusion of Functionality from Untrusted Control Sphere 2. RISK EVALUATION Successful exploitation of this vulnerability may allow an...
Ethernet Protocol Stack TCP/IP Unauthorized Access
The vulnerability of the Ethernet protocol implementation in the Trace TCP/IP stack is related to integer overflows. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
