PT-2022-34594 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.9 Description: The issue concerns an out-of-bounds read when setting HMAC data in the IPv6 segment routing SR functionality. The actual impact and attack plausibility have not yet been proven...

PT-2022-34689 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.258 Description: The issue concerns an out-of-bounds read when setting HMAC data in the IPv6 segment routing SR functionality. This problem was introduced in version v4.10 and is fixed in version v4.19.258...

PT-2022-34658 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.143 Description: The issue concerns an out-of-bounds read when setting HMAC data in the IPv6 segment routing SR functionality. This problem was introduced in version v4.10 and is fixed in version v5.10.143...

Ubuntu: Security Advisory (USN-859-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2022-14602 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions prior to the fixed version Description: In the keymaster ipc.cpp, there is a possibility to force gatekeeper, fingerprint, and faceauth to use a known HMAC key. This could lead to local escalation of privilege with no...

CVE-2022-20377: Undefined Security Weakness

In TBD of keymasteripc.cpp, there is a possible to force gatekeeper, fingerprint, and faceauth to use a known HMAC key. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Androi...

PUB-A-222339795

In TBD of keymasteripc.cpp, there is a possible to force gatekeeper, fingerprint, and faceauth to use a known HMAC key. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2022-32704

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.53 Description The issue is related to the Linux Kernel, specifically with the seg6 hmac net init function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kern...

PT-2022-33141

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.287 Description The issue concerns an unexported function seg6 hmac net init in the Linux Kernel's IPv6 implementation. The actual impact and attack plausibility have not yet been proven. Recommendations Fo...

PT-2022-32868

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.129 Description The issue concerns the Linux Kernel, where a function seg6 hmac net init is not properly exported. This could potentially lead to security vulnerabilities, although the actual impact and...

PT-2022-32493

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.10 Description The issue is related to the Linux Kernel, specifically with the seg6 hmac net init function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kern...

MAL-2022-3850 Malicious code in insomnia-plugin-simple-hmac-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 82257b4c71933f16336920865f08941bf1fd250ffd06dd3e34a99e3319b78012 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2022-32111

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.247 Description The issue is related to the seg6 hmac init function in the Linux Kernel's IPv6 implementation. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2022-32226

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.283 Description The issue concerns the seg6 hmac init function. It was introduced in version v4.10 and fixed in Linux Kernel version v4.14.283. The actual impact and attack plausibility have not yet been...

PT-2022-31776

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.122 Description The issue concerns the seg6 hmac init function. It was introduced in version v4.10 and fixed in Linux Kernel version v5.10.122. The actual impact and attack plausibility have not yet been...

PT-2022-30851

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.4 Description The issue concerns a potential security vulnerability in the Linux Kernel. It is related to the seg6 hmac init function. The actual impact and attack plausibility have not yet been proven...

PT-2022-31518

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.47 Description The issue concerns the seg6 hmac init function. It was introduced in version v4.10 and is fixed in Linux Kernel version v5.15.47. The actual impact and attack plausibility have not yet been...

PT-2022-31220

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.15 Description The issue concerns the seg6 hmac init function. It was introduced in version v4.10 and fixed in Linux Kernel version v5.17.15. The actual impact and attack plausibility have not yet been...

PT-2022-31966

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.198 Description The issue concerns the seg6 hmac init function. It was introduced in version v4.10 and fixed in Linux Kernel version v5.4.198. The actual impact and attack plausibility have not yet been...

OPENSUSE-SU-2022:10018-1 Security update for atheme

This update for atheme fixes the following issues: atheme was updated to release 7.2.12: CVE-2022-24976: Fixed General authentication bypass in Atheme IRC services with InspIRCd 3 boo1195989 Track SASL login EID Update to release 7.2.11 Add a preliminary Turkish translation Add HMAC-MD5 verify-on...