11083 matches found
kernel: net/ulp: use-after-free in listening ULP sockets
A use-after-free flaw was found in the Linux kernel’s TLS protocol functionality in how a user installs a tls context struct tlscontext on a connected TCP socket. This flaw allows a local user to crash or potentially escalate their privileges on the system...
PT-2023-3597
Name of the Vulnerable Software and Affected Versions HTTP::Tiny versions prior to 0.083 Description The issue is related to errors in the TLS certificate authentication procedure, allowing a remote attacker to access confidential data, compromise its integrity, and cause a denial of service. The...
CVE-2023-28984 Junos OS: QFX Series: The PFE may crash when a lot of MAC addresses are being learned and aged
A Use After Free vulnerability in the Layer 2 Address Learning Manager l2alm of Juniper Networks Junos OS on QFX Series allows an adjacent attacker to cause the Packet Forwarding Engine to crash and restart, leading to a Denial of Service DoS. The PFE may crash when a lot of MAC learning and agin...
The vulnerability in the implementation of the TLS protocol in the Linux operating system allows a attacker to cause a service failure.
The vulnerability in the implementation of the TLS protocol in the Linux operating system’s kernel is related to concurrent access to ctx-cryptosend.info between the functions dotlsgetsockoptconf and dotlssetsockoptconf in the net/tls/tlsmain.c module race condition. This vulnerability arises due...
DEBIAN-CVE-2023-26463
strongSwan 5.9.8 and 5.9.9 potentially allows remote code execution because it uses a variable named "public" for two different purposes within the same function. There is initially incorrect access control, later followed by an expired pointer dereference. One attack vector is sending an untrust...
strongSwan 信任管理问题漏洞
strongSwan is a Swiss Andreas Steffen personal developer of a Linux platform to use the open source IPsec-based VPN solution. The solution includes authentication mechanisms such as X.509 public key certificates, securely stored private keys, and smart cards. A security vulnerability exists in...
The vulnerability of the Layer 2 Tunneling Protocol (L2TP) implementation in Windows operating systems allows a hacker to execute arbitrary code.
The vulnerability of the Layer 2 Tunneling Protocol L2TP implementation in Windows operating systems is related to synchronization errors when using a shared resource. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Juniper Junos OS Vulnerability (JSA70610)
The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA70610 advisory. - A Use After Free vulnerability in the Layer 2 Address Learning Manager l2alm of Juniper Networks Junos OS on QFX Series allows an adjacent attacker to cause the Packet...
The vulnerability of the Layer 2 Tunneling Protocol (L2TP) implementation in Windows operating systems allows a hacker to execute arbitrary code.
The vulnerability of the Layer 2 Tunneling Protocol L2TP implementation in Windows operating systems is related to synchronization errors when using a shared resource. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
USN-6014-1: Linux kernel vulnerabilities
Xuewei Feng, Chuanpu Fu, Qi Li, Kun Sun, and Ke Xu discovered that the TCP implementation in the Linux kernel did not properly handle IPID assignment. A remote attacker could use this to cause a denial of service connection termination or inject forged data. CVE-2020-36516 Ke Sun, Alyssa Milburn,...
USN-6013-1: Linux kernel (AWS) vulnerabilities
Xuewei Feng, Chuanpu Fu, Qi Li, Kun Sun, and Ke Xu discovered that the TCP implementation in the Linux kernel did not properly handle IPID assignment. A remote attacker could use this to cause a denial of service connection termination or inject forged data. CVE-2020-36516 Ke Sun, Alyssa Milburn,...
Jenkins Plugin NeuVector Vulnerability Scanner 信任管理问题漏洞
Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. A security vulnerability...
Microsoft Windows Multiple Vulnerabilities (KB5025234)
This host is missing a critical security update according to Microsoft KB5025234 SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Microsoft Windows Multiple Vulnerabilities (KB5025285)
This host is missing an important security update according to Microsoft KB5025285 SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...
The vulnerability in the implementation of the mTLS protocol for the Envoy proxy server allows a attacker to send hidden HTTP requests (HTTP Request Smuggling attack).
The vulnerability of the mTLS protocol implementation in Envoy proxy servers is related to insufficient validation of input data during the processing of HTTP headers. Exploiting this vulnerability allows a malicious actor to send hidden HTTP requests HTTP Request Smuggling attack...
CVE-2023-28220
Layer 2 Tunneling Protocol Remote Code Execution Vulnerability...
CVE-2023-28219
Layer 2 Tunneling Protocol Remote Code Execution Vulnerability...
CVE-2023-28220
Layer 2 Tunneling Protocol Remote Code Execution Vulnerability...
