Is 97% Network Traffic Offload Interesting?

Sports, gaming, and other live events have the potential to overwhelm network capacity due to the sheer volume of traffic generated when large numbers of viewers or gamers engage. These "peak" events may only occur once a month or even once a year sports championships, election results, gaming...

kernel: use-after-free read in napi_gro_frags() in the Linux kernel

A flaw was found in the Linux kernel’s implementation of GRO. This flaw allows an attacker with local access to crash the system...

Linux kernel resource management error vulnerability (CNVD-2020-50138)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A resource management error vulnerability exists in GRO in Linux kernel. A local attacker could exploit this vulnerability to cause a system crash...

PT-2022-1733

Name of the Vulnerable Software and Affected Versions Linux kernel versions 5.4 through 5.6.10 Description The issue is related to a heap out-of-bounds write in the netfilter subsystem of the Linux kernel, specifically in the nf dup netdev.c file. This can allow local users to gain privileges or...

kernel: net/sched: cbs NULL pointer dereference when offloading is enabled

A NULL pointer dereference flaw was found in the Linux kernel's network scheduler. This issue occurs when offloading is enabled, the cbs instance is not added to the list. The code also incorrectly handles the case when offload is disabled without removing the qdisc. This could allow a local user...

kernel: net/mlx5e: Check for NOT_READY flag state after locking

A race condition was found in the Linux kernel Mellanox mlx5 network driver's traffic control offload flow management. A local user with privileges to configure traffic control flower filters can trigger concurrent flow deletion operations where the NOTREADY flag is checked before acquiring the...

Cisco IOS and IOS XE Software Denial of Service Vulnerability (cisco-sa-20180328-bfd)

A denial of service DoS vulnerability exists in the Bidirectional Forwarding Detection BFD offload implementation of Cisco Catalyst 4500 Series Switches and Cisco Catalyst 4500-X Series Switches due to insufficient error handling when the BFD header in a BFD packet is incomplete. An...

Denial Of Service (DoS)

kernel is vulnerable to denial of service DoS. The vulnerability exists as a flaw was found in the way the Linux kernel handled fragmented IPv6 UDP datagrams over the bridge with UDP Fragmentation Offload UFO functionality on. A remote attacker could use this flaw to cause a denial of service...

System fails back to a host copy instead of an array copy or storages go down after LUN reset in Windows Server 2012 R2

System fails back to a host copy instead of an array copy or storages go down after LUN reset in Windows Server 2012 R2 This article describes issues in which a storage system fails back to a host copy instead of an array copy or storage systems go down after a LUN reset in Windows Server 2012 R2...

Manage Origin Offload and Egress Fees for Live and On-Demand

Origin offload has received more attention in the past few years as more customers have moved their origins to the cloud. As such, the cost to access data has become an important issue. To support this move, Akamai has developed Cloud Wrapper to provide customers with a way to securely connect to...

CVE-2019-14098

Possible buffer overflow in data offload handler due to lack of check of keydata length when copying data in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon...

Buffer overflow

Possible buffer overflow in data offload handler due to lack of check of keydata length when copying data in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon...

CVE-2019-14098

CVE-2019-14098 describes a buffer overflow in Qualcomm Snapdragon data offload handling due to an missing check of keydata length during data copying, affecting Snapdragon Auto, Compute, Connectivity, and related Snapdragon platforms (numerous SoCs). Root cause: lack of validation of keydata leng...

PT-2020-9518

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon Auto versions APQ8009 through SDX24 Qualcomm Snapdragon Compute versions APQ8009 through SDX24 Qualcomm Snapdragon Connectivity versions APQ8009 through SDX24 Qualcomm Snapdragon Consumer Electronics Connectivity versions...

CVE-2019-14098: Buffer Copy without Checking Size of Input

Possible buffer overflow in data offload handler due to lack of check of keydata length when copying data in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon...

Scale-out Backup Repository offload job to Quantum DXI used as S3 storage fails with "Failed to retrieve SSL certificate. Underlying error: PRNG not seeded" error

Challenge Veeam Backup & Replication fails to perform an S3 offload task if targeted to Quantum DXI storage. The error retrieved in UI says: "Failed to retrieve SSL certificate. Underlying error: PRNG not seeded" 06.01.2020 13:38:21 Info PublicCloudCertificateLoader Loading certificate for...

Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2019-1475)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

kernel: Exploitable memory corruption due to UFO to non-UFO path switch

An exploitable memory corruption flaw was found in the Linux kernel. The append path can be erroneously switched from UFO to non-UFO in ipufoappenddata when building an UFO packet with MSGMORE option. If unprivileged user namespaces are available, this flaw can be exploited to gain root privilege...

FreeBSD : FreeBSD -- Insufficient validation of guest-supplied data (e1000 device) (499b22a3-f680-11e9-a87f-a4badb2f4699)

The e1000 network adapters permit a variety of modifications to an Ethernet packet when it is being transmitted. These include the insertion of IP and TCP checksums, insertion of an Ethernet VLAN header, and TCP segmentation offload 'TSO'. The e1000 device model uses an on-stack buffer to generat...

CVE-2019-5609

In FreeBSD 12.0-STABLE before r350619, 12.0-RELEASE before 12.0-RELEASE-p9, 11.3-STABLE before r350619, 11.3-RELEASE before 11.3-RELEASE-p2, and 11.2-RELEASE before 11.2-RELEASE-p13, the bhyve e1000 device emulation used a guest-provided value to determine the size of the on-stack buffer without...