Siemens SIMATIC Devices Improper Input Validation (CVE-2024-42306)

In the Linux kernel, the following vulnerability has been resolved: udf: Avoid using corrupted block bitmap buffer This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if...

Siemens SIMATIC Devices Improper Input Validation (CVE-2024-38559)

scsi: qedf: Ensure the copied buf is NUL terminated Currently, we allocate a count-sized kernel buffer and copy count from userspace to that buffer. Later, we use kstrtouint on this buffer but we don't ensure that the string is terminated inside the buffer, this can lead to OOB read when using...

Siemens SIMATIC, SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-43882)

exec: the execution may gain unintended privileges. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid503435; scriptversion"1.3";...

Siemens SIMATIC Devices Improper Input Validation (CVE-2024-38547)

media: atomisp: sshcss: null-pointer dereference in loadvideobinaries. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid503608; scriptversion"1.2";...

Siemens SIMATIC, SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-44960)

usb: gadget: core: Check for unset descriptor. It needs to be reassured that the descriptor has been set before looking at maxpacket. This fixes a null pointer panic in this case. This may happen if the gadget doesn't properly set up the endpoint for the current speed, or the gadget descriptors a...

Siemens SIMATIC Devices Improper Input Validation (CVE-2024-58051)

ipmi: ipmb: Add check devmkasprintf returned value This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid503604; scriptversion"1.2";...

Siemens SIMATIC Devices Improper Input Validation (CVE-2024-26659)

xhci: isoc Babble and Buffer Overrun events are not handled properly. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid503655; scriptversion"1.2";...

Siemens SIMATIC Devices Improper Input Validation (CVE-2024-38560)

scsi: bfa: Ensure the copied buf is NUL terminated Currently, we allocate a nbytes-sized kernel buffer and copy nbytes from userspace to that buffer. Later, we use sscanf on this buffer but we don't ensure that the string is terminated inside the buffer, this can lead to OOB read when using sscan...

Siemens SIMATIC Devices Improper Input Validation (CVE-2024-38565)

wifi: ar5523: enable proper endpoint verification Syzkaller reports 1 hitting a warning about an endpoint in use not having an expected type to it. Fix the issue by checking for the existence of all proper endpoints with their according types intact. Sadly, this patch has not been tested on real...

Siemens SIMATIC Devices Improper Input Validation (CVE-2024-38635)

soundwire: cadence: invalid PDI offset. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid503406; scriptversion"1.2";...

Siemens SIMATIC Devices Improper Input Validation (CVE-2024-27025)

Vulnerability in Linux kernel: nbd: null check for nlaneststart nlaneststart may fail and return NULL. Insert a check and set errno based on other call sites within the same source code. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more...

Siemens SIMATIC Devices Improper Input Validation (CVE-2024-26877)

crypto: xilinx - call finalize with bh disabled. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid503518; scriptversion"1.2";...

Siemens SIMATIC, SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-39468)

smb: client: Deadlock in smb2findsmbtcon. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid503588; scriptversion"1.3";...

Siemens SIMATIC Devices Improper Input Validation (CVE-2024-38579)

crypto: bcm - Fix pointer arithmetic In spu2dumpomd value of ptr is increased by ciphkeylen instead of hashivlen which could lead to going beyond the buffer boundaries. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information...

Siemens SIMATIC Devices Improper Input Validation (CVE-2024-35967)

Bluetooth: SCO: Fix not validating setsockopt user input This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid503473; scriptversion"1.2";...

Siemens SIMATIC Devices Improper Input Validation (CVE-2024-38659)

enic: Validate length of nl attributes in enicsetvfport enicsetvfport assumes that the nl attribute IFLAPORTPROFILE is of length PORTPROFILEMAX and that the nl attributes IFLAPORTINSTANCEUUID, IFLAPORTHOSTUUID are of length PORTUUIDMAX. These attributes are validated in the function dosetlink in...

Siemens SIMATIC Devices Improper Input Validation (CVE-2024-27038)

Vulnerability in Linux kernel: clk: clkcoreget NULL dereference It is possible for clkcoreget to dereference a NULL in the following sequence: clkcoreget ofclkgethwfromclkspec ofclkgethwfromprovider clkgethw clkgethw can return NULL which is dereferenced by clkcoreget at hw-core. Prior to commit...

Siemens SIMATIC Devices Improper Input Validation (CVE-2024-36005)

netfilter: nftables: honor table dormant flag from netdev release event path This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid503581;...

Siemens SIMATIC Devices Improper Input Validation (CVE-2025-21795)

NFSD: hang in nfsd4shutdowncallback. If nfs4client is in courtesy state then there is no point to send the callback. This causes nfsd4shutdowncallback to hang since clcbinflight is not 0. This hang lasts about 15 minutes until TCP notifies NFSD that the connection was dropped. This plugin only...

Siemens SIMATIC, SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-40912)

wifi: mac80211: deadlock in ieee80211stapsdeliverwakeup. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid503488; scriptversion"1.3";...