149 matches found
EUVD-2018-6666
Malware in sbrugna...
EUVD-2016-3416
Malware in sbrugna...
EUVD-2018-9667
Malware in sbrugna...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414469)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414469 advisory. In v4l2m2mquerybuf of v4l2-mem2mem.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: ffmpeg (UTSA-2025-936099)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-936099 advisory. A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the ffv4l2m2mcreatecontext function in v4l2m2m.c. Tenable has extracted the preceding...
EUVD-2022-45562
Malicious code in bioql PyPI...
PT-2025-46640
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.16.0-rc4-next-20250704-06511-gff0e002d480a Description The Linux kernel contains an issue within the nxp imx8-isi m2m subsystem. An imbalance in streamon/streamoff calls, such as exiting an application with...
ABB M2M Gateway Use-After-Free in embedded Linux Kernel (CVE-2023-32233)
In the Linux kernel through 6.3.1, a use-after-free in Netfilter nftables when processing batch requests can be abused to perform arbitrary read and write operations on kernel memory. Unprivileged local users can obtain root privileges. This occurs because anonymous sets are mishandled. This plug...
ABB M2M Gateway Out-Of-Bound Write in embedded Apr-util (CVE-2022-25147)
Integer Overflow or Wraparound vulnerability in aprbase64 functions of Apache Portable Runtime Utility APR-util allows an attacker to write beyond bounds of a buffer. This issue affects Apache Portable Runtime Utility APR-util 1.6.1 and prior versions. This plugin only works with Tenable.ot. Plea...
ABB M2M Gateway Stack Overflow in embedded Linux Kernel (CVE-2022-4378)
A stack overflow flaw was found in the Linux kernel's SYSCTL subsystem in how a user changes certain kernel parameters and variables. This flaw allows a local user to crash or potentially escalate their privileges on the system. This plugin only works with Tenable.ot. Please visit...
ABB M2M Gateway Arbitrary Code Execution in embedded Linux Kernel for some AMD CPUs (CVE-2021-26401)
LFENCE/JMP mitigation V2-2 may not sufficiently mitigate CVE-2017-5715 on some AMD CPUs. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid503249;...
ABB M2M Gateway Use-After-Free in embedded Linux Kernel (CVE-2022-42703)
mm/rmap.c in the Linux kernel before 5.19.7 has a use-after-free related to leaf anonvma double reuse. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description...
ABB M2M Gateway Information Disclosure in embedded Python (CVE-2023-24329)
An issue in the urllib.parse component of Python before 3.11.4 allows attackers to bypass blocklisting methods by supplying a URL that starts with blank characters. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL...
ABB M2M Gateway Arbitrary Code Execution in embedded Linux Kernel (CVE-2022-2964)
A flaw was found in the Linux kernel's driver for the ASIX AX88179178A-based USB 2.0/3.0 Gigabit Ethernet Devices. The vulnerability contains multiple out-of-bounds reads and possible out- of-bounds writes. This plugin only works with Tenable.ot. Please visit...
ABB M2M Gateway Arbitrary Code Execution in embedded OpenSSH (CVE-2023-38408)
The PKCS11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search path, leading to remote code execution if an agent is forwarded to an attacker-controlled system. Code in /usr/lib is not necessarily safe for loading into ssh-agent. NOTE: this issue exists because o...
ABB M2M Gateway Out-Of-Bound Memory Read/Write in embedded Libssh2 (CVE-2020-22218)
An issue was discovered in function libssh2packetadd in libssh2 1.10.0 allows attackers to access out of bounds memory. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; i...
ABB M2M Gateway Uncontrolled Resource Consumption in embedded Bind (CVE-2022-2795)
By flooding the target resolver with queries exploiting this flaw an attacker can significantly impair the resolver's performance, effectively denying legitimate clients access to the DNS resolution service. This plugin only works with Tenable.ot. Please visit...
ABB M2M Gateway Memory Leak in embedded Bind (CVE-2022-38177)
By spoofing the target resolver with responses that have a malformed ECDSA signature, an attacker can trigger a small memory leak. It is possible to gradually erode available memory to the point where named crashes for lack of resources. This plugin only works with Tenable.ot. Please visit...
ABB M2M Gateway Use-After-Free in embedded Libexpat (CVE-2022-40674)
libexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid503230;...
ABB M2M Gateway Uncontrolled Resource Consumption in embedded Bind (CVE-2023-2828)
Every named instance configured to run as a recursive resolver maintains a cache database holding the responses to the queries it has recently sent to authoritative servers. The size limit for that cache database can be configured using the max-cache-size statement in the configuration file; it...