CVE-2024-50001

The CVE 2024-50001 entry affects the Linux kernel, specifically the net/mlx5 multi-packet WQE transmit path. The code that obtains a DMA mapping for the skb may fail under memory pressure; in the error path it erroneously unmaps one entry from the sq’s FIFO list of active mappings. Since the mapp...

CVE-2024-50001 net/mlx5: Fix error path in multi-packet WQE transmit

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix error path in multi-packet WQE transmit Remove the erroneous unmap in case no DMA mapping was established The multi-packet WQE transmit code attempts to obtain a DMA mapping for the skb. This could fail, e.g. under...

CVE-2024-50001: Improper Handling of Exceptional Conditions

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix error path in multi-packet WQE transmit Remove the erroneous unmap in case no DMA mapping was established The multi-packet WQE transmit code attempts to obtain a DMA mapping for the skb. This could fail, e.g. under...

CLSA-2023-1696351801 Fix CVE(s): CVE-2022-48571

SECURITY UPDATE: denial of service - debian/patches/CVE-2022-48571.patch: fix the crash when receiving multi-packet uploads in UDP - CVE-2022-48571...

USN-6382-1 memcached vulnerability

It was discovered that Memcached incorrectly handled certain multi-packet uploads in UDP. An attacker could possibly use this issue to cause a denial of service...

CVE-2022-48571

A buffer overflow flaw was found in memcached. This issue occurs via multi-packet uploads in UDP, leading to a denial of service. Mitigation Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use...

Memcached 1.6.x < 1.6.8 DoS Vulnerability

Memcached is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:memcached:memcached"...

CVE-2022-48571

memcached 1.6.7 allows a Denial of Service via multi-packet uploads in UDP...

Design/Logic Flaw

memcached 1.6.7 allows a Denial of Service via multi-packet uploads in UDP...

PT-2023-15851 · Memcached +3 · Memcached +3

Name of the Vulnerable Software and Affected Versions: memcached version 1.6.7 Description: The issue allows for a Denial of Service via multi-packet uploads in UDP. Recommendations: For memcached version 1.6.7, consider disabling UDP support as a temporary workaround until a patch is available...

CVE-2022-48571: Uncontrolled Resource Consumption

memcached 1.6.7 allows a Denial of Service via multi-packet uploads in UDP...

CVE-2022-48571

memcached 1.6.7 allows a Denial of Service via multi-packet uploads in UDP...

qemu: pcnet: multi-tmd buffer overflow in the tx path

A flaw was found in the way QEMU's AMD PCnet Ethernet emulation handled multi-TMD packets with a length above 4096 bytes. A privileged guest user in a guest with an AMD PCNet ethernet card enabled could potentially use this flaw to execute arbitrary code on the host with the privileges of the...

qemu: pcnet: multi-tmd buffer overflow in the tx path

A flaw was found in the way QEMU's AMD PCnet Ethernet emulation handled multi-TMD packets with a length above 4096 bytes. A privileged guest user in a guest with an AMD PCNet ethernet card enabled could potentially use this flaw to execute arbitrary code on the host with the privileges of the...

CVE-2010-3618

PGP Desktop 10.0.x before 10.0.3 SP2 and 10.1.0 before 10.1.0 SP1 does not properly implement the "Decrypt/Verify File via Right-Click" functionality for multi-packet OpenPGP messages that represent multi-message input, which allows remote attackers to spoof signed data by concatenating an...

Design/Logic Flaw

PGP Desktop 10.0.x before 10.0.3 SP2 and 10.1.0 before 10.1.0 SP1 does not properly implement the "Decrypt/Verify File via Right-Click" functionality for multi-packet OpenPGP messages that represent multi-message input, which allows remote attackers to spoof signed data by concatenating an...

CVE-2010-3618: Undefined Security Weakness

PGP Desktop 10.0.x before 10.0.3 SP2 and 10.1.0 before 10.1.0 SP1 does not properly implement the "Decrypt/Verify File via Right-Click" functionality for multi-packet OpenPGP messages that represent multi-message input, which allows remote attackers to spoof signed data by concatenating an...