USN-6818-4: Linux kernel (HWE) vulnerabilities

Alon Zahavi discovered that the NVMe-oF/TCP subsystem in the Linux kernel did not properly validate H2C PDU data, leading to a null pointer dereference vulnerability. A remote attacker could use this to cause a denial of service system crash. CVE-2023-6356, CVE-2023-6535, CVE-2023-6536 It was...

Ubuntu 22.04 LTS : Linux kernel (NVIDIA) vulnerabilities (USN-6818-3)

The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6818-3 advisory. Alon Zahavi discovered that the NVMe-oF/TCP subsystem in the Linux kernel did not properly validate H2C PDU data, leading to a null pointer dereference...

The vulnerability of the CDP PDU Packet Handler component in the LLDP protocol implementation under Unix’s Lldpd allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the CDP PDU Packet Handler component in the LLDP protocol implementation in Unix-based systems like Lldpd is related to uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibili...

USN-6819-3: Linux kernel (OEM) vulnerabilities

Alon Zahavi discovered that the NVMe-oF/TCP subsystem in the Linux kernel did not properly validate H2C PDU data, leading to a null pointer dereference vulnerability. A remote attacker could use this to cause a denial of service system crash. CVE-2023-6356, CVE-2023-6535, CVE-2023-6536 Chenyuan...

Ubuntu 22.04 LTS : Linux kernel (OEM) vulnerabilities (USN-6819-3)

The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6819-3 advisory. Alon Zahavi discovered that the NVMe-oF/TCP subsystem in the Linux kernel did not properly validate H2C PDU data, leading to a null pointer dereference...

USN-6819-2: Linux kernel vulnerabilities

Alon Zahavi discovered that the NVMe-oF/TCP subsystem in the Linux kernel did not properly validate H2C PDU data, leading to a null pointer dereference vulnerability. A remote attacker could use this to cause a denial of service system crash. CVE-2023-6356, CVE-2023-6535, CVE-2023-6536 Chenyuan...

CVE-2024-30074

Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability...

CVE-2024-30075

Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability...

CVE-2024-30075

Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability...

CVE-2024-30074

Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability...

CVE-2024-30074

Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability...

CVE-2024-30075 Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability

...

CVE-2024-30075 Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability

...

CVE-2024-30074 Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability

...

CVE-2024-30074

Technical details for CVE-2024-30074 are not publicly available in the provided connected documents. Affected product/component/versions and remediation are not specified here. Monitor updates from Microsoft MSRC and CVE databases for confirmed exploitability, fixes, and affected configurations.

Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability

...

Ubuntu 23.10 : Linux kernel vulnerabilities (USN-6819-2)

The remote Ubuntu 23.10 host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6819-2 advisory. Alon Zahavi discovered that the NVMe-oF/TCP subsystem in the Linux kernel did not properly validate H2C PDU data, leading to a null pointer dereference...

KLA68914 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products ESU. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Windows Distributed...

CVE-2024-30075: Heap-based Buffer Overflow

Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability...

KB5039274: Windows Server 2008 R2 Security Update (June 2024)

The remote Windows host is missing security update 5039274. It is, therefore, affected by multiple vulnerabilities - Microsoft Message Queuing MSMQ Remote Code Execution Vulnerability CVE-2024-30080 - Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability CVE-2024-3007...