OSV-2025-994 Heap-buffer-overflow in rx_icmp

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=469520969 Crash type: Heap-buffer-overflow READ 1 Crash state: rxicmp mgtcpiprx fuzz.c...

RockyLinux 8 : python39:3.9 (RLSA-2025:23530)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:23530 advisory. python: Invalid value for OpenSSL API may cause Buffer over-read when NPN is used CVE-2024-5642 python: Virtual environment venv activation scripts don'...

CVE-2025-65568

A denial-of-service vulnerability exists in the omec-project UPF pfcpiface component in version upf-epc-pfcpiface:2.1.3-dev. After PFCP association, a PFCP Session Establishment Request that includes a CreateFAR with an empty or truncated IPv4 address field is not properly validated. During...

CVE-2025-66647

The CVE concerns RIOT OS IPv6 fragmentation reassembly in the gnrc_ipv6_ext_frag module. Copying the first fragment (offset=0) into the reassembly buffer lacks a size check, enabling an attacker to create a small buffer by sending a shorter initial fragment and potentially overflow other packet b...

CVE-2025-13281 vulnerabilities

Vulnerabilities for packages: ip-masq-agent, rancher-agent, argo-cd, argocd-image-updater, kapp, emissary, aws-efs-csi-driver, mesosphere-vsphere-csi, docker-machine-driver-harvester, local-static-provisioner, blob-csi, rancher-system-agent, calico, kubernetes, kubernetes-csi-driver-hostpath,...

GHSA-R6J8-C6R2-37RR vulnerabilities

Vulnerabilities for packages: ip-masq-agent, rancher-agent, argo-cd, argocd-image-updater, kapp, emissary, aws-efs-csi-driver, mesosphere-vsphere-csi, docker-machine-driver-harvester, local-static-provisioner, blob-csi, rancher-system-agent, calico, kubernetes, kubernetes-csi-driver-hostpath,...

CVE-2025-13281 vulnerabilities

Vulnerabilities for packages: mesosphere-vsphere-csi, node-feature-discovery-fips, yunikorn-k8shim-fips, calico-fips, volcano, blob-csi, eks-distro-fips, longhorn-share-manager-fips, azurefile-csi, yunikorn-k8shim, blob-csi-fips, rancher-webhook, argo-cd, local-static-provisioner, volcano-fips,...

GHSA-R6J8-C6R2-37RR vulnerabilities

Vulnerabilities for packages: mesosphere-vsphere-csi, node-feature-discovery-fips, yunikorn-k8shim-fips, calico-fips, volcano, blob-csi, eks-distro-fips, longhorn-share-manager-fips, azurefile-csi, yunikorn-k8shim, blob-csi-fips, rancher-webhook, argo-cd, local-static-provisioner, volcano-fips,...

SUSE CVE-2025-40363

In the Linux kernel, the following vulnerability has been resolved: net: ipv6: fix field-spanning memcpy warning in AH output Fix field-spanning memcpy warnings in ah6output and ah6outputdone where extension headers are copied to/from IPv6 address fields, triggering fortify-string warnings about...

SUSE CVE-2025-68246

In the Linux kernel, the following vulnerability has been resolved: ksmbd: close accepted socket when per-IP limit rejects connection When the per-IP connection limit is exceeded in ksmbdkthreadfn, the code sets ret = -EAGAIN and continues the accept loop without closing the just-accepted socket...

The vulnerability of the Endpoint Manager web interface for managing IP telephony systems, FreePBX, allows a intruder to gain unauthorized access to the system.

The vulnerability of the Endpoint Manager web interface for managing IP telephony systems like FreePBX is related to authentication mechanisms’ deficiencies. Exploiting this vulnerability could allow an attacker to gain unauthorized access to the system remotely...

EUVD-2025-203771

HCL DevOps Deploy / HCL Launch is susceptible to a race condition in http-session client-IP binding enforcement which may allow a session to be briefly reused from a new IP address before it is invalidated. This could lead to unauthorized access under certain network conditions...

EUVD-2025-203704

In the Linux kernel, the following vulnerability has been resolved: net: usb: qmiwwan: initialize MAC header offset in qmimuxrxfixup Raw IP packets have no MAC header, leaving skb-macheader uninitialized. This can trigger kernel panics on ARM64 when xfrm or other subsystems access the offset due ...

openshift-apiserver: SSRF via Missing IP/Network-Range Validation in User-Supplied Image References

A flaw was found in ose-openshift-apiserver. This vulnerability allows internal network enumeration, service discovery, limited information disclosure, and potential Denial of Service DoS through Server-Side Request Forgery SSRF due to missing IP address and network-range validation when processi...

UBUNTU-CVE-2025-68241

In the Linux kernel, the following vulnerability has been resolved: ipv4: route: Prevent rtbindexception from rebinding stale fnhe The sit driver's packet transmission path calls: sittunnelxmit - updateorcreatefnhe, which lead to fnheremoveoldest being called to delete entries exceeding...

UBUNTU-CVE-2025-68246

In the Linux kernel, the following vulnerability has been resolved: ksmbd: close accepted socket when per-IP limit rejects connection When the per-IP connection limit is exceeded in ksmbdkthreadfn, the code sets ret = -EAGAIN and continues the accept loop without closing the just-accepted socket...

CVE-2025-62329

HCL DevOps Deploy / HCL Launch are affected by a race condition in the HTTP session client-IP binding enforcement, which may allow a session to be briefly reused from a new IP address before invalidation. This could lead to unauthorized access under certain network conditions. Affected products a...

CVE-2025-68246 ksmbd: close accepted socket when per-IP limit rejects connection

In the Linux kernel, the following vulnerability has been resolved: ksmbd: close accepted socket when per-IP limit rejects connection When the per-IP connection limit is exceeded in ksmbdkthreadfn, the code sets ret = -EAGAIN and continues the accept loop without closing the just-accepted socket...

CVE-2025-68192

In the Linux kernel, the following vulnerability has been resolved: net: usb: qmiwwan: initialize MAC header offset in qmimuxrxfixup Raw IP packets have no MAC header, leaving skb-macheader uninitialized. This can trigger kernel panics on ARM64 when xfrm or other subsystems access the offset due ...

UBUNTU-CVE-2025-68192

In the Linux kernel, the following vulnerability has been resolved: net: usb: qmiwwan: initialize MAC header offset in qmimuxrxfixup Raw IP packets have no MAC header, leaving skb-macheader uninitialized. This can trigger kernel panics on ARM64 when xfrm or other subsystems access the offset due ...