CVE-2024-26707

In the Linux kernel, the following vulnerability has been resolved: net: hsr: remove WARNONCE in sendhsrsupervisionframe Syzkaller reported 1 hitting a warning after failing to allocate resources for skb in hsrinitskb. Since a WARNONCE call will not help much in this case, it might be prudent to...

CVE-2024-26707: Allocation of Resources Without Limits or Throttling

In the Linux kernel, the following vulnerability has been resolved: net: hsr: remove WARNONCE in sendhsrsupervisionframe Syzkaller reported 1 hitting a warning after failing to allocate resources for skb in hsrinitskb. Since a WARNONCE call will not help much in this case, it might be prudent to...

PT-2024-21481

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.10 Description A vulnerability has been resolved in the Linux kernel. The issue was reported by Syzkaller after it hit a warning when failing to allocate resources for skb in hsr init skb. To address this, the...

PT-2024-21540

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.7.0 Description The issue arises when the packet type ID field in the Ethernet header is either ETH P PRP or ETH P HSR, but it is not followed by an HSR tag. In such cases, the function hsr get skb sequence nr...

PT-2025-40169

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contained an uninitialized value access issue within the fill frame info function in the hsr forward.c file. This issue was identified by Syzbot and occurs when handling...

GSD-2023-1000303 net: hsr: Fix potential use-after-free

net: hsr: Fix potential use-after-free This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.226 by commit...

GSD-2023-1000246 net: hsr: Fix potential use-after-free

net: hsr: Fix potential use-after-free This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.158 by commit...

GSD-2023-1000083 net: hsr: Fix potential use-after-free

net: hsr: Fix potential use-after-free This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.12 by commit f3add2b8cf620966de3ebfa07679ca12d33ec26...

CVE-2022-46350

The CVE-2022-46350 entry concerns Siemens SCALANCE X‑200RNA family web interfaces vulnerable to Cross‑Site Scripting (XSS) due to improper neutralization of script-related HTML tags in the integrated web server. Affected products and versions include SCALANCE X204RNA (HSR/PRP) and X204RNA EEC (HS...

PT-2022-7686

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a potential use-after-free in the Linux kernel's hsr module. This occurs when the skb is delivered to netif rx, which may free it, and subsequent dereferencing of...

GSD-2022-1006683 net: hsr: avoid possible NULL deref in skb_clone()

net: hsr: avoid possible NULL deref in skbclone This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.6 by commit...

Hitachi ABB Power Grids AFS Series

1. EXECUTIVE SUMMARY CVSS v3 6.5 ATTENTION: Low skill level to exploit Vendor: Hitachi ABB Power Grids Equipment: AFS Series Vulnerability: Infinite Loop 2. RISK EVALUATION Successful exploitation of this vulnerability could cause a denial-of-service condition on one of the ports in a HSR ring...

CVE-2020-9307

Hirschmann OS2, RSP, and RSPE devices before HiOS 08.3.00 allow a denial of service. An unauthenticated, adjacent attacker can cause an infinite loop on one of the HSR ring ports of the device. This effectively breaks the redundancy of the HSR ring. If the attacker can perform the same attack on ...

Design/Logic Flaw

Hirschmann OS2, RSP, and RSPE devices before HiOS 08.3.00 allow a denial of service. An unauthenticated, adjacent attacker can cause an infinite loop on one of the HSR ring ports of the device. This effectively breaks the redundancy of the HSR ring. If the attacker can perform the same attack on ...

CVE-2020-9307

Hirschmann OS2, RSP, and RSPE devices before HiOS 08.3.00 allow a denial of service. An unauthenticated, adjacent attacker can cause an infinite loop on one of the HSR ring ports of the device. This effectively breaks the redundancy of the HSR ring. If the attacker can perform the same attack on ...

Hirschmann Security Breach

Hirschmann OS2 and others are a hardware device from Hirschmann. A security vulnerability exists in Hirschmann OS2, RSP, and RSPE devices before HiOS 08.3.00 that allows an unauthenticated, neighboring attacker to cause an infinite loop on one of the device's HSR ring ports, resulting in a denial...

CVE-2020-9307: Loop with Unreachable Exit Condition

Hirschmann OS2, RSP, and RSPE devices before HiOS 08.3.00 allow a denial of service. An unauthenticated, adjacent attacker can cause an infinite loop on one of the HSR ring ports of the device. This effectively breaks the redundancy of the HSR ring. If the attacker can perform the same attack on ...

PT-2021-2012

Name of the Vulnerable Software and Affected Versions Hirschmann OS2, RSP, and RSPE devices versions prior to HiOS 08.3.00 Description The issue is related to a denial of service that can be caused by an unauthenticated, adjacent attacker, leading to an infinite loop on one of the HSR ring ports ...

PT-2020-2001 · Siemens · Siplus Net Scalance X308-2 +17

Name of the Vulnerable Software and Affected Versions: SCALANCE X204RNA HSR SCALANCE X204RNA PRP SCALANCE X204RNA EEC HSR SCALANCE X204RNA EEC PRP SCALANCE X204RNA EEC PRP/HSR SCALANCE X302-7 EEC 230V SCALANCE X302-7 EEC 230V, coated SCALANCE X302-7 EEC 24V SCALANCE X302-7 EEC 24V, coated SCALANC...

OracleVM 3.4 : Unbreakable / etc (OVMSA-2019-0056)

The remote OracleVM system is missing necessary patches to address critical security updates : - ocfs2: protect extent tree in ocfs2prepareinodeforwrite Shuning Zhang Orabug: 30036349 - ocfs2: direct-IO: protect getblocks Junxiao Bi Orabug: 30036349 - SUNRPC: Remove xprtconnectstatus Trond...