The vulnerability of the NanoSSL library in microprogramming software for ERS3500, ERS3600, ERS4900, and ERS5900 switches allows a hacker to execute arbitrary code.

The vulnerability of the NanoSSL library software for ERS3500, ERS3600, ERS4900, and ERS5900 switches is caused by buffer overflow in the dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted POST request...

Tenda HG6 3.3.0 Remote Command Injection Vulnerability

Tenda HG6 version 3.3.0 suffers from a remote command injection vulnerability. It can be exploited to inject and execute arbitrary shell commands through the pingAddr and traceAddr HTTP POST parameters in formPing, formPing6, formTracert and formTracert6 interfaces. Tenda HG6 v3.3.0 Remote Comman...

Qualcomm多款产品 代码问题漏洞

The Qualcomm QCA chip and the Qualcomm AR8035 are both products of Qualcomm Incorporated.The Qualcomm QCA chip is a Bluetooth module chip.The Qualcomm AR8035 is an integrated 10/100/1000 Gigabit Ethernet transceiver. A code issue vulnerability exists in multiple Qualcomm products that stems from...

[SECURITY] Fedora 34 Update: bettercap-2.28-9.fc34

The Swiss Army knife for 802.11, BLE and Ethernet networks reconnaissance and MITM attacks...

[SECURITY] Fedora 35 Update: bettercap-2.28-9.fc35

The Swiss Army knife for 802.11, BLE and Ethernet networks reconnaissance and MITM attacks...

EulerOS 2.0 SP5 : kernel (EulerOS-SA-2022-1523)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An out of memory bounds write flaw 1 or 2 bytes of memory in the Linux kernel NFS subsystem was found in the way users use mirroring replication...

GSD-2022-1002466 net: ethernet: stmmac: fix altr_tse_pcs function when using a fixed-link

net: ethernet: stmmac: fix altrtsepcs function when using a fixed-link This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.311 by commit...

GSD-2022-1002391 net: ethernet: stmmac: fix altr_tse_pcs function when using a fixed-link

net: ethernet: stmmac: fix altrtsepcs function when using a fixed-link This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.276 by commit...

GSD-2022-1002297 net: ethernet: stmmac: fix altr_tse_pcs function when using a fixed-link

net: ethernet: stmmac: fix altrtsepcs function when using a fixed-link This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.239 by commit...

GSD-2022-1002169 veth: Ensure eth header is in skb's linear part

veth: Ensure eth header is in skb's linear part This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.190 by commit...

GSD-2022-1002166 net: ethernet: stmmac: fix altr_tse_pcs function when using a fixed-link

net: ethernet: stmmac: fix altrtsepcs function when using a fixed-link This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.190 by commit...

GSD-2022-1001960 net: ethernet: stmmac: fix altr_tse_pcs function when using a fixed-link

net: ethernet: stmmac: fix altrtsepcs function when using a fixed-link This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.112 by commit...

GSD-2022-1001818 drivers: ethernet: cpsw: fix panic when interrupt coaleceing is set via ethtool

drivers: ethernet: cpsw: fix panic when interrupt coaleceing is set via ethtool This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.33 by comm...

GSD-2022-1001660 net: ethernet: stmmac: fix altr_tse_pcs function when using a fixed-link

net: ethernet: stmmac: fix altrtsepcs function when using a fixed-link This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.35 by commit...

GSD-2022-1001504 drivers: ethernet: cpsw: fix panic when interrupt coaleceing is set via ethtool

drivers: ethernet: cpsw: fix panic when interrupt coaleceing is set via ethtool This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.19 by comm...

GSD-2022-1001186 drivers: ethernet: cpsw: fix panic when interrupt coaleceing is set via ethtool

drivers: ethernet: cpsw: fix panic when interrupt coaleceing is set via ethtool This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.2 by commi...

GSD-2022-1000982 net: ethernet: stmmac: fix altr_tse_pcs function when using a fixed-link

net: ethernet: stmmac: fix altrtsepcs function when using a fixed-link This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.4 by commit...

USN-5385-1 linux, linux-aws, linux-aws-hwe, linux-azure, linux-azure-4.15, linux-dell300x, linux-gcp, inux-gcp-4.15, linux-hwe, linux-kvm, linux-oracle, linux-snapdragon vulnerabilities

Brendan Dolan-Gavitt discovered that the aQuantia AQtion Ethernet device driver in the Linux kernel did not properly validate meta-data coming from the device. A local attacker who can control an emulated device can use this to cause a denial of service system crash or possibly execute arbitrary...

USN-5381-1: Linux kernel (OEM) vulnerabilities

David Bouman discovered that the netfilter subsystem in the Linux kernel did not properly validate passed user register indices. A local attacker could use this to cause a denial of service or possibly execute arbitrary code. CVE-2022-1015 It was discovered that the block layer subsystem in the...

The vulnerability of the Border Gateway Protocol (BGP) implementation in the Ethernet VPN (EVPN) technology of the Cisco IOS XR operating system allows a attacker to cause a service failure.

The vulnerability of the Border Gateway Protocol BGP implementation in the Ethernet VPN EVPN technology of the Cisco IOS XR operating system is related to resource management errors. Exploiting this vulnerability allows a malicious actor to trigger a service failure by sending a specially crafted...