CVE-2023-24943 Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability

...

CVE-2023-24940 Windows Pragmatic General Multicast (PGM) Denial of Service Vulnerability

...

kernel: igmp: Fix data-races around sysctl_igmp_llm_reports.

In the Linux kernel, the following vulnerability has been resolved: igmp: Fix data-races around sysctligmpllmreports. While reading sysctligmpllmreports, it can be changed concurrently. Thus, we need to add READONCE to its readers. This test can be packed into a helper, so such changes will be in...

Windows Pragmatic General Multicast (PGM) Denial of Service Vulnerability

...

Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability

...

PT-2023-2698 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to the implementation of the Pragmatic General Multicast PGM protocol in Windows operating systems, specifically due to insufficient input validation. This can be...

Vulnerabilities fixed in Microsoft Windows

Microsoft has fixed vulnerabilities in Windows. A malicious party can exploit the vulnerabilities to launch attacks execute attacks that can lead to the following categories of damage: Circumvention of security measure. Remote code execution Administrator/Root rights Remote code execution User...

PT-2025-8523 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A data-race issue exists around the sysctl igmp llm reports variable in the Linux kernel. This occurs because the variable can be changed concurrently while being read, potentially...

PT-2023-2677 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to the implementation of the Pragmatic General Multicast PGM protocol in Windows operating systems, specifically due to insufficient input validation. This can be...

The vulnerability of the Pragmatic General Multicast protocol implementation in Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Pragmatic General Multicast protocol implementation in Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2022-25740

Memory corruption in modem due to buffer overwrite while building an IPv6 multicast address based on the MAC address of the iface...

Memory corruption

Memory corruption in modem due to buffer overwrite while building an IPv6 multicast address based on the MAC address of the iface...

CVE-2023-28250

Windows Pragmatic General Multicast PGM Remote Code Execution Vulnerability...

CVE-2023-28250 Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability

...

PT-2023-2300 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient input validation in the implementation of the Pragmatic General Multicast PGM protocol in Windows. This can be exploited by a remote attacker to execute...

KB5025230: Windows Server 2022 / Azure Stack HCI 22H2 Security Update (April 2023)

The remote Windows host is missing security update 5025230. It is, therefore, affected by multiple vulnerabilities - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability CVE-2023-28275 - Windows Pragmatic General Multicast PGM Remote Code Execution Vulnerability...

KB5025277: Windows Server 2008 R2 Security Update (April 2023)

The remote Windows host is missing security update 5025277. It is, therefore, affected by multiple vulnerabilities - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability CVE-2023-28275 - Windows Pragmatic General Multicast PGM Remote Code Execution Vulnerability...

Siemens SCALANCE W1700 Improper Input Validation (CVE-2022-28328)

A vulnerability has been identified in SCALANCE W1788-1 M12 All versions V3.0.0, SCALANCE W1788-2 EEC M12 All versions V3.0.0, SCALANCE W1788-2 M12 All versions V3.0.0, SCALANCE W1788-2IA M12 All versions V3.0.0. Affected devices do not properly handle malformed Multicast LLC frames. This could...

KB5025229: Windows 10 version 1809 / Windows Server 2019 Security Update (April 2023)

The remote Windows host is missing security update 5025229. It is, therefore, affected by multiple vulnerabilities - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability CVE-2023-28275 - Windows Pragmatic General Multicast PGM Remote Code Execution Vulnerability...

CVE-2022-25740

CVE-2022-25740 affects Qualcomm modem firmware/chipsets. The issue is described as memory corruption caused by a buffer overwrite when building an IPv6 multicast address from the interface MAC. CVSS 3.1 base score 9.8 (Network, Low attack complexity, No privileges, No user interaction; impact to ...