25553 matches found
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the vmxnet3xdpxmitframe function calculating the wrong DMA address, which could lead to packet corruption...
CVE-2025-46419
Westermo WeOS 5 through 5.23.0 allows a reboot via a malformed ESP packet...
CVE-2025-43970
An issue was discovered in GoBGP before 3.35.0. pkg/packet/mrt/mrt.go does not properly check the input length, e.g., by ensuring that there are 12 bytes or 36 bytes depending on the address family...
PT-2025-22180
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference can occur in skb dequeue when processing a QCA firmware crash dump on WCN7851 0489:e0f3. The issue stems from handle dump pkt qca returning 0 even when a dump...
The vulnerability of the SetQuantumFormat() function in the ImageMagick console-based graphics editor allows a hacker to cause a service failure.
The vulnerability of the SetQuantumFormat function in the ImageMagick console-based graphics editor is related to incorrect calculation of buffer size during processing of received packets. Exploiting this vulnerability can allow an attacker to cause a service failure...
Erlang/OTP (Erlang OTP) DoS Vulnerability (Feb 2025) - Windows
Erlang/OTP Erlang OTP is prone to a denial of service DoS vulnerability in the SSH component. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only C...
Erlang/OTP (Erlang OTP) DoS Vulnerability (Feb 2025) - Linux
Erlang/OTP Erlang OTP is prone to a denial of service DoS vulnerability in the SSH component. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only C...
SUSE CVE-2025-22117
In the Linux kernel, the following vulnerability has been resolved: ice: fix using untrusted value of pktlen in icevcfdirparseraw Fix using the untrusted value of proto-raw.pktlen in function icevcfdirparseraw by verifying if it does not exceed the VIRTCHNLMAXSIZERAWPACKET value...
SUSE CVE-2025-43971
An issue was discovered in GoBGP before 3.35.0. pkg/packet/bgp/bgp.go allows attackers to cause a panic via a zero value for softwareVersionLen...
SUSE CVE-2025-46393
In multispectral MIFF image processing in ImageMagick before 7.1.1-44, packetsize is mishandled related to the rendering of all channels in an arbitrary order...
CVE-2025-46419
Westermo WeOS 5 through 5.23.0 allows a reboot via a malformed ESP packet...
CVE-2025-46419
Westermo WeOS 5 through 5.23.0 allows a reboot via a malformed ESP packet...
CVE-2025-46419
Westermo WeOS 5.x (versions 5 through 5.23.0) is affected. When IPSec is configured, processing of a malformed ESP packet can trigger an immediate device reboot, constituting a denial-of-service condition. The vulnerability’s CVSSv3.1 base metrics indicate NETWORK access, high attack complexity, ...
CVE-2025-46419
Westermo WeOS 5 through 5.23.0 allows a reboot via a malformed ESP packet...
PT-2025-20351
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved. The issue is related to the RISC-V port of the kernel, where a missing fence.i after building the XOL buffer can result in incorrec...
PT-2025-17681 · Westermo · Weos
Name of the Vulnerable Software and Affected Versions: Westermo WeOS versions 5 through 5.23.0 Description: The issue allows for a reboot via a malformed ESP packet. Recommendations: For Westermo WeOS versions 5 through 5.23.0, update to a version later than 5.23.0 to resolve the issue...
CVE-2024-47829 pnpm uses the md5 path shortening function causes packet paths to coincide, which causes indirect packet overwriting
pnpm is a package manager. Prior to version 10.0.0, the path shortening function uses the md5 function as a path shortening compression function, and if a collision occurs, it will result in the same storage path for two different libraries. Although the real names are under the package name...
CVE-2024-47829
CVE-2024-47829 affects pnpm versions prior to 10.0.0, where the path shortening function uses MD5 and can cause two different libraries to map to the same storage path under node_modules. The issue is fixed in 10.0.0. Fedora advisories recommend upgrading pnpm to 10.9.0 to address this CVE; other...
CVE-2024-47829 pnpm uses the md5 path shortening function causes packet paths to coincide, which causes indirect packet overwriting
pnpm is a package manager. Prior to version 10.0.0, the path shortening function uses the md5 function as a path shortening compression function, and if a collision occurs, it will result in the same storage path for two different libraries. Although the real names are under the package name...
