CVE-2022-33292 Use after free in Qualcomm IPC

Memory corruption in Qualcomm IPC due to use after free while receiving the incoming packet and reposting it...

Qualcomm IPC 资源管理错误漏洞

Qualcomm IPC is a support component used in chips from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm IPC that stems from the presence of a memory corruption...

CVE-2023-22917

A buffer overflow vulnerability in the “sdwanifaceipc” binary of Zyxel ATP series firmware versions 5.10 through 5.32, USG FLEX series firmware versions 5.00 through 5.32, USG FLEX 50W firmware versions 5.10 through 5.32, USG20W-VPN firmware versions 5.10 through 5.32, and VPN series firmware...

Zyxel ATP 安全漏洞

The Zyxel ATP is a firewall from China's Hopkins Zyxel. A security vulnerability exists in the Zyxel ATP Series 5.10 through 5.35 firmware versions, USG FLEX Series 5.00 through 5.35 firmware versions, USG FLEX 50W 5.10 through 5.35 firmware versions, USG20W-VPN 5.10 through 5.35 firmware version...

USN-6030-1: Linux kernel (Qualcomm Snapdragon) vulnerabilities

It was discovered that the Traffic-Control Index TCINDEX implementation in the Linux kernel contained a use-after-free vulnerability. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2023-1281 It was discovered that the System V IPC...

Siemens SIMATIC IPC DiagMonitor Trust Management Issue Vulnerability

Siemens SIMATIC IPC DiagMonitor is a set of system monitoring and troubleshooting software from Siemens Germany. A trust management issue vulnerability exists in Siemens SIMATIC IPC DiagMonitor, which can be exploited by an attacker to perform a man-in-the-middle attack to modify data in transit...

Denial of Service Vulnerability in Multiple Siemens Products (CNVD-2023-35759)

Siemens SIMATIC IPC DiagMonitor is a suite of system monitoring and troubleshooting software from Siemens, Germany.The SIMATIC CP 1242-7 and CP 1243-7 LTE communication processors connect SIMATIC S7-1200 controllers to a wide area network WAN. They provide integrated security features such as...

Denial of Service Vulnerability in Multiple Siemens Products (CNVD-2023-35758)

Siemens SIMATIC IPC DiagMonitor is a suite of system monitoring and troubleshooting software from Siemens, Germany.The SIMATIC CP 1242-7 and CP 1243-7 LTE communication processors connect SIMATIC S7-1200 controllers to a wide area network WAN. They provide integrated security features such as...

CVE-2022-33301

Memory corruption due to incorrect type conversion or cast in audio while using audio playback/capture when crafted address is sent from AGM IPC to AGM...

Memory corruption

Memory corruption due to incorrect type conversion or cast in audio while using audio playback/capture when crafted address is sent from AGM IPC to AGM...

USN-6014-1 linux, linux-kvm, linux-lts-xenial vulnerabilities

Xuewei Feng, Chuanpu Fu, Qi Li, Kun Sun, and Ke Xu discovered that the TCP implementation in the Linux kernel did not properly handle IPID assignment. A remote attacker could use this to cause a denial of service connection termination or inject forged data. CVE-2020-36516 Ke Sun, Alyssa Milburn,...

USN-6013-1: Linux kernel (AWS) vulnerabilities

Xuewei Feng, Chuanpu Fu, Qi Li, Kun Sun, and Ke Xu discovered that the TCP implementation in the Linux kernel did not properly handle IPID assignment. A remote attacker could use this to cause a denial of service connection termination or inject forged data. CVE-2020-36516 Ke Sun, Alyssa Milburn,...

USN-6013-1 linux-aws vulnerabilities

Xuewei Feng, Chuanpu Fu, Qi Li, Kun Sun, and Ke Xu discovered that the TCP implementation in the Linux kernel did not properly handle IPID assignment. A remote attacker could use this to cause a denial of service connection termination or inject forged data. CVE-2020-36516 Ke Sun, Alyssa Milburn,...

USN-6009-1 linux-gcp vulnerabilities

It was discovered that the System V IPC implementation in the Linux kernel did not properly handle large shared memory counts. A local attacker could use this to cause a denial of service memory exhaustion. CVE-2021-3669 It was discovered that a use-after-free vulnerability existed in the SGI GRU...

CVE-2023-23588

A vulnerability has been identified in SIMATIC IPC1047 All versions, SIMATIC IPC1047E All versions with maxView Storage Manager 4.09.00.25611 on Windows, SIMATIC IPC647D All versions, SIMATIC IPC647E All versions with maxView Storage Manager 4.09.00.25611 on Windows, SIMATIC IPC847D All versions,...

CVE-2023-23588

A vulnerability has been identified in SIMATIC IPC1047 All versions, SIMATIC IPC1047E All versions with maxView Storage Manager 4.09.00.25611 on Windows, SIMATIC IPC647D All versions, SIMATIC IPC647E All versions with maxView Storage Manager 4.09.00.25611 on Windows, SIMATIC IPC847D All versions,...

CVE-2023-23588

A vulnerability has been identified in SIMATIC IPC1047 All versions, SIMATIC IPC1047E All versions with maxView Storage Manager 4.09.00.25611 on Windows, SIMATIC IPC647D All versions, SIMATIC IPC647E All versions with maxView Storage Manager 4.09.00.25611 on Windows, SIMATIC IPC847D All versions,...

Siemens SIMATIC IPC DiagMonitor 信任管理问题漏洞

Siemens SIMATIC IPC DiagMonitor is a set of system monitoring and troubleshooting software from Siemens Germany. A trust management issue vulnerability exists in Siemens SIMATIC IPC DiagMonitor, which can be exploited by an attacker to perform a man-in-the-middle attack to modify data in transit...

USN-6001-1 linux-aws vulnerabilities

Xuewei Feng, Chuanpu Fu, Qi Li, Kun Sun, and Ke Xu discovered that the TCP implementation in the Linux kernel did not properly handle IPID assignment. A remote attacker could use this to cause a denial of service connection termination or inject forged data. CVE-2020-36516 Ke Sun, Alyssa Milburn,...

USN-6001-1: Linux kernel (AWS) vulnerabilities

Xuewei Feng, Chuanpu Fu, Qi Li, Kun Sun, and Ke Xu discovered that the TCP implementation in the Linux kernel did not properly handle IPID assignment. A remote attacker could use this to cause a denial of service connection termination or inject forged data. CVE-2020-36516 Ke Sun, Alyssa Milburn,...