Digital China Networks' various products have security vulnerabilities

Digital China Networks DCME-520 DCN DCME-520 and others are products of Digital China Networks China.Digital China Networks DCME-520 is a new generation of high-performance security gateway with multi-core high performance. Digital China Networks DCME-320 DCN DCME-320 is a wireless router.Digital...

PT-2024-35655

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.11.0-rc6-syzkaller-01155-gf723224742fc Description A slab-use-after-free read vulnerability has been identified in the Linux kernel's Bluetooth MGMT component, specifically in the set powered sync function. Thi...

CVE-2024-49951

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix possible crash on mgmtindexremoved If mgmtindexremoved is called while there are commands queued on cmdsync it could lead to crashes like the bellow trace: 0x0000053D: listdelentryvalidorreport+0x98/0xdc...

DEBIAN-CVE-2024-49951

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix possible crash on mgmtindexremoved If mgmtindexremoved is called while there are commands queued on cmdsync it could lead to crashes like the bellow trace: 0x0000053D: listdelentryvalidorreport+0x98/0xdc...

CVE-2024-49951

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix possible crash on mgmtindexremoved If mgmtindexremoved is called while there are commands queued on cmdsync it could lead to crashes like the bellow trace: 0x0000053D: listdelentryvalidorreport+0x98/0xdc...

UBUNTU-CVE-2024-49951

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix possible crash on mgmtindexremoved If mgmtindexremoved is called while there are commands queued on cmdsync it could lead to crashes like the bellow trace: 0x0000053D: listdelentryvalidorreport+0x98/0xdc...

CVE-2024-49951 Bluetooth: MGMT: Fix possible crash on mgmt_index_removed

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix possible crash on mgmtindexremoved If mgmtindexremoved is called while there are commands queued on cmdsync it could lead to crashes like the bellow trace: 0x0000053D: listdelentryvalidorreport+0x98/0xdc...

CVE-2024-49951 Bluetooth: MGMT: Fix possible crash on mgmt_index_removed

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix possible crash on mgmtindexremoved If mgmtindexremoved is called while there are commands queued on cmdsync it could lead to crashes like the bellow trace: 0x0000053D: listdelentryvalidorreport+0x98/0xdc...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a possible crash in the Bluetooth MGMT subsystem mgmtindexremoved call...

PT-2024-33793

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.6.58 Description: A vulnerability in the Linux kernel's Bluetooth management MGMT component could lead to crashes when mgmt index removed is called while commands are queued on cmd sync. This issue is related ...

CVE-2024-49951: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix possible crash on mgmtindexremoved If mgmtindexremoved is called while there are commands queued on cmdsync it could lead to crashes like the bellow trace: 0x0000053D: listdelentryvalidorreport+0x98/0xdc...

CVE-2024-21192

CVE-2024-21192 affects Oracle Fusion Middleware’s WebLogic Mgmt component in Oracle Enterprise Manager for Fusion Middleware, specifically version 12.2.1.4.0. The vulnerability allows a high-privilege attacker who can log on to the infrastructure where Oracle Enterprise Manager for Fusion Middlew...

PT-2024-7259

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Manager for Fusion Middleware version 12.2.1.4.0 Description The issue is related to insufficient input validation in the WebLogic Mgmt component of Oracle Enterprise Manager for Fusion Middleware. This can allow an attacker ...

CVE-2024-21192: Undefined Security Weakness

Vulnerability in the Oracle Enterprise Manager for Fusion Middleware product of Oracle Fusion Middleware component: WebLogic Mgmt. The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-43884)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-43884 advisory. - In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Add error handling to...

PT-2024-31187 · Rely-Pcie · Rely-Pcie

Name of the Vulnerable Software and Affected Versions: RELY-PCIe versions 22.2.1 through 23.1.0 Description: A command injection issue was discovered via the sys mgmt function. Recommendations: For versions 22.2.1 through 23.1.0, consider disabling the sys mgmt function as a temporary workaround...

PT-2024-41489

Уязвимость функции mgmt mesh foreach модуля net/bluetooth/mgmt util.c ядра операционных систем Linux связана с итерированием по неподходящему списку mgmt pending, содержащему элементы struct mgmt pending cmd вместо struct mgmt mesh tx. Эксплуатация уязвимости может позволить нарушителю оказать...

CVE-2024-43884

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Add error handling to pairdevice hciconnparamsadd never checks for a NULL value and could lead to a NULL pointer dereference causing a crash. Fixed by adding error handling in the function...

AZL-48197 CVE-2024-43884 affecting package kernel for versions less than 6.6.51.1-5

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Add error handling to pairdevice hciconnparamsadd never checks for a NULL value and could lead to a NULL pointer dereference causing a crash. Fixed by adding error handling in the function...

CVE-2024-43884

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Add error handling to pairdevice hciconnparamsadd never checks for a NULL value and could lead to a NULL pointer dereference causing a crash. Fixed by adding error handling in the function...