CVE-2022-21449

CVE-2022-21449 用于检测针对 TLS 客户端的 CVE-2022-21449 利用尝试的 Zeek 脚本。仅适用于 TLS 1.2 及以下版本。 安装 zkg install https://github.com/thack1/CVE-2022-21449 运行 对提供的 pcap 文件运行： $ zeek -Cr pcaps/CVE-2022-21449.pcap CVE-2022-21449 示例通知 separator \x09 setseparator , emptyfield empty unsetfield - path notice open...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993108)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993108 advisory. In the Linux kernel, the following vulnerability has been resolved: cifs: avoid NULL pointer dereference in dbg call cifsserverdbg implies server to be non-NULL so...

kernel: afs: Fix the setting of the server responding flag

A flaw was found in the Linux kernel's AFS Andrew File System module. This vulnerability occurs in the afswaitforoperation function, where the op-server pointer is not properly validated for NULL before being used. A local attacker with low privileges could exploit this flaw, leading to a system...

DEBIAN-CVE-2024-49999

In the Linux kernel, the following vulnerability has been resolved: afs: Fix the setting of the server responding flag In afswaitforoperation, we set transcribe the call responded flag to the server record that we used after doing the fileserver iteration loop - but it's possible to exit the loop...

UBUNTU-CVE-2024-49999

In the Linux kernel, the following vulnerability has been resolved: afs: Fix the setting of the server responding flag In afswaitforoperation, we set transcribe the call responded flag to the server record that we used after doing the fileserver iteration loop - but it's possible to exit the loop...