PJSIP Loop DoS

The vulnerability of the PJSIP multimedia communication library is related to the execution of a loop with an unavailable exit condition during syntactic analysis of XML files. Exploiting this vulnerability can allow a malicious actor to cause service failures...

kernel: KVM: SVM: out-of-bounds read/write in sev_es_string_io

A flaw was found in the KVM's AMD code for supporting the Secure Encrypted Virtualization-Encrypted State SEV-ES. A KVM guest using SEV-ES can trigger out-of-bounds reads and writes in the host kernel via a malicious VMGEXIT for a string I/O instruction for example, outs or ins using the exit...

kernel: KVM: SVM: out-of-bounds read/write in sev_es_string_io

A flaw was found in the KVM's AMD code for supporting the Secure Encrypted Virtualization-Encrypted State SEV-ES. A KVM guest using SEV-ES can trigger out-of-bounds reads and writes in the host kernel via a malicious VMGEXIT for a string I/O instruction for example, outs or ins using the exit...

USB-based Wormable Malware Targets Windows Installer

Credit: Red Canary Wormable malware dubbed Raspberry Robin has been active since last September and is wriggling its way through USB drives onto Windows machines to use Microsoft Standard Installer and other legitimate processes to install malicious files, researchers have found. Researchers at...

CVE-2022-24792: Loop with Unreachable Exit Condition

PJSIP is a free and open source multimedia communication library written in C. A denial-of-service vulnerability affects applications on a 32-bit systems that use PJSIP versions 2.12 and prior to play/read invalid WAV files. The vulnerability occurs when reading WAV file data chunks with length...

PT-2022-29972

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.34 Description The issue concerns the virtio console, where anonymous module init and module exit have been eliminated. This change is intended to aid in the discovery of potential security vulnerabilities...

PT-2022-30458

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.189 Description The issue concerns the virtio console, where anonymous module init and module exit have been eliminated. This change is intended to aid in the discovery of potential security vulnerabilities...

PT-2022-29302

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.3 Description The issue concerns the virtio console, where anonymous module init and module exit have been eliminated. This change is intended to aid in the discovery of potential security vulnerabilities...

PT-2022-30164

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.33 Description The issue is related to a use after free in the cc cipher exit function. The actual impact and attack plausibility have not yet been proven. It was introduced in version v4.17 and fixed in...

PT-2022-29548

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.2 Description A potential security issue exists due to a use after free in the cc cipher exit function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-29854

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.19 Description A potential security issue exists due to a use after free in the cc cipher exit function. The actual impact and attack plausibility have not yet been proven. This issue was introduced in...

PT-2022-30745

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.311 Description The issue concerns the virtio console, where anonymous module init and module exit have been eliminated. This change is intended to aid in the discovery of potential security vulnerabilities...

PT-2022-30250

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.111 Description A race condition exists in the rxrpc exit net function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v5.10.111, upda...

PT-2022-29629

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.20 Description A race condition exists in the rxrpc exit net function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v5.16.20, update...

PT-2022-30451

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.189 Description A race condition exists in the rxrpc exit net function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v5.4.189, update...

PT-2022-30673

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.276 Description The issue concerns the virtio console in the Linux Kernel. It is related to anonymous module init and module exit. The actual impact and attack plausibility have not yet been proven...

PT-2022-30583

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.238 Description The issue concerns the virtio console, where anonymous module init and module exit have been eliminated. This change is intended to aid in the discovery of potential security vulnerabilities...

PT-2022-30261

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.111 Description The issue concerns the virtio console in the Linux Kernel. It is related to anonymous module init and module exit. The actual impact and attack plausibility have not yet been proven...

PT-2022-29646

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.20 Description The issue concerns the virtio console, where anonymous module init and module exit have been eliminated. This change is intended to aid in the discovery of potential security vulnerabilities...

PT-2022-29956

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.34 Description A race condition exists in the rxrpc exit net function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v5.15.34, update...