PT-2021-25217

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.125 Description The issue concerns the netfilter component, specifically the nft ct module, which skips expectations for confirmed conntrack. The actual impact and attack plausibility have not yet been prove...

PT-2021-25238

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.43 Description The issue concerns the netfilter component, specifically the nft ct module, where it skips expectations for confirmed conntrack. The actual impact and attack plausibility have not yet been...

PT-2021-29232

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.43 Description The issue concerns the netfilter component, specifically the nft ct module, where it skips expectations for confirmed conntrack. The actual impact and attack plausibility have not yet been...

PT-2021-29211

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.125 Description The issue concerns the netfilter component, specifically the nft ct module, which skips expectations for confirmed conntrack. The actual impact and attack plausibility have not yet been prove...

A week in security (June 14 – June 20)

Last week on Malwarebytes Labs: How to delete your Instagram account. Working from home? You’re probably being spied on. Another one bites the dust: Avaddon ransomware group shuts down operation. Patch now! Apple fixes in-the-wild iPhone vulnerabilities. Windows 10 to retire in four years or 52...

Missing checkOnERC721Received deviates from ERC721 and could lock/lose NFTs

Handle 0xRajeev Vulnerability details Impact ERC721 specification for safeTransferFrom says: “this function checks if to is a smart contract code size 0. If so, it calls onERC721Received on to and throws if the return value is not bytes4keccak256“onERC721Receivedaddress,address,uint256,bytes”.”...

NFT Hub implementation deviates from ERC721 for transfer functions

Handle 0xRajeev Vulnerability details Impact ERC721 standard and implementation allows the use of approved addresses to affect transfers besides the token owners. However, the L2 NFT Hub implementation deviates from ERC721 by ignoring the presence of any approvers in the overriding function...

PT-2021-29075

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.42 Description The issue concerns the netfilter component, specifically the nft set pipapo avx2 function, where an irq fpu usable check was added to prevent potential security vulnerabilities. The actual...

PT-2021-29030

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.12.9 Description The issue is related to the netfilter component, specifically the nft set pipapo avx2 function, where an irq fpu usable check was added to prevent potential security vulnerabilities. The actua...

PT-2021-25036

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.12.9 Description The issue concerns the netfilter component, specifically the nft set pipapo avx2 function, where an irq fpu usable check was added to prevent potential security vulnerabilities. The actual...

PT-2021-25081

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.42 Description The issue is related to the netfilter component, specifically the nft set pipapo avx2 function, which lacks an irq fpu usable check. This could potentially lead to security vulnerabilities,...

PT-2021-24678

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.12.5 Description The issue is related to potential overflows in the nft hash buckets function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prio...

PT-2021-24918

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.191 Description: The issue is related to potential overflows in the nft hash buckets function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

PT-2021-28932

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.233 Description The issue is related to potential overflows in the nft hash buckets function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2021-24882

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.120 Description: The issue is related to potential overflows in the nft hash buckets function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

PT-2021-28789

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.38 Description The issue is related to potential overflows in the nft hash buckets function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions pri...

PT-2021-24795

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.38 Description The issue is related to potential overflows in the nft hash buckets function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions pri...

PT-2021-24508

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.32 Description: The issue is related to a potential divide error in the nft limit init function of the netfilter module. The actual impact and attack plausibility have not yet been proven. It was introduce...

PT-2021-28672

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.12.5 Description The issue is related to potential overflows in the nft hash buckets function within the nftables component of the netfilter framework. The actual impact and attack plausibility have not yet be...

PT-2021-28912

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.191 Description The issue is related to avoiding overflows in the nft hash buckets function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions pri...