PT-2022-17652

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions prior to 16.1.2.2 F5 BIG-IP versions prior to 15.1.5.1 F5 BIG-IP versions prior to 14.1.4.6 F5 BIG-IP versions prior to 13.1.5 F5 BIG-IP versions 12.1.x F5 BIG-IP versions 11.6.x Description A flaw in the Traffic Management...

CVE-2022-26071: Use of Insufficiently Random Values

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all versions of 12.1.x and 11.6.x, a flaw in the way reply ICMP packets are limited in the Traffic Management Microkernel TMM allows an attack...

Huawei EulerOS: Security Advisory for qemu (EulerOS-SA-2022-1598)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2022-26071

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all versions of 12.1.x and 11.6.x, a flaw in the way reply ICMP packets are limited in the Traffic Management Microkernel TMM allows an attack...

New Sophisticated Malware

Mandiant is reporting on a new botnet. The group, which security firm Mandiant is calling UNC3524, has spent the past 18 months burrowing into victims networks with unusual stealth. In cases where the group is ejected, it wastes no time reinfecting the victim environment and picking up where thin...

CVE-2022-29085

Dell Unity, Dell UnityVSA, and Dell Unity XT versions prior to 5.2.0.0.5.173 contain a plain-text password storage vulnerability when certain off-array tools are run on the system. The credentials of a user with high privileges are stored in plain text. A local malicious user with high privileges...

Cyberattacks Rise Targeting Infrastructure and Geo Tensions

Trellix Threat Labs Research Report: Cyberattacks Targeting Critical Infrastructure Rise Along with Geopolitical Tensions By Trellix · April 27, 2022 The release of our Trellix Threat Labs Research Report: April 2022 examines cybercriminal behavior and activity related to cyber threats in the...

Cyberattacks Rise Targeting Infrastructure and Geo Tensions

Trellix Threat Labs Research Report: Cyberattacks Targeting Critical Infrastructure Rise Along with Geopolitical Tensions By Trellix · April 27, 2022 The release of our Trellix Threat Labs Research Report: April 2022 examines cybercriminal behavior and activity related to cyber threats in the...

IBM QRadar SIEM 授权问题漏洞

IBM QRadar SIEM is an IBM USA solution that utilizes security intelligence to protect assets and information from advanced threats. The solution provides oversight of the entire scope of the IT architecture, generates detailed reports on data access and user activity, and more. An authorization...

GSD-2022-1002190 drm/amdgpu: fix off by one in amdgpu_gfx_kiq_acquire()

drm/amdgpu: fix off by one in amdgpugfxkiqacquire This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.189 by commit...

GSD-2022-1001777 drm/dp: Fix off-by-one in register cache size

drm/dp: Fix off-by-one in register cache size This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.33 by commit...

GSD-2022-1001702 drm/amdgpu: fix off by one in amdgpu_gfx_kiq_acquire()

drm/amdgpu: fix off by one in amdgpugfxkiqacquire This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.34 by commit...

GSD-2022-1001375 drm/amdgpu: fix off by one in amdgpu_gfx_kiq_acquire()

drm/amdgpu: fix off by one in amdgpugfxkiqacquire This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.20 by commit...

GSD-2022-1001135 drm/dp: Fix off-by-one in register cache size

drm/dp: Fix off-by-one in register cache size This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.2 by commit...

GSD-2022-1001027 drm/amdgpu: fix off by one in amdgpu_gfx_kiq_acquire()

drm/amdgpu: fix off by one in amdgpugfxkiqacquire This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.3 by commit...

PT-2022-29408

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.12 through v5.17.1 Description The issue is related to an off-by-one error in the register cache size. It was introduced in version v5.12 and fixed in version v5.17.2. The actual impact and attack plausibility have not...

PT-2022-29300

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.3 Description The issue is related to an off-by-one error in the amdgpu gfx kiq acquire function. The actual impact and attack plausibility have not yet been proven. It was introduced in version v4.13 and...

PT-2022-29648

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.20 Description The issue is related to an off-by-one error in the amdgpu gfx kiq acquire function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versio...

PT-2022-30050

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.12 through v5.15.32 Description The issue is related to an off-by-one error in the register cache size. It was introduced in version v5.12 and fixed in version v5.15.33. The actual impact and attack plausibility have n...

PT-2022-30260

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.111 Description The issue is related to an off-by-one error in the amdgpu gfx kiq acquire function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...