CVE-2024-3056 Podman: kernel: containers in shared ipc namespace are vulnerable to denial of service attack

A flaw was found in Podman. This issue may allow an attacker to create a specially crafted container that, when configured to share the same IPC with at least one other container, can create a large number of IPC resources in /dev/shm. The malicious container will continue to exhaust resources...

CVE-2024-3056

CVE-2024-3056 affects Podman. A flaw allows a container that shares IPC with another to create a large number of IPC resources in /dev/shm, exhaust memory, and trigger a memory-based denial of service. The resources remain tied to the IPC namespace even after the container is removed, and a resta...

CVE-2024-3056

Removed by vendor...

CVE-2024-3056: Uncontrolled Resource Consumption

A flaw was found in Podman. This issue may allow an attacker to create a specially crafted container that, when configured to share the same IPC with at least one other container, can create a large number of IPC resources in /dev/shm. The malicious container will continue to exhaust resources...

CVE-2024-3056

A flaw was found in Podman. This issue may allow an attacker to create a specially crafted container that, when configured to share the same IPC with at least one other container, can create a large number of IPC resources in /dev/shm. The malicious container will continue to exhaust resources...

Dahua Security Cameras Improper Authentication (CVE-2017-9316)

Firmware upgrade authentication bypass vulnerability was found in Dahua IPC-HDW4300S and some IP products. The vulnerability was caused by internal Debug function. This particular function was used for problem analysis and performance tuning during product development phase. It allowed the device...

Dahua Security Cameras Buffer Copy without Checking Size of Input (CVE-2019-9677)

The specific fields of CGI interface of some Dahua products are not strictly verified, an attacker can cause a buffer overflow by constructing malicious packets. Affected products include: IPC- HDW1X2X,IPC-HFW1X2X,IPC-HDW2X2X,IPC-HFW2X2X,IPC-HDW4X2X,IPC- HFW4X2X,IPC-HDBW4X2X,IPC-HDW5X2X,IPC-HFW5X...

RLSA-2024:4211 Important: kernel security and bug fix update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: Bluetooth BR/EDR PIN Pairing procedure is vulnerable to an impersonation attack CVE-2020-26555 kernel: TCP-spoofed ghost ACKs and leak leak initial sequence number...

Rocky Linux 8 : kernel (RLSA-2024:4211)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2024:4211 advisory. kernel: Bluetooth BR/EDR PIN Pairing procedure is vulnerable to an impersonation attack CVE-2020-26555 kernel: TCP-spoofed ghost ACKs and leak leak...

IPC Error when Exporting the vDisk on Provisioning Services

IPC Error when exporting vDisk on Provisioning Services PVS. PVS Console log includes thefollowing errors: ERROR EnterpriseAccess.HandlerBase - PvsStatusExceptionHandlerERROR EnterpriseAccess.HandlerBase - return code: 184ERROR EnterpriseAccess.HandlerBase - exception type: PvsStatusExceptionERRO...

IPC Error While Validating Provisioning Services Store

Multiple Provisioning Services Servers in the farm come with an IPC error when trying to validate the store path except on the server you are running Provisioning Services Server console: When validating the store, following error appears in the console Log:...

CVE-2024-40939

In the Linux kernel, the following vulnerability has been resolved: net: wwan: iosm: Fix tainted pointer delete is case of region creation fail In case of region creation fail in ipcdevlinkcreateregion, previously created regions delete process starts from tainted pointer which actually holds err...

UBUNTU-CVE-2024-40939

In the Linux kernel, the following vulnerability has been resolved: net: wwan: iosm: Fix tainted pointer delete is case of region creation fail In case of region creation fail in ipcdevlinkcreateregion, previously created regions delete process starts from tainted pointer which actually holds err...

CVE-2024-40939 net: wwan: iosm: Fix tainted pointer delete is case of region creation fail

In the Linux kernel, the following vulnerability has been resolved: net: wwan: iosm: Fix tainted pointer delete is case of region creation fail In case of region creation fail in ipcdevlinkcreateregion, previously created regions delete process starts from tainted pointer which actually holds err...

CVE-2024-6222

In Docker Desktop before v4.29.0, an attacker who has gained access to the Docker Desktop VM through a container breakout can further escape to the host by passing extensions and dashboard related IPC messages. Docker Desktop v4.29.0 https://docs.docker.com/desktop/release-notes/4290 fixes the...

CVE-2024-6222

Docker Desktop prior to v4.29.0 is affected: a container breakout can escape to the host via extension- and dashboard-related IPC messages. Vulnerability details show the issue exists in Docker Desktop with Hyper-V backend on MacOS, Linux, and Windows. Remediation per the sources includes fixing ...

CVE-2024-6222 In Docker Desktop before v4.29.0 an attacker who has gained access to the Docker Desktop VM through a container breakout can further escape to the host by passing extensions and dashboard related IPC messages

In Docker Desktop before v4.29.0, an attacker who has gained access to the Docker Desktop VM through a container breakout can further escape to the host by passing extensions and dashboard related IPC messages. Docker Desktop v4.29.0 https://docs.docker.com/desktop/release-notes/4290 fixes the...

CVE-2023-52891: Improperly Controlled Sequential Memory Allocation

A vulnerability has been identified in SIMATIC Energy Manager Basic All versions V7.5, SIMATIC Energy Manager PRO All versions V7.5, SIMATIC IPC DiagBase All versions, SIMATIC IPC DiagMonitor All versions, SIMIT V10 All versions, SIMIT V11 All versions V11.1. Unified Automation .NET based OPC UA...

CVE-2024-6222: Improper Restriction of Communication Channel to Intended Endpoints

In Docker Desktop before v4.29.0, an attacker who has gained access to the Docker Desktop VM through a container breakout can further escape to the host by passing extensions and dashboard related IPC messages. Docker Desktop v4.29.0 https://docs.docker.com/desktop/release-notes/4290 fixes the...

PT-2024-8119

Name of the Vulnerable Software and Affected Versions: SIMATIC Energy Manager Basic versions prior to V7.5 SIMATIC Energy Manager PRO versions prior to V7.5 SIMATIC IPC DiagBase affected versions not specified SIMATIC IPC DiagMonitor affected versions not specified SIMIT V10 affected versions not...