CVE-2022-40522

Memory corruption in Linux Networking due to double free while handling a hyp-assign...

Information disclosure

Information disclosure in Linux Networking Firmware due to unauthorized information leak during side channel analysis...

Double free

Memory corruption in Linux Networking due to double free while handling a hyp-assign...

CVE-2022-40525 Information Exposure in Linux Networking Firmware

Information disclosure in Linux Networking Firmware due to unauthorized information leak during side channel analysis...

CVE-2022-40525

CVE-2022-40525 describes an information-disclosure issue in Linux Networking Firmware affecting Qualcomm embedded platforms, caused by unauthorized information leakage during side-channel analysis. The available connected documents indicate the vulnerability relates to insufficient protection of ...

CVE-2022-40522 Double free in Linux Networking

Memory corruption in Linux Networking due to double free while handling a hyp-assign...

CVE-2022-40522 Double free in Linux Networking

Memory corruption in Linux Networking due to double free while handling a hyp-assign...

CVE-2022-40522

CVE-2022-40522 describes a memory corruption in Linux Networking due to a double free while handling a hyp-assign. The vulnerability affects the Linux Networking subsystem and is driven by a double-free condition that can impact confidentiality, integrity, and availability (per CVSS 3.1 metrics: ...

Amazon Linux 2 : java-11-openjdk (ALASJAVA-OPENJDK11-2023-004)

The version of java-11-openjdk installed on the remote host is prior to 11.0.19.0.7-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2JAVA-OPENJDK11-2023-004 advisory. Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java S...

Ubuntu 22.04 LTS : Linux kernel (OEM) vulnerabilities (USN-6124-1)

The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6124-1 advisory. Patryk Sondej and Piotr Krysiuk discovered that a race condition existed in the netfilter subsystem of the Linux kernel when processing batch requests,...

CVE-2023-30851

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. This issue only impacts users who have a HTTP policy that applies to multiple toEndpoints AND have an allow-all rule in place that affects only one of those endpoints. In such cases, a wildcard rule will be...

CVE-2023-30851 Potential HTTP policy bypass when using header rules in Cilium

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. This issue only impacts users who have a HTTP policy that applies to multiple toEndpoints AND have an allow-all rule in place that affects only one of those endpoints. In such cases, a wildcard rule will be...

CVE-2023-30851

CVE-2023-30851 affects Cilium’s eBPF dataplane. When a HTTP policy targets multiple toEndpoints and an allow-all rule affects only one endpoint, a wildcard rule is appended to the HTTP rules, potentially bypassing the policy. This issue has been patched in Cilium releases 1.11.16, 1.12.9, and 1.1...

CVE-2023-30851 Potential HTTP policy bypass when using header rules in Cilium

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. This issue only impacts users who have a HTTP policy that applies to multiple toEndpoints AND have an allow-all rule in place that affects only one of those endpoints. In such cases, a wildcard rule will be...

CVE-2021-25748

CVE-2021-25748 concerns the ingress-nginx Ingress controller. A newline in the path field of spec.rules[].http.paths[].path can bypass sanitization for Ingress objects (Networking.k8s.io or Extensions API), potentially granting the controller credential with access to all cluster secrets. The con...

Ubuntu: Security Advisory (USN-6042-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-6042-2: Cloud-init regression

USN-6042-1 fixed a vulnerability in Cloud-init. The update introduced a regression on Ubuntu 20.04 LTS resulting in a possible loss of networking. This update fixes the problem. We apologize for the inconvenience. Original advisory details: James Golovich discovered that sensitive data could be...

USN-6042-2 cloud-init regression

USN-6042-1 fixed a vulnerability in Cloud-init. The update introduced a regression on Ubuntu 20.04 LTS resulting in a possible loss of networking. This update fixes the problem. We apologize for the inconvenience. Original advisory details: James Golovich discovered that sensitive data could be...

nmstate bug fix and enhancement update

An update is available for nmstate. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Nmstate is a library with an accompanying command line tool that manages host...

Escalating China-Taiwan Tensions Fuel Alarming Surge in Cyber Attacks

The rising geopolitical tensions between China and Taiwan in recent months have sparked a noticeable uptick in cyber attacks on the East Asian island country. "From malicious emails and URLs to malware, the strain between China's claim of Taiwan as part of its territory and Taiwan's maintained...