Ubuntu: Security Advisory (USN-7121-3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GHSA-XG58-75QF-9R67 Cilium's Layer 7 policy enforcement may not occur in policies with wildcarded port ranges

Impact For users with the following configuration: An allow policy that selects a Layer 3 identity and a port range AND A Layer 7 allow policy that selects a specific port within the first policy's range then Layer 7 enforcement would not occur for the traffic selected by the Layer 7 policy. This...

Cilium's Layer 7 policy enforcement may not occur in policies with wildcarded port ranges

Impact For users with the following configuration: An allow policy that selects a Layer 3 identity and a port range AND A Layer 7 allow policy that selects a specific port within the first policy's range then Layer 7 enforcement would not occur for the traffic selected by the Layer 7 policy. This...

CVE-2024-52529 Layer 7 policy enforcement may not occur in policies with wildcarded port ranges in Cilium

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. For users with the following configuration: 1. An allow policy that selects a Layer 3 destination and a port range AND 2. A Layer 7 allow policy that selects a specific port within the first policy's range...

CVE-2024-52529 Layer 7 policy enforcement may not occur in policies with wildcarded port ranges in Cilium

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. For users with the following configuration: 1. An allow policy that selects a Layer 3 destination and a port range AND 2. A Layer 7 allow policy that selects a specific port within the first policy's range...

CVE-2024-52529 Layer 7 policy enforcement may not occur in policies with wildcarded port ranges in Cilium

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. For users with the following configuration: 1. An allow policy that selects a Layer 3 destination and a port range AND 2. A Layer 7 allow policy that selects a specific port within the first policy's range...

CVE-2024-52529

Cilium (eBPF dataplane) has a policy misbehavior when using port-range support introduced in v1.16: if a Layer 3 allow policy selects a destination and a port-range and a Layer 7 allow policy selects a specific port within that range, the Layer 7 enforcement may not apply to that traffic. Affecte...

USN-7121-3 linux-oracle vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - S390 architecture; - x86 architecture; - Block layer subsystem; - Cryptographic API; - ATM...

The vulnerability in the implementation of TLS and SSL protocols in Cisco Nexus Dashboard Orchestrator (NDO) allows a perpetrator to disclose protected information.

The vulnerability of the TLS and SSL protocol implementations in Cisco Nexus Dashboard Orchestrator NDO relates to errors in the certificate validation process. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information...

PT-2024-35358 · Cilium · Cilium

Name of the Vulnerable Software and Affected Versions: Cilium versions 1.16.0 through 1.16.3 Description: The issue arises when there is a Layer 3 policy with a port range and a Layer 7 policy with a port within the first policy's range. In such cases, the Layer 7 policy enforcement would not occ...

Cilium 安全漏洞

Cilium is an open source software from Cilium Open Source. It is used to provide and transparently protect network connectivity and load balancing between application workloads such as application containers or processes. A security vulnerability exists in Cilium that stems from the fact that in...

The vulnerability of the cxl_region_attach() function in cxl/region components of Linux kernel allows a hacker to trigger a service failure.

The vulnerability of the cxlregionattach function in Linux kernel-based cxl/region components is related to the use of uninitialized resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

Astra Linux – Vulnerability in Python 3.11

A vulnerability was discovered in Python before version 3.8.18, 3.9.x before version 3.9.18, 3.10.x before version 3.10.13, and 3.11.x before version 3.11.5. This vulnerability primarily affects servers such as HTTP servers that use TLS client authentication. When a TLS server-side socket is...

Astra Linux – Vulnerability in Chromium

Out-of-bounds memory access in ANGLE in Google Chrome prior to 127.0.6533.99 allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page. Chromium security severity: Critical...

SUSE CVE-2024-53091

In the Linux kernel, the following vulnerability has been resolved: bpf: Add skisinet and ISICSK check in tlsswhasctxtx/rx As the introduction of the support for vsock and unix sockets in sockmap, tlsswhasctxtx/rx cannot presume the socket passed in must be ISICSK. vsock and afunix sockets have...

The vulnerability of the set_verify_callback() function in the Icinga accessibility monitoring system allows a hacker to bypass security restrictions, gain unauthorized access to protected information, or execute arbitrary commands.

The vulnerability of the setverifycallback function in the Icinga accessibility monitoring system is related to errors in the TLS certificate validation process. Exploiting this vulnerability could allow a malicious actor to bypass security restrictions, gain unauthorized access to protected...

Red Hat Keycloak 安全漏洞

Red Hat Keycloak is a suite of software from Red Hat, Inc. that provides authentication and management capabilities for modern applications and services. A security vulnerability exists in Red Hat Keycloak, which arises from a reverse proxy that does not use TLS delivery termination and has mTLS...

The vulnerability of the tls component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the tls component in the Linux operating system’s kernel is related to improper blocking of resources in the tlsswrecvmsg function. Exploiting this vulnerability can allow an attacker to cause a service failure...

Ubuntu: Security Advisory (USN-7121-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-7121-2 linux-azure vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - S390 architecture; - x86 architecture; - Block layer subsystem; - Cryptographic API; - ATM...