GSD-2023-1000303 net: hsr: Fix potential use-after-free

net: hsr: Fix potential use-after-free This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.226 by commit...

GSD-2023-1000246 net: hsr: Fix potential use-after-free

net: hsr: Fix potential use-after-free This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.158 by commit...

GSD-2023-1000083 net: hsr: Fix potential use-after-free

net: hsr: Fix potential use-after-free This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.12 by commit f3add2b8cf620966de3ebfa07679ca12d33ec26...

CVE-2022-46350

The CVE-2022-46350 entry concerns Siemens SCALANCE X‑200RNA family web interfaces vulnerable to Cross‑Site Scripting (XSS) due to improper neutralization of script-related HTML tags in the integrated web server. Affected products and versions include SCALANCE X204RNA (HSR/PRP) and X204RNA EEC (HS...

PT-2022-7686 · Linux +4 · Linux Kernel +4

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a potential use-after-free in the Linux kernel's hsr module. This occurs when the skb is delivered to netif rx, which may free it, and subsequent dereferencing ...

GSD-2022-1006683 net: hsr: avoid possible NULL deref in skb_clone()

net: hsr: avoid possible NULL deref in skbclone This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.6 by commit...

Hitachi ABB Power Grids AFS Series

1. EXECUTIVE SUMMARY CVSS v3 6.5 ATTENTION: Low skill level to exploit Vendor: Hitachi ABB Power Grids Equipment: AFS Series Vulnerability: Infinite Loop 2. RISK EVALUATION Successful exploitation of this vulnerability could cause a denial-of-service condition on one of the ports in a HSR ring...

CVE-2020-9307

Hirschmann OS2, RSP, and RSPE devices before HiOS 08.3.00 allow a denial of service. An unauthenticated, adjacent attacker can cause an infinite loop on one of the HSR ring ports of the device. This effectively breaks the redundancy of the HSR ring. If the attacker can perform the same attack on ...

Design/Logic Flaw

Hirschmann OS2, RSP, and RSPE devices before HiOS 08.3.00 allow a denial of service. An unauthenticated, adjacent attacker can cause an infinite loop on one of the HSR ring ports of the device. This effectively breaks the redundancy of the HSR ring. If the attacker can perform the same attack on ...

CVE-2020-9307

Hirschmann OS2, RSP, and RSPE devices before HiOS 08.3.00 allow a denial of service. An unauthenticated, adjacent attacker can cause an infinite loop on one of the HSR ring ports of the device. This effectively breaks the redundancy of the HSR ring. If the attacker can perform the same attack on ...

Hirschmann Security Breach

Hirschmann OS2 and others are a hardware device from Hirschmann. A security vulnerability exists in Hirschmann OS2, RSP, and RSPE devices before HiOS 08.3.00 that allows an unauthenticated, neighboring attacker to cause an infinite loop on one of the device's HSR ring ports, resulting in a denial...

PT-2020-2001 · Siemens · Siplus Net Scalance X308-2 +17

Name of the Vulnerable Software and Affected Versions: SCALANCE X204RNA HSR SCALANCE X204RNA PRP SCALANCE X204RNA EEC HSR SCALANCE X204RNA EEC PRP SCALANCE X204RNA EEC PRP/HSR SCALANCE X302-7 EEC 230V SCALANCE X302-7 EEC 230V, coated SCALANCE X302-7 EEC 24V SCALANCE X302-7 EEC 24V, coated SCALANC...

OracleVM 3.4 : Unbreakable / etc (OVMSA-2019-0056)

The remote OracleVM system is missing necessary patches to address critical security updates : - ocfs2: protect extent tree in ocfs2prepareinodeforwrite Shuning Zhang Orabug: 30036349 - ocfs2: direct-IO: protect getblocks Junxiao Bi Orabug: 30036349 - SUNRPC: Remove xprtconnectstatus Trond...

Unbreakable Enterprise kernel security update

4.1.12-124.33.4 - ocfs2: protect extent tree in ocfs2prepareinodeforwrite Shuning Zhang Orabug: 30036349 - ocfs2: direct-IO: protect getblocks Junxiao Bi Orabug: 30036349 - SUNRPC: Remove xprtconnectstatus Trond Myklebust Orabug: 30165838 - SUNRPC: Handle ENETDOWN errors Trond Myklebust Orabug:...

DEBIAN-CVE-2019-16995

In the Linux kernel before 5.0.3, a memory leak exits in hsrdevfinalize in net/hsr/hsrdevice.c if hsraddport fails to add a port, which may cause denial of service, aka CID-6caabe7f197d...

UBUNTU-CVE-2019-16995

In the Linux kernel before 5.0.3, a memory leak exits in hsrdevfinalize in net/hsr/hsrdevice.c if hsraddport fails to add a port, which may cause denial of service, aka CID-6caabe7f197d...