kernel: Linux kernel iavf driver: Denial of Service via use-after-free vulnerability

A flaw was found in the Linux kernel's iavf driver. A local user with administrative capabilities can exploit a use-after-free vulnerability, caused by a mismatch in network interface NAPI list management functions. This can lead to dangling NAPI entries, resulting in a kernel crash and a Denial ...

Network Plugin Interface CNI Data Compromise

The vulnerability of the network plugin interface for connecting to Container Network Interface CNI devices is related to an incorrect path name limitation when loading plugins from the type field. Exploiting this vulnerability allows a remote attacker to compromise the integrity, availability, a...

ICMPWatch - ICMP Packet Sniffer

ICMP Packet Sniffer is a Python program that allows you to capture and analyze ICMP Internet Control Message Protocol packets on a network interface. It provides detailed information about the captured packets, including source and destination IP addresses, MAC addresses, ICMP type, payload data,...

CVE-2023-4346

KNX devices that use KNX Connection Authorization and support Option 1 are, depending on the implementation, vulnerable to being locked and users being unable to reset them to gain access to the device. The BCU key feature on the devices can be used to create a password for the device, but this...

CVE-2023-4346

KNX devices that use KNX Connection Authorization and support Option 1 are, depending on the implementation, vulnerable to being locked and users being unable to reset them to gain access to the device. The BCU key feature on the devices can be used to create a password for the device, but this...

CVE-2023-4346

CVE-2023-4346 affects KNX devices that use KNX Protocol Connection Authorization with Option 1. The vulnerability is an overly restrictive account lockout mechanism that can allow an attacker to purge all devices without extra security options and set a BCU key to lock the device, potentially den...

High Availability Setup on Amazon Web Service

This article describes the design perspective of High Availability HAon Amazon Web Service AWS environment. Background AWS does not support Gratuitous Address Resolution Protocol GARP, Virtual Local Area Network VLAN or any Layer-2 L2 functionalities like bridging. Two virtual machines belonging ...

PT-2023-35955 · Git +1 · Ntopng

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow read issue is identified, potentially causing a crash. The crash occurs in the IEC104Stats::processPacket function, which is calle...

Juniper Junos OS Multiple Vulnerabilities (JSA69720)

The version of Junos OS installed on the remote host is affected by multiple vulnerabilities as referenced in the JSA69720 advisory. - Multiple ethernet Network Interface Card NIC device drivers do not pad frames with null bytes, which allows remote attackers to obtain information from previous...

Virtuozzo Hybrid Infrastructure 5.4 Update 3 (5.4.3-100)

In this release, Virtuozzo Hybrid Infrastructure provides a range of new features that cover core storage, the system configuration, updates, documentation, and the compute services. Additionally, this release delivers stability improvements and addresses issues found in previous releases...

HP-UX 安全漏洞

HP-UX is an operating system from Hewlett-Packard. A security vulnerability exists in HP-UX that stems from a potential system denial of service when any physical interface is configured with IPv6/inet6...

PT-2023-35870 · Git +1 · Ntopng

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow read issue was identified, potentially causing a crash. The crash occurs in the NetworkInterface::dissectPacket function, as...

Cisco ASA FTD TLS SSL DoS

The vulnerability of the implementations of TLS and SSL protocols in microprogrammable network interface devices from Cisco Adaptive Security Appliance ASA and Cisco Firepower Threat Defense FTD series 2100 is related to insufficient validation of input data. Exploiting this vulnerability can all...

ntopng:fuzz_dissect_packet: Heap-buffer-overflow in NetworkInterface::dissectPacket

Project: https://github.com/ntop/ntopng.git Detailed Report: https://oss-fuzz.com/testcase?key=4520845977190400 Project: ntopng Fuzzing Engine: afl Fuzz Target: fuzzdissectpacket Job Type: aflasanntopng Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x61d000003100 Crash...

Moderate: Red Hat Security Advisory: containernetworking-plugins security and bug fix update

An update for containernetworking-plugins is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

CVE-2023-29092

An issue was discovered in Exynos Mobile Processor and Modem for Exynos Modem 5123, Exynos Modem 5300, Exynos 980, and Exynos 1080. Binding of a wrong resource can occur due to improper handling of parameters while binding a network interface...

Input validation

An issue was discovered in Exynos Mobile Processor and Modem for Exynos Modem 5123, Exynos Modem 5300, Exynos 980, and Exynos 1080. Binding of a wrong resource can occur due to improper handling of parameters while binding a network interface...

CVE-2023-29092

An issue was discovered in Exynos Mobile Processor and Modem for Exynos Modem 5123, Exynos Modem 5300, Exynos 980, and Exynos 1080. Binding of a wrong resource can occur due to improper handling of parameters while binding a network interface...

CVE-2023-29092

An issue was discovered in Exynos Mobile Processor and Modem for Exynos Modem 5123, Exynos Modem 5300, Exynos 980, and Exynos 1080. Binding of a wrong resource can occur due to improper handling of parameters while binding a network interface...

PT-2023-22140 · Samsung · Exynos Modem 5123 +3

Name of the Vulnerable Software and Affected Versions: Exynos Mobile Processor and Modem versions for Exynos Modem 5123, Exynos Modem 5300, Exynos 980, and Exynos 1080 Description: An issue was discovered due to improper handling of parameters while binding a network interface, which can cause...