25648 matches found
Eclipse Mosquitto 安全漏洞
Eclipse Mosquitto is an open source messaging agent software suite from the Eclipse Foundation. A security vulnerability exists in Eclipse Mosquitto versions 1.3.2 through 2.0.18, which originates from an out-of-bounds memory access that may occur if a malicious agent sends a specially crafted...
PT-2024-34592 · Draytek · Draytek Vigor3900
Name of the Vulnerable Software and Affected Versions: Draytek Vigor3900 version 1.5.1.3 Description: The issue allows attackers to inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the packet monitor function. Recommendations: For Draytek Vigor3900 version...
The vulnerability of the BPF_CALL_1() function in the Linux operating system’s kernel component allows a hacker to trigger a service failure.
The vulnerability of the BPFCALL1 function in the kernel/bpf/helpers.c module of the Linux BPF component is related to incorrect serialization. Exploiting this vulnerability could allow an attacker to cause a service failure...
CLSA-2024-1729870301 kernel: Fix of 12 CVEs
ftrace: Fix possible use-after-free issue in ftracelocation CVE-2024-38588 - ftrace: Fix possible warning on checking all pages used in ftraceprocesslocs CVE-2024-38588 - ftrace: Store the order of pages allocated in ftracepage CVE-2024-38588 - ftrace: Check if pages were allocated before calling...
CLSA-2024-1729869774 kernel: Fix of 12 CVEs
ftrace: Fix possible use-after-free issue in ftracelocation CVE-2024-38588 - ftrace: Fix possible warning on checking all pages used in ftraceprocesslocs CVE-2024-38588 - ftrace: Store the order of pages allocated in ftracepage CVE-2024-38588 - ftrace: Check if pages were allocated before calling...
SUSE CVE-2024-49864
In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix a race between socket set up and I/O thread creation In rxrpcopensocket, it sets up the socket and then sets up the I/O thread that will handle it. This is a problem, however, as there's a gap between the two phases in...
SUSE CVE-2024-49888
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix a sdiv overflow issue Zac Ecob reported a problem where a bpf program may cause kernel crash due to the following error: Oops: divide error: 0000 1 PREEMPT SMP KASAN PTI The failure is due to the below signed divide:...
SUSE CVE-2024-49947
In the Linux kernel, the following vulnerability has been resolved: net: test for not too small csumstart in virtionethdrtoskb syzbot was able to trigger this warning 1, after injecting a malicious packet through afpacket, setting skb-csumstart and thus the transport header to an incorrect value...
SUSE CVE-2024-49948
In the Linux kernel, the following vulnerability has been resolved: net: add more sanity checks to qdiscpktleninit One path takes care of SKBGSODODGY, assuming skb-len is bigger than hdrlen. virtionethdrtoskb does not fully dissect TCP headers, it only make sure it is at least 20 bytes. It is...
SUSE CVE-2024-49949
In the Linux kernel, the following vulnerability has been resolved: net: avoid potential underflow in qdiscpktleninit with UFO After commit 7c6d2ecbda83 "net: be more gentle about silly gso requests coming from user" virtionethdrtoskb had sanity check to detect malicious attempts from user space ...
The vulnerability of the Packet Forwarding Engine (PFE) module in Junos OS routers of the SRX series allows a hacker to cause a service failure.
The vulnerability of the Packet Forwarding Engine PFE module in Junos OS routers of the SRX series is related to mutual blocking of execution flows. Exploiting this vulnerability can allow a malicious actor to cause service failures...
SUSE CVE-2024-49997
In the Linux kernel, the following vulnerability has been resolved: net: ethernet: lantiqetop: fix memory disclosure When applying padding, the buffer is not zeroed, which results in memory disclosure. The mentioned data is observed on the wire. This patch uses skbputpadto to pad Ethernet frames...
SUSE CVE-2024-50001
In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix error path in multi-packet WQE transmit Remove the erroneous unmap in case no DMA mapping was established The multi-packet WQE transmit code attempts to obtain a DMA mapping for the skb. This could fail, e.g. under...
The vulnerability of the Packet Forwarding Engine (PFE) module of Juniper Networks’ Junos OS allows a hacker to trigger a service failure.
The vulnerability of the Packet Forwarding Engine PFE module in Juniper Networks’ Junos OS is related to the assignment of a zero pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the Packet Forwarding Engine (PFE) module of the Junos OS Evolved operating system, which allows a hacker to trigger a service failure.
The vulnerability of the Packet Forwarding Engine PFE module in the Junos OS Evolved operating system is related to insufficient handling of exceptional states. Exploiting this vulnerability can allow a malicious actor to cause service failures...
The vulnerability of the Packet Forwarding Engine (PFE) module of Juniper Networks’ Junos OS allows a hacker to trigger a service failure.
The vulnerability of the Packet Forwarding Engine PFE module in Juniper Networks’ Junos OS is related to insufficient checking of specified input types. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...
The vulnerability of the Packet Forwarding Engine (PFE) module of Juniper Networks’ Junos OS allows a hacker to trigger a service failure.
The vulnerability of the Packet Forwarding Engine PFE module in Juniper Networks’ Junos OS is related to improper memory release. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
The vulnerability of the Packet Forwarding Engine (PFE) module of Juniper Networks’ Junos OS allows a hacker to trigger a service failure.
The vulnerability of the Packet Forwarding Engine PFE module in Juniper Networks’ Junos OS is related to the assignment of a zero pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the Packet Forwarding Engine (PFE) module of the Junos OS Evolved operating system, which allows a hacker to trigger a service failure.
The vulnerability of the Packet Forwarding Engine PFE module in the Junos OS Evolved operating system is related to insufficient channel constraints for specified endpoints. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...
