CVE-2024-38101

Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability...

CVE-2024-38053

Windows Layer-2 Bridge Network Driver Remote Code Execution Vulnerability...

CVE-2024-38105

CVE-2024-38105 details are not publicly available in the provided documents. Monitor for updates; no specifics on vulnerable components, impact, or fixes are included here.

CVE-2024-38105 Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability

...

CVE-2024-38105 Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability

...

CVE-2024-38101 Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability

...

CVE-2024-38053 Windows Layer-2 Bridge Network Driver Remote Code Execution Vulnerability

...

CVE-2024-38053

Technical details for CVE-2024-38053 are not provided in the supplied documents; no affected products, root cause, impact, or remediation are specified here. Monitor for updates.

CVE-2024-38102 Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability

...

CVE-2024-38102 Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability

...

golang: crypto/tls: Timing Side Channel attack in RSA based TLS key exchanges.

A flaw was found in the Golang crypto/tls standard library. In previous versions, the package was vulnerable to a Timing Side Channel attack by observing the time it took for RSA-based TLS key exchanges, which was not constant. This flaw allows a malicious user to gather information from the...

kernel: netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftct: sanitize layer 3 and 4 protocol number in custom expectations The Linux kernel CVE team has assigned CVE-2024-26673 to this issue. Upstream advisory:...

kernel: netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftct: sanitize layer 3 and 4 protocol number in custom expectations The Linux kernel CVE team has assigned CVE-2024-26673 to this issue. Upstream advisory:...

tpm2-tss: Buffer Overlow in TSS2_RC_Decode

A flaw was found in tpm2-tss, which is an open source software implementation of the Trusted Computing Group TCG Trusted Platform Module TPM 2 Software Stack TSS2. In affected versions, Tss2RCSetHandler and Tss2RCDecode index into the layerhandler with an 8-bit layer number, but the array only ha...

Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability

...

Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability

...

Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability

...

CVE-2024-4944

A local privilege escalation vlnerability in the WatchGuard Mobile VPN with SSL client on Windows enables a local user to execute arbitrary commands with elevated privileged...

PT-2024-4756 · Microsoft · Windows Layer-2 Bridge Network Driver +1

Name of the Vulnerable Software and Affected Versions: Windows Layer-2 Bridge Network Driver affected versions not specified Description: The issue is related to insufficient input validation in the Windows Layer-2 Bridge Network Driver, which can be exploited by a remote attacker to cause a deni...

undertow: response write hangs in case of Java 17 TLSv1.3 NewSessionTicket

A vulnerability was found in Undertow, where the chunked response hangs after the body was flushed. The response headers and body were sent but the client would continue waiting as Undertow does not send the expected 0\r\n termination of the chunked response. This results in uncontrolled resource...