SUSE: Security Advisory (SUSE-SU-2016:2018-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2021-11958

Name of the Vulnerable Software and Affected Versions: TP-Link TL-WR840N version 6 EU 0.9.1 4.16 Description: The issue allows OS command injection because a raw string entered from the web interface an IP address field is used directly for a call to the system library function for iptables. This...

CVE-2017-1118

IBM WebSphere MQ Internet Pass-Thru (MQIPT) versions 2.0 and 2.1 are affected by CVE-2017-1118 due to an incorrectly configured security policy that can cause MQIPT to stop responding. The IBM bulletin notes that this denial-of-service condition arises when IP addresses not configured in the MQIP...

kernel: netfilter: missing bounds check in ipt_entry structure

A security flaw was found in the Linux kernel in the marksourcechains function in "net/ipv4/netfilter/iptables.c". It is possible for a user-supplied "iptentry" structure to have a large "nextoffset" field. This field is not bounds checked prior to writing to a counter value at the supplied offse...

kernel: netfilter: missing bounds check in ipt_entry structure

A security flaw was found in the Linux kernel in the marksourcechains function in "net/ipv4/netfilter/iptables.c". It is possible for a user-supplied "iptentry" structure to have a large "nextoffset" field. This field is not bounds checked prior to writing to a counter value at the supplied offse...

kernel: out of bounds reads when processing IPT_SO_SET_REPLACE setsockopt

An out-of-bounds heap memory access leading to a Denial of Service, heap disclosure, or further impact was found in setsockopt. The function call is normally restricted to root, however some processes with capsysadmin may also be able to trigger this flaw in privileged container environments...

PT-2016-5378

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.5.2 Description The issue concerns the netfilter subsystem in the Linux kernel, which fails to validate certain offset fields. This allows local users to gain privileges or cause a denial of service, resulting ...

CVE-2015-0173

IBM WebSphere MQ Internet Pass-Thru (MQIPT) HTTP connection management is affected: MQIPT Session IDs are predictable in versions 2.1.0.1 and earlier when HTTPS is disabled, enabling potential bypass of data restrictions. Affected: MQIPT HTTP sessions; root cause is predictable session IDs. Remed...

security flaw

The iptrecent kernel module iptrecent.c in Linux kernel 2.6.12 and earlier does not properly perform certain time tests when the jiffies value is greater than LONGMAX, which can cause iptrecent netfilter rules to block too early, a different vulnerability than CVE-2005-2872...

security flaw

Race condition in the doaddcounters function in netfilter for Linux kernel 2.6.16 allows local users with CAPNETADMIN capabilities to read kernel memory by triggering the race condition in a way that produces a size value that is inconsistent with allocated memory, which leads to a buffer over-re...

MDKSA-2005:220 - Updated kernel packages fix numerous vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2005:220 http://www.mandriva.com/security/ Package : kernel Date : November 30, 2005 Affected: 10.2 Problem Description: Multiple vulnerabilities in the Linux 2.6 kernel have been discovered and corrected in this...

security flaw

The iptrecent kernel module iptrecent.c in Linux kernel before 2.6.12, when running on 64-bit processors such as AMD64, allows remote attackers to cause a denial of service kernel panic via certain attacks such as SSH brute force, which leads to memset calls using a length based on the uint32t...