GSD-2023-1001288 mptcp: use proper req destructor for IPv6

mptcp: use proper req destructor for IPv6 This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.163 by commit...

GSD-2023-1001001 ipv6/sit: use DEV_STATS_INC() to avoid data-races

ipv6/sit: use DEVSTATSINC to avoid data-races This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.86 by commit...

GSD-2023-1000934 mptcp: use proper req destructor for IPv6

mptcp: use proper req destructor for IPv6 This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.87 by commit...

GSD-2023-1000567 ipv6/sit: use DEV_STATS_INC() to avoid data-races

ipv6/sit: use DEVSTATSINC to avoid data-races This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000484 mptcp: use proper req destructor for IPv6

mptcp: use proper req destructor for IPv6 This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.18 by commit...

GSD-2023-1000348 ipv6: avoid use-after-free in ip6_fragment()

ipv6: avoid use-after-free in ip6fragment This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.302 by commit...

GSD-2023-1000314 ipv6: avoid use-after-free in ip6_fragment()

ipv6: avoid use-after-free in ip6fragment This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.269 by commit...

GSD-2023-1000267 ipv6: avoid use-after-free in ip6_fragment()

ipv6: avoid use-after-free in ip6fragment This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.227 by commit...

GSD-2023-1000203 ipv6: avoid use-after-free in ip6_fragment()

ipv6: avoid use-after-free in ip6fragment This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.159 by commit...

GSD-2023-1000119 ipv6: avoid use-after-free in ip6_fragment()

ipv6: avoid use-after-free in ip6fragment This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.83 by commit...

GSD-2023-1000015 ipv6: avoid use-after-free in ip6_fragment()

ipv6: avoid use-after-free in ip6fragment This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.13 by commit...

PT-2023-33196 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.83 Description: The issue concerns a use-after-free in the ip6 fragment function. This problem was introduced in version v4.13 and is fixed in Linux Kernel version v5.15.83. The actual impact and attack...

PT-2023-33391 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.269 Description: The issue concerns a use-after-free in the ip6 fragment function. This problem was introduced in version v4.13 and is fixed in Linux Kernel version v4.19.269. The actual impact and attack...

PT-2023-33561 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.18 Description: The issue concerns the use of a proper request destructor for IPv6 in the mptcp component. It was introduced in version v5.6 and fixed in version v6.0.18. The actual impact and attack...

PT-2023-33425 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.14.302 Description: The issue concerns a use-after-free in the ip6 fragment function. This problem was introduced in version v4.13 and is fixed in Linux Kernel version v4.14.302. The actual impact and attack...

PT-2023-33644 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.16 Description: The issue is related to a potential data-race in the ipv6/sit module. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

CVE-2023-22411

An Out-of-Bounds Write vulnerability in Flow Processing Daemon flowd of Juniper Networks Junos OS allows an unauthenticated, network-based attacker to cause Denial of Service DoS. On SRX Series devices using Unified Policies with IPv6, when a specific IPv6 packet goes through a dynamic-applicatio...

CVE-2023-22411

An Out-of-Bounds Write vulnerability in Flow Processing Daemon flowd of Juniper Networks Junos OS allows an unauthenticated, network-based attacker to cause Denial of Service DoS. On SRX Series devices using Unified Policies with IPv6, when a specific IPv6 packet goes through a dynamic-applicatio...

Cross site scripting

An Out-of-Bounds Write vulnerability in Flow Processing Daemon flowd of Juniper Networks Junos OS allows an unauthenticated, network-based attacker to cause Denial of Service DoS. On SRX Series devices using Unified Policies with IPv6, when a specific IPv6 packet goes through a dynamic-applicatio...

CVE-2023-22411 Junos OS: SRX Series: The flow processing daemon (flowd) will crash when Unified Policies are used with IPv6 and certain dynamic applications are rejected by the device

An Out-of-Bounds Write vulnerability in Flow Processing Daemon flowd of Juniper Networks Junos OS allows an unauthenticated, network-based attacker to cause Denial of Service DoS. On SRX Series devices using Unified Policies with IPv6, when a specific IPv6 packet goes through a dynamic-applicatio...