USN-5640-1: Linux kernel (Oracle) vulnerabilities

It was discovered that the framebuffer driver on the Linux kernel did not verify size limits when changing font or screen size, leading to an out-of- bounds write. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2021-33655 Duoming...

USN-5635-1: Linux kernel (GKE) vulnerabilities

It was discovered that the framebuffer driver on the Linux kernel did not verify size limits when changing font or screen size, leading to an out-of- bounds write. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2021-33655 Duoming...

USN-5624-1: Linux kernel vulnerabilities

It was discovered that the framebuffer driver on the Linux kernel did not verify size limits when changing font or screen size, leading to an out-of- bounds write. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2021-33655 Duoming...

CVE-2022-37959

Network Device Enrollment Service NDES Security Feature Bypass Vulnerability...

CVE-2022-37959

Network Device Enrollment Service NDES Security Feature Bypass Vulnerability...

CVE-2022-37959

Network Device Enrollment Service NDES Security Feature Bypass Vulnerability...

Security feature bypass

Network Device Enrollment Service NDES Security Feature Bypass Vulnerability...

EUVD-2022-40566

Network Device Enrollment Service NDES Security Feature Bypass Vulnerability...

CVE-2022-37959 Network Device Enrollment Service (NDES) Security Feature Bypass Vulnerability

...

CVE-2022-37959

Technical details about CVE-2022-37959 (affected software, vulnerable component, impact, exploitation, or remediations) are not provided in the supplied documents. Monitor for vendor advisories and updated analyses.

CVE-2022-37959 Network Device Enrollment Service (NDES) Security Feature Bypass Vulnerability

...

Network Device Enrollment Service (NDES) Security Feature Bypass Vulnerability

...

Microsoft Network Device Enrollment Service (NDES) 安全漏洞

Microsoft Network Device Enrollment Service NDES is a Microsoft company that allows software on routers and other network devices running without domain credentials to obtain Simple Certificate Enrollment Protocol SCEP-based certificates. A security vulnerability exists in the Microsoft Network...

KLA19245 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, cause denial of service, obtain sensitive information, bypass security restrictions. Below is a complete list of vulnerabilities: 1. A remote cod...

PT-2022-5780 · Microsoft · Network Device Enrollment Service +1

Name of the Vulnerable Software and Affected Versions: Network Device Enrollment Service NDES affected versions not specified Description: The issue is related to errors in security settings, allowing a remote attacker to bypass existing security restrictions and disclose protected information. I...

CVE-2022-37069

H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function UpdateSnat...

CVE-2022-36513

H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function edditactionlist...

The vulnerability of the command-line interface (CLI) of Zyxel network device software allows a hacker to trigger a service failure.

The vulnerability of the command-line interface CLI of Zyxel network device software implementations is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to cause service failures...

GSD-2022-1004788 net: usb: ax88179_178a needs FLAG_SEND_ZLP

net: usb: ax88179178a needs FLAGSENDZLP This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.254 by commit...

AZL-10137 CVE-2021-4135 affecting package kernel for versions less than 5.15.67.1-4

A memory leak vulnerability was found in the Linux kernel's eBPF for the Simulated networking device driver in the way user uses BPF for the device such that function nsimmapallocelem being called. A local user could use this flaw to get unauthorized access to some data...