Remote code execution

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability...

Microsoft Patch Tuesday for April 2023 — Snort rules and prominent vulnerabilities

Microsoft released its monthly round of security updates and patches today, continuing its trend of fixing zero-day vulnerabilities on Patch Tuesday. Aprils security update includes one vulnerability thats actively being exploited in the wild. There are also eight critical vulnerabilities and the...

CVE-2023-28220 Layer 2 Tunneling Protocol Remote Code Execution Vulnerability

...

CVE-2023-28219

CVE-2023-28219 is a Windows RAS (Remote Access Server) remote code execution vulnerability. The connected Krebs commentary identifies it as a RAS RCE and notes that Microsoft addressed this family of flaws in the April 2023 Patch Tuesday updates, with exploitation more likely for certain vulnerab...

CVE-2023-28219 Layer 2 Tunneling Protocol Remote Code Execution Vulnerability

...

CVE-2023-28220

Technical details about CVE-2023-28220 (Layer 2 Tunneling Protocol RCE) are not provided in the supplied connected documents. No affected products, impact, fixes, or exploitation data are present here. Monitor for updates.

CVE-2023-28220 Layer 2 Tunneling Protocol Remote Code Execution Vulnerability

...

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability

...

PT-2023-2288 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in synchronization when using a shared resource in the implementation of the Layer 2 Tunneling Protocol L2TP in Windows operating systems. This can allow a...

PT-2023-2271 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in synchronization when using a shared resource in the implementation of the Layer 2 Tunneling Protocol L2TP in Windows operating systems. This can allow a...

Microsoft Windows Transport Security Layer 安全漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A security vulnerability exists in the Microsoft Windows Transport Security Layer TLS. The following products and versions are affected: Windows Server 2022,Windows Server 2022 Server Cor...

Microsoft Windows 安全漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A security vulnerability exists in the Microsoft Windows Layer 2 Tunneling Protocol. The following products and editions are affected:Windows 10 Version 1809 for 32-bit Systems,Windows 10...

Microsoft Windows 安全漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A security vulnerability exists in the Microsoft Windows Layer 2 Tunneling Protocol. The following products and versions are affected:Windows 10 Version 1809 for 32-bit Systems,Windows 10...

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: KVM: VMX: Do all initialization before exposing /dev/kvm to userspace CVE-2022-49932 A use-after-free vulnerability in the Linux Kernel Performance Events system can be exploited to achieve local privilege...

Allegro信任管理问题漏洞

Allegro is an open source, cross-platform library from Allegro that focuses on video games and multimedia programming. A security vulnerability exists in Allegro Tech BigFlow versions prior to 1.6, which stems from a lack of SSL certificate validation...

NVIDIA Virtual GPU Manager Multiple Vulnerabilities (March 2023)

The NVIDIA Virtual GPU Manager software on the remote host is missing a security update. It is, therefore, affected by multiple vulnerabilities, including the following: - NVIDIA GPU Display Driver for Linux contains a vulnerability in a kernel mode layer handler, where memory permissions are not...

USN-6001-1: Linux kernel (AWS) vulnerabilities

Xuewei Feng, Chuanpu Fu, Qi Li, Kun Sun, and Ke Xu discovered that the TCP implementation in the Linux kernel did not properly handle IPID assignment. A remote attacker could use this to cause a denial of service connection termination or inject forged data. CVE-2020-36516 Ke Sun, Alyssa Milburn,...

UBUNTU-CVE-2023-1782

HashiCorp Nomad and Nomad Enterprise versions 1.5.0 up to 1.5.2 allow unauthenticated users to bypass intended ACL authorizations for clusters where mTLS is not enabled. This issue is fixed in version 1.5.3...

kernel: net/ulp: use-after-free in listening ULP sockets

A use-after-free flaw was found in the Linux kernel’s TLS protocol functionality in how a user installs a tls context struct tlscontext on a connected TCP socket. This flaw allows a local user to crash or potentially escalate their privileges on the system...

kernel: net/ulp: use-after-free in listening ULP sockets

A use-after-free flaw was found in the Linux kernel’s TLS protocol functionality in how a user installs a tls context struct tlscontext on a connected TCP socket. This flaw allows a local user to crash or potentially escalate their privileges on the system...