Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: block, bfq: don't move oombfqq CVE-2022-49179 In the Linux kernel, the following vulnerability has been resolved: macsec: fix UAF bug for realdev CVE-2022-49390 In the Linux kernel, the following vulnerability has...

Eclipse ThreadX NetX Duo HTTP server denial of service vulnerability

Talos Vulnerability Report TALOS-2024-2098 Eclipse ThreadX NetX Duo HTTP server denial of service vulnerability April 14, 2025 CVE Number CVE-2025-2260,None SUMMARY A denial of service vulnerability exists in the NetX HTTP server functionality of Eclipse ThreadX NetX Duo git commit 6c8e9d1. A...

CVE-2025-21591

A Buffer Access with Incorrect Length Value vulnerability in the jdhcpd daemon of Juniper Networks Junos OS, when DHCP snooping is enabled, allows an unauthenticated, adjacent, attacker to send a DHCP packet with a malformed DHCP option to cause jdhcp to crash creating a Denial of Service DoS...

Linux Distros Unpatched Vulnerability : CVE-2024-50033

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - slip: make slhcremember more robust against malicious packets syzbot found that slhcremember was missing checks against malicious packets 1. slhcremember only...

CVE-2025-1674

A lack of input validation allows for out of bounds reads caused by malicious or malformed packets...

CVE-2025-1674 Out of bounds read when unpacking DNS answers

A lack of input validation allows for out of bounds reads caused by malicious or malformed packets...

CVE-2025-1674

CVE-2025-1674 is a vulnerability in Zephyr RTOS (Zephyr project) arising from insufficient input validation that allows out-of-bounds reads when processing malicious or malformed packets. Public details from multiple sources indicate the issue affects Zephyr up to version 4.0 and earlier. The nat...

CVE-2025-1059

CVE-2025-1059 is associated with Schneider Electric ASCO 5310/5350 Remote Annunciator products. The connected sources describe an Allocation of Resources Without Limits or Throttling vulnerability that could cause communications to stop on the device webserver when malicious packets are received ...

CVE-2025-1059

CWE-770: Allocation of Resources Without Limits or Throttling vulnerability exists that could cause communications to stop when malicious packets are sent to the webserver of the device...

CVE-2025-1059

CWE-770: Allocation of Resources Without Limits or Throttling vulnerability exists that could cause communications to stop when malicious packets are sent to the webserver of the device...

PT-2025-6803 · Unknown · Enerlin'X Ife Interface

Name of the Vulnerable Software and Affected Versions: Enerlin'X IFE interface LV434001 versions all Description: The issue is related to improper input validation, which could cause a Denial-of-Service when malicious ICMPV6 packets are sent to the device. Recommendations: For all versions, at th...

PT-2025-6827 · Schneider Electric · Asco 5310 Single-Channel Remote Annunciator

Name of the Vulnerable Software and Affected Versions: Schneider Electric - ASCO 5310 Single-Channel Remote Annunciator versions all Description: A vulnerability exists that could cause communications to stop when malicious packets are sent to the webserver of the device. This issue is related to...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: Slip: Make slhcremember more robust against malicious packets. syzbot found that slhcremember lacked checks against malicious packets 1. slhcremember only checks that the packet’s size is at least 20 bytes, which is...

Azure Linux 3.0 Security Update: kernel (CVE-2024-50033)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-50033 advisory. - In the Linux kernel, the following vulnerability has been resolved: slip: make slhcremember more robust...

CVE-2020-6097

An exploitable denial of service vulnerability exists in the atftpd daemon functionality of atftp 0.7.git20120829-3.1+b1. A specially crafted sequence of RRQ-Multicast requests trigger an assert call resulting in denial-of-service. An attacker can send a sequence of malicious packets to trigger...

CVE-2020-13573

A denial-of-service vulnerability exists in the Ethernet/IP server functionality of Rockwell Automation RSLinx Classic 2.57.00.14 CPR 9 SR 3. A specially crafted network request can lead to a denial of service. An attacker can send a sequence of malicious packets to trigger this vulnerability...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-50033)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-50033 advisory. - In the Linux kernel, the following vulnerability has been resolved: slip: make slhcremember more robust...

Wireshark Denial of Service Vulnerability (CNVD-2024-46396)

Wireshark is a very popular network packet analyzer that intercepts various network packets and displays packet details. A denial of service vulnerability exists in Wireshark. The vulnerability is due to a crash in the ECMP unpacker when processing specific packets or carefully constructed captur...

slip: make slhc_remember() more robust against malicious packets

...

SUSE CVE-2024-49948

In the Linux kernel, the following vulnerability has been resolved: net: add more sanity checks to qdiscpktleninit One path takes care of SKBGSODODGY, assuming skb-len is bigger than hdrlen. virtionethdrtoskb does not fully dissect TCP headers, it only make sure it is at least 20 bytes. It is...