19485 matches found
SUSE CVE-2022-4842
A flaw NULL Pointer Dereference in the Linux kernel NTFS3 driver function attrpunchhole was found. A local user could use this flaw to crash the system...
SUSE CVE-2022-21123
Incomplete cleanup of multi-core shared buffers for some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access...
SUSE CVE-2022-21136
Improper input validation for some IntelR XeonR Processors may allow a privileged user to potentially enable denial of service via local access...
SUSE CVE-2022-21180
Improper input validation for some IntelR Processors may allow an authenticated user to potentially cause a denial of service via local access...
SUSE CVE-2022-21385
A flaw in netrdsallocsgs in Oracle Linux kernels allows unprivileged local users to crash the machine. CVSS 3.1 Base Score 6.2 Availability impacts. CVSS Vector CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H...
SUSE CVE-2022-25327
The PAM module for fscrypt doesn't adequately validate fscrypt metadata files, allowing users to create malicious metadata files that prevent other users from logging in. A local user can cause a denial of service by creating a fscrypt metadata file that prevents other users from logging into the...
SUSE CVE-2022-29582
In the Linux kernel before 5.17.3, fs/iouring.c has a use-after-free due to a race condition in iouring timeouts. This can be triggered by a local user who has no access to any user namespace; however, the race condition perhaps can only be exploited infrequently...
SUSE CVE-2022-32250
net/netfilter/nftablesapi.c in the Linux kernel through 5.18.1 allows a local user able to create user/net namespaces to escalate privileges to root because an incorrect NFTSTATEFULEXPR check leads to a use-after-free...
SUSE CVE-2022-36280
An out-of-boundsOOB memory access vulnerability was found in vmwgfx driver in drivers/gpu/vmxgfx/vmxgfxkms.c in GPU component in the Linux kernel with device file '/dev/dri/renderD128 or Dxxx'. This flaw allows a local attacker with a user account on the system to gain privilege, causing a denial...
SUSE CVE-2023-0597
A flaw possibility of memory leak in the Linux kernel cpuentryarea mapping of X86 CPU data to memory was found in the way user can guess location of exception stacks or other important data. A local user could use this flaw to get access to some important data with expected location in memory...
CVE-2022-42455
ASUS EC Tool driver aka d.sys 1beb15c90dcf7a5234ed077833a0a3e900969b60be1d04fcebce0a9f8994bdbb, as signed by ASUS and shipped with multiple ASUS software products, contains multiple IOCTL handlers that provide raw read and write access to port I/O and MSRs via unprivileged IOCTL calls. Local user...
PT-2023-2041 · Solarwinds · Solarwinds Platform
Name of the Vulnerable Software and Affected Versions: SolarWinds Platform affected versions not specified Description: The issue is related to a Directory Traversal Vulnerability in the SolarWinds Platform, which allows a local adversary with authenticated account access to edit the default...
Security Bulletin: IBM CICS TX Standard is vulnerable to a local user impersonating another legitimate user (CVE-2022-34164).
Summary IBM CICS TX could allow a local user to impersonate another legitimate user due to improper input validation. The fix removes this vulnerability CVE-2022-34164 from IBM CICS TX Standard. Vulnerability Details CVEID:CVE-2022-34164 DESCRIPTION: IBM CICS TX could allow a local user to...
Security Bulletin: IBM CICS TX Standard is vulnerable to a local user causing a denial of service. (CVE-2022-34308)
Summary IBM CICS TX Standard could allow a local user to cause a denial of service due to improper load handling. The fix removes this vulnerability CVE-2022-34308 from IBM CICS TX Standard. Vulnerability Details CVEID:CVE-2022-34308 DESCRIPTION: IBM CICS TX could allow a local user to cause a...
Code injection
Redpanda before 22.3.12 discloses cleartext AWS credentials. The import functionality in the rpk binary logs an AWS Access Key ID and Secret in cleartext to standard output, allowing a local user to view the key in the console, or in Kubernetes logs if stdout output is collected. The fixed versio...
CVE-2023-24619
Redpanda before 22.3.12 discloses cleartext AWS credentials. The import functionality in the rpk binary logs an AWS Access Key ID and Secret in cleartext to standard output, allowing a local user to view the key in the console, or in Kubernetes logs if stdout output is collected. The fixed versio...
CVE-2023-24619: Insufficiently Protected Credentials
Redpanda before 22.3.12 discloses cleartext AWS credentials. The import functionality in the rpk binary logs an AWS Access Key ID and Secret in cleartext to standard output, allowing a local user to view the key in the console, or in Kubernetes logs if stdout output is collected. The fixed versio...
Oracle Linux 8 : Unbreakable Enterprise kernel-container (ELSA-2023-12120)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-12120 advisory. - netfilter: nftpayload: incorrect arithmetics when fetching VLAN header bits Pablo Neira Ayuso Orabug: 34978152 CVE-2023-0179 Tenable has extracted t...
Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2023-12119)
The remote Oracle Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-12119 advisory. - Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM Luiz Augusto von Dentz CVE-2022-42896 - drm/i915: fix TLB invalidation for...
