KLA12600 Multiple vulnerabilities in Google Chrome

Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to cause denial of service, bypass security restrictions, execute arbitrary code, obtain sensitive information, spoof user interface. Below is a complete list of vulnerabilities: 1. Out of boun...

CISA and ACSC Release Top 2021 Malware Strains

CISA and the Australian Cyber Security Centre ACSC have published a joint Cybersecurity Advisory on the top malware strains observed in 2021. Malicious cyber actors often use malware to covertly compromise and then gain access to a computer or mobile device. As malicious cyber actors have been...

GSD-2022-1004650 block: Fix handling of offline queues in blk_mq_alloc_request_hctx()

block: Fix handling of offline queues in blkmqallocrequesthctx This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.124 by commit...

GSD-2022-1004500 block: Fix handling of offline queues in blk_mq_alloc_request_hctx()

block: Fix handling of offline queues in blkmqallocrequesthctx This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.49 by commit...

GSD-2022-1004304 block: Fix handling of offline queues in blk_mq_alloc_request_hctx()

block: Fix handling of offline queues in blkmqallocrequesthctx This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.6 by commit...

PT-2022-32566

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.6 Description The issue concerns the handling of offline queues in the blk mq alloc request hctx function. It was introduced in version v4.16 and fixed in version v5.18.6. The actual impact and attack...

PT-2022-32912

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.124 Description The issue concerns the handling of offline queues in the blk mq alloc request hctx function. It was introduced in version v4.16 and fixed in version v5.10.124. The actual impact and attack...

PT-2022-32762

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.49 Description The issue concerns the handling of offline queues in the blk mq alloc request hctx function. It was introduced in version v4.16 and fixed in version v5.15.49. The actual impact and attack...

Vulnerabilities fixed in Oracle Communications Applications

Oracle has fixed vulnerabilities in the following products: Communications ASAP Communications Billing and Revenue Management Communications BRM - Elastic Charging Engine Communications Design Studio Communications Instant Messaging Server Communications Offline Mediation Controller Communication...

Veeam Recovery Orchestrator May Timeout During Execution of a Replica Plan if the Source vCenter Is Offline

Article Applicability The hotfix patch on this article is only intended for use with Veeam Recovery Orchestrator 5.0.0.2768. Challenge When executing a Replica plan, Veeam Recovery Orchestrator may hang as it processes each VM in the plan. This hang will occur if two vCenters are used one...

PT-2022-37078

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow read, which was identified through an OSS-Fuzz report. The crash state indicates the involvement of function...

[SECURITY] Fedora 36 Update: golang-github-theupdateframework-notary-0.7.0-6.fc36

The Notary project comprises a server and a client for running and interacting with trusted collections. See the service architecture documentation for more information. Notary aims to make the internet more secure by making it easy for people to publish and verify content. We often rely on TLS t...

CVE-2021-41995

A misconfiguration of RSA in PingID Mac Login prior to 1.1 is vulnerable to pre-computed dictionary attacks, leading to an offline MFA bypass...

CVE-2022-23717

PingID Windows Login prior to 2.8 is vulnerable to a denial of service condition on local machines when combined with using offline security keys as part of authentication...

CVE-2022-23719

PingID Windows Login prior to 2.8 does not authenticate communication with a local Java service used to capture security key requests. An attacker with the ability to execute code on the target machine maybe able to exploit and spoof the local Java service using multiple attack vectors. A...

CVE-2021-41995

A misconfiguration of RSA in PingID Mac Login prior to 1.1 is vulnerable to pre-computed dictionary attacks, leading to an offline MFA bypass...

CVE-2022-23717

PingID Windows Login prior to 2.8 is vulnerable to a denial of service condition on local machines when combined with using offline security keys as part of authentication...

CVE-2022-23719

PingID Windows Login prior to 2.8 does not authenticate communication with a local Java service used to capture security key requests. An attacker with the ability to execute code on the target machine maybe able to exploit and spoof the local Java service using multiple attack vectors. A...

CVE-2022-23717

PingID Windows Login prior to 2.8 is vulnerable to a denial of service condition on local machines when combined with using offline security keys as part of authentication...

Design/Logic Flaw

PingID Windows Login prior to 2.8 is vulnerable to a denial of service condition on local machines when combined with using offline security keys as part of authentication...