Wind River VxWorks Buffer Overflow Vulnerability (CNVD-2022-55065)

Wind River VxWorks is an operating system from Wind River, Inc. an industry-leading real-time operating system for building embedded devices and systems.Wind River VxWorks suffers from a buffer overflow vulnerability that stems from a networked system or product that does not properly validate da...

CVE-2022-23937

In Wind River VxWorks 6.9 and 7, a specific crafted packet may lead to an out-of-bounds read during an IKE initial exchange scenario...

Out-of-bounds

In Wind River VxWorks 6.9 and 7, a specific crafted packet may lead to an out-of-bounds read during an IKE initial exchange scenario...

CVE-2022-23937

The CVE-2022-23937 entry documents a vulnerability in Wind River VxWorks 6.9 and 7 where a specially crafted packet can cause an out-of-bounds read during the IKE initial exchange. Affected products are Wind River VxWorks 6.9 and 7 (RTU500/related contexts as cited in several feeds). The root cau...

CVE-2022-23937

In Wind River VxWorks 6.9 and 7, a specific crafted packet may lead to an out-of-bounds read during an IKE initial exchange scenario...

PT-2022-6693 · Wind River · Vxworks

Name of the Vulnerable Software and Affected Versions: Wind River VxWorks versions 6.9 through 7 Description: The issue is related to an out-of-bounds read during an IKE initial exchange scenario, which can be triggered by a specifically crafted packet. This may allow a remote attacker to cause a...

libreswan: Malicious IKEv1 packet can cause libreswan to restart

A vulnerability was found in libreswan. A malformed packet that is being rejected triggers a logging action that causes a NULL pointer dereference issue, leading to a crash of the pluto daemon...

Important: Red Hat Security Advisory: libreswan security update

An update for libreswan is now available for Red Hat Enterprise Linux 8.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available f...

[SECURITY] Fedora 34 Update: libreswan-4.6-1.fc34

Libreswan is a free implementation of IPsec & IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. These services allow you to build secure tunnels through untrusted networks. Everything passing through the...

Important: Red Hat Security Advisory: libreswan security update

An update for libreswan is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

ALSA-2022:0199 Important: libreswan security update

Libreswan is an implementation of IPsec and IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. These services allow you to build secure tunnels through untrusted networks such as virtual private network VPN...

RLSA-2022:0199 Important: libreswan security update

Libreswan is an implementation of IPsec and IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. These services allow you to build secure tunnels through untrusted networks such as virtual private network VPN...

Important: libreswan security update

Libreswan is an implementation of IPsec and IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. These services allow you to build secure tunnels through untrusted networks such as virtual private network VPN...

CVE-2022-23094

Libreswan 4.2 through 4.5 allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a crafted IKEv1 packet because pluto/ikev1.c wrongly expects that a state object exists. This is fixed in 4.6...

Microsoft Windows IKE Extension Denial of Service Vulnerability

Microsoft Windows is a windowed operating system developed by Microsoft Corporation. A denial-of-service vulnerability exists in Microsoft Windows IKE Extension, which can be exploited by attackers to cause the target system to stop responding...

Microsoft Windows IKE Extension Remote Code Execution Vulnerability

Microsoft Windows is a set of operating systems for personal devices used by the U.S. Microsoft Windows IKE Extension remote code execution vulnerability, for which no detailed vulnerability details are currently available...

Microsoft Windows IKE Extension Denial of Service Vulnerability (CNVD-2022-10030)

Microsoft Windows is a windowed operating system developed by Microsoft Corporation. A denial-of-service vulnerability exists in Microsoft Windows IKE Extension, which can be exploited by attackers to cause the target system to stop responding...

First Patch Tuesday of 2022 Brings Fix for a Critical 'Wormable' Windows Vulnerability

Microsoft on Tuesday kicked off its first set of updates for 2022 by plugging 96 security holes across its software ecosystem, while urging customers to prioritize patching for what it calls a critical "wormable" vulnerability. Of the 96 vulnerabilities, nine are rated Critical and 89 are rated...

Libreswan 代码问题漏洞

Libreswan is an IPsec implementation similar to Openswan, which is mainly used to ensure security, integrity issues in data transmission. libreswan has a code issue vulnerability that can be exploited by an attacker to send specially crafted IKEv1 packets to an application, triggering a logging...

Microsoft & Adobe Patch Tuesday (January 2022) – Microsoft 126 Vulnerabilities with 9 Critical, Adobe 41 Vulnerabilities, 22 critical

Microsoft Patch Tuesday – January 2022 Microsoft patched 126 vulnerabilities in their January 2022 Patch Tuesday release. Out of these, nine are rated as critical severity. As of this writing, none of the 126 vulnerabilities are known to be actively exploited. Microsoft has fixed problems in thei...