Improper Enforcement of Message Integrity During Transmission in a Communication Channel

Overview Affected versions of this package are vulnerable to Improper Enforcement of Message Integrity During Transmission in a Communication Channel via the negotiation process between GSSAPI and TLS encryption. An attacker can bypass intended authentication and encryption requirements by...

CVE-2024-25616

Aruba has identified certain configurations of ArubaOS that can lead to partial disclosure of sensitive information in the IKEAUTH negotiation process. The scenarios in which disclosure of potentially sensitive information can occur are complex, and depend on factors beyond the control of attacke...

The vulnerability of the SMB subsystem in Linux operating systems allows a hacker to remotely cause a service failure.

The vulnerability of the SMB subsystem fs/ksmbd/smb2pdu.c in the Linux operating system is related to the lack of memory release after usage. Exploiting this vulnerability can allow a remote attacker to cause service failures during the processing of SMB2NEGOTIATE...