GSD-2022-1000582 RDMA/ucma: Protect mc during concurrent multicast leaves

RDMA/ucma: Protect mc during concurrent multicast leaves This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.22 by commit...

GSD-2022-1000581 RDMA/cma: Use correct address when leaving multicast group

RDMA/cma: Use correct address when leaving multicast group This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.22 by commit...

PT-2022-28941

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.10 through v5.16.7 Description The issue concerns the RDMA/ucma component, specifically the protection of multicast groups during concurrent leaves. The actual impact and attack plausibility have not yet been proven...

PT-2022-28856

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.22 Description The issue concerns the RDMA/ucma component, specifically the protection of multicast groups during concurrent leaves. The actual impact and attack plausibility have not yet been proven...

PT-2022-28855

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.10 through v5.15.21 Description The issue is related to RDMA/cma, where the correct address is not used when leaving a multicast group. The actual impact and attack plausibility have not yet been proven. Recommendation...

PT-2022-28736

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.13 through v5.15.24 Description The issue concerns the use of an unsafe version of ipv6 get lladdr in the IPv6 multicast functionality. This problem was introduced in version v5.13 and is fixed in version v5.15.25. The...

PT-2022-28940

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.10 through v5.16.7 Description The issue is related to RDMA/cma, where the correct address is not used when leaving a multicast group. The actual impact and attack plausibility have not yet been proven. Recommendations...

GSD-2022-1000224 RDMA/cma: Use correct address when leaving multicast group

RDMA/cma: Use correct address when leaving multicast group This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.99 by commit...

PT-2022-28503

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.99 Description The issue concerns the RDMA/ucma component, specifically the protection of multicast groups during concurrent leaves. The actual impact and attack plausibility have not yet been proven...

PT-2022-28502

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.99 Description The issue is related to RDMA/cma, where the correct address is not used when leaving a multicast group. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2022-7427

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.15.19-cloudflare-2022.2.1 Description The vulnerability is related to the mld newpack function in the net/ipv6/mcast.c module of the Linux kernel's IPv6 implementation. It is caused by incorrect synchronization...

PT-2022-9214 · Sealevel Systems · Seaconnect 370W

Name of the Vulnerable Software and Affected Versions: Sealevel Systems, Inc. SeaConnect 370W version 1.3.34 Description: A stack-based buffer overflow issue exists in the LLMNR functionality, allowing remote code execution through a specially-crafted network packet. An attacker can exploit this ...

PT-2022-7674

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a use-after-free vulnerability in the ucma cleanup multicast function in the InfiniBand driver. This vulnerability can be exploited due to a race condition when t...

PT-2022-1903 · Hewlett Packard +1 · Hp Digital Sending +2

Name of the Vulnerable Software and Affected Versions: SourceCodester Sanitization Management System affected versions not specified HP Print and HP Digital Sending products affected versions not specified Description: A vulnerability was found in the SourceCodester Sanitization Management System...

PT-2022-10381 · Openbsd · Openbsd Kernel

Name of the Vulnerable Software and Affected Versions: OpenBSD Kernel affected versions not specified Description: This issue allows local attackers to disclose sensitive information on affected installations of OpenBSD Kernel. An attacker must first obtain the ability to execute low-privileged...

OpenBSD 安全漏洞

OpenBSD is a cross-platform, BSD-based, UNIX-like operating system from the Canadian OpenBSD project group. OpenBSD suffers from a security vulnerability that stems from the implementation of multicast routing that does not properly initialize memory before accessing it . The vulnerability allows...

OpenBSD Kernel Multicast Routing Uninitialized Memory Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of OpenBSD Kernel. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

PT-2022-10382 · Openbsd · Openbsd Kernel

Name of the Vulnerable Software and Affected Versions: OpenBSD Kernel affected versions not specified Description: This issue allows local attackers to disclose sensitive information on affected installations. An attacker must first obtain the ability to execute low-privileged code on the target...

OpenBSD 信息泄露漏洞

OpenBSD is a cross-platform, BSD-based UNIX-like operating system from the Canadian OpenBSD project team. OpenBSD suffers from an information disclosure vulnerability that stems from an error in the implementation of multicast routing in the OpenBSD kernel. A local user can run a specially crafte...

OpenBSD Kernel Multicast Routing Uninitialized Memory Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of OpenBSD Kernel. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...