USN-6340-2 linux-azure-5.4, linux-gcp-5.4, linux-gkeop, linux-raspi, linux-raspi-5.4, linux-xilinx-zynqmp vulnerabilities

Ruihan Li discovered that the bluetooth subsystem in the Linux kernel did not properly perform permissions checks when handling HCI sockets. A physically proximate attacker could use this to cause a denial of service bluetooth communication. CVE-2023-2002 Zi Fan Tan discovered that the binder IPC...

CVE-2023-24486: Improper Access Control

A vulnerability has been identified in Citrix Workspace app for Linux that, if exploited, may result in a malicious local user being able to gain access to the Citrix Virtual Apps and Desktops session of another user who is using the same computer from which the ICA session is launched...

CVE-2023-30442: Improper Input Validation

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 11.1 and 11.5 federated server is vulnerable to a denial of service as the server may crash when using a specially crafted wrapper using certain options. IBM X-Force ID: 253202...

CVE-2023-29256: Improper Privilege Management

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 10.5, 11.1, and 11.5 is vulnerable to an information disclosure due to improper privilege management when certain federation features are used. IBM X-Force ID: 252046...

CVE-2023-23487: Undefined Security Weakness

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 11.1 and 11.5 is vulnerable to insufficient audit logging. IBM X-Force ID: 245918...

CVE-2023-30449: Improper Input Validation

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted query. IBM X-Force ID: 253439...

CVE-2023-30445: Improper Input Validation

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted query on certain tables. IBM X-Force ID: 253357...

CVE-2023-30446: Improper Input Validation

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted query on certain tables. IBM X-Force ID: 253361...

CVE-2023-30448: Improper Input Validation

IBM DB2 for Linux, UNIX and Windows includes Db2 Connect Server 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted query on certain tables. IBM X-Force ID: 253437...

PT-2023-5539 · Ibm · Ibm Db2

Name of the Vulnerable Software and Affected Versions: IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server versions 10.5, 11.1, and 11.5 Description: The issue is related to insufficient input validation in the database management system, which can be exploited by a remote attacker to...

PT-2023-5543

Name of the Vulnerable Software and Affected Versions IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server versions 11.1 and 11.5 Description The issue is related to insufficient audit logging and incorrect clearance or release of resources in the database management system. This could...

PT-2023-5537

Name of the Vulnerable Software and Affected Versions IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server versions 10.5, 11.1, and 11.5 Description The issue is related to a buffer overflow caused by improper bounds checking in the db2set. This could allow an attacker to overflow the...

PT-2023-5540

Name of the Vulnerable Software and Affected Versions IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server versions 11.1 and 11.5 Description The issue is related to insufficient input validation in the database management system, which can be exploited by a remote attacker to cause a...

CVE-2023-25516: Integer Overflow or Wraparound

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where an unprivileged user can cause an integer overflow, which may lead to information disclosure and denial of service...

CVE-2023-28598

Zoom for Linux clients prior to 5.13.10 contain an HTML injection vulnerability. If a victim starts a chat with a malicious user it could result in a Zoom application crash...

PT-2023-21837 · Zoom · Zoom

Name of the Vulnerable Software and Affected Versions: Zoom for Linux clients versions prior to 5.13.10 Description: The issue is related to an HTML injection vulnerability. If a victim starts a chat with a malicious user, it could result in a Zoom application crash. Recommendations: For versions...

PT-2023-18503

Name of the Vulnerable Software and Affected Versions Open CAS software for Linux maintained by Intel versions prior to 22.6.2 Description The issue allows a privileged user to potentially enable information disclosure via local access due to the insertion of sensitive information into a log file...

CVE-2022-41808: DEPRECATED: Improper Sanitization of Custom Special Characters

Improper buffer restriction in software for the Intel QAT Driver for Linux before version 1.7.l.4.12 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2023-27555: Improper Input Validation

IBM Db2 for Linux, UNIX and Windows includes DB2 Connect Server 11.5 is vulnerable to a denial of service when attempting to use ACR client affinity for unfenced DRDA federation wrappers. IBM X-Force ID: 249187...

CVE-2023-25930: Improper Input Validation

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 10.1, 11.1, and 11.5 is vulnerable to a denial of service. Under rare conditions, setting a special register may cause the Db2 server to terminate abnormally. IBM X-Force ID: 247862...