kernel: bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE

In the Linux kernel, the following vulnerability has been resolved: bpf: Add BPFPROGTYPECGROUPSKB attach type enforcement in BPFLINKCREATE bpfprogattach uses attachtypetoprogtype to enforce proper attach type for BPFPROGTYPECGROUPSKB. linkcreate uses bpfprogget and relies on...

kernel: bpf, sockmap: Prevent lock inversion deadlock in map delete elem

CVE-2024-35895 addresses a vulnerability in the Linux kernel's Berkeley Packet Filter BPF subsystem, specifically within the sockmap feature. The issue arises when BPF tracing programs, which can execute in various interrupt contexts, attempt to delete elements from sockmap or sockhash maps. This...

kernel: ppp: reject claimed-as-LCP but actually malformed packets

The vulnerability was found in the Linux kernel's ppp pppgeneric.c driver, in the pppread and pppwrite functions where malformed packets were erroneously identified as LCP packets, leading to potential issues with packet handling. This flaw could potentially lead to system instability...

kernel: ppp: reject claimed-as-LCP but actually malformed packets

The vulnerability was found in the Linux kernel's ppp pppgeneric.c driver, in the pppread and pppwrite functions where malformed packets were erroneously identified as LCP packets, leading to potential issues with packet handling. This flaw could potentially lead to system instability...

kernel: netfilter: bridge: replace physindev with physinif in nf_bridge_info

CVE-2024-35839 is a flaw in the Linux kernel's Netfilter bridge functionality. It occurs when bridging certain packets, such as those involving destination NAT between virtual Ethernet interfaces. A mismatch between the network device associated with a packet and the neighbor's device can lead to...

The vulnerability of the net/packet component in the Linux operating system’s kernel allows a hacker to disclose sensitive information or cause service failures.

The vulnerability of the net/packet component in the Linux operating system’s kernel is related to the presence of access beyond the boundaries of the slab memory area in packetrecvmsg. Exploiting this vulnerability can allow an attacker to disclose sensitive information or cause service failures...

Medium: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: tls: fix race between tx work scheduling and socket close Similarly to previous commit, the submitting thread recvmsg/sendmsg may exit as soon as the async crypto handler calls complete. Reorder scheduling the wor...

kernel: virtio-net: tun: mlx5_core short frame denial of service

A denial of service DoS attack was found in the mlx5 driver in the Linux kernel. A KVM guest VM using virtio-net can crash the host by sending a short packet, for example, size = ETHHLEN...

kernel: net: fix information leakage in /proc/net/ptype

In the Linux kernel, the following vulnerability has been resolved: net: fix information leakage in /proc/net/ptype In one net namespace, after creating a packet socket without binding it to a device, users in other net namespaces can observe the new packettype added by this packet socket by...

kernel: virtio-net: tap: mlx5_core short frame denial of service

A denial of service DoS attack was found in the mlx5 driver in the Linux kernel. A KVM guest VM using virtio-net can crash the host by sending a short packet, for example, size = ETHHLEN...

Advisory ROSA-SA-2024-2473

software: net-snmp 5.9 WASP: ROSA-CHROME packageevrstring: net-snmp-5.9-3 CVE-ID: CVE-2022-44792 BDU-ID: 2024-06510 CVE-Crit: MEDIUM. CVE-DESC.: A vulnerability in the handleipDefaultTTL function of the Net-SNMP software suite of the Linux operating system is associated with a NULL Pointer...

kernel: virtio-net: tap: mlx5_core short frame denial of service

A denial of service DoS attack was found in the mlx5 driver in the Linux kernel. A KVM guest VM using virtio-net can crash the host by sending a short packet, for example, size = ETHHLEN...

kernel: virtio-net: tun: mlx5_core short frame denial of service

A denial of service DoS attack was found in the mlx5 driver in the Linux kernel. A KVM guest VM using virtio-net can crash the host by sending a short packet, for example, size = ETHHLEN...

The vulnerability of the bpf component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the bpf component in the Linux operating system’s kernel is related to a failure in bpfspinlock, when it is set as the value of bpftimer. This occurs because the bpfmapupdateelem call reassigns another timer object. Exploiting this vulnerability can allow an attacker to trigg...

CVE-2024-8006

A flaw was found in the libpcap library. When remote packet capture support is enabled, it is possible to trigger a NULL pointer dereference when a filesystem path that is not a directory is used as an argument to the pcapfindalldevsex function due to a missing check of the return value from the...

CVE-2023-7256

A vulnerability was found in libpcap. During the setup of a remote packet capture, the internal sockinitaddress function calls getaddrinfo and possibly freeaddrinfo, but does not clearly indicate to the caller function as to whether freeaddrinfo remains to be called after the function returns. Th...

Rockwell Automation GuardLogix/ControlLogix 5580 Controller Improper Check For Unusual or Exceptional Conditions (CVE-2024-40619)

A denial-of-service vulnerability exists in the affected products. The vulnerability occurs when a malformed CIP packet is sent over the network to the device and results in a major nonrecoverable fault causing a denial-of-service. This plugin only works with Tenable.ot. Please visit...

The vulnerability of the NTLMSSP discriver, an analyzer of computer network traffic by Wireshark, allows a hacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the NTLMSSP discriminator and the Wireshark traffic analyzer involves an issue where an operation is executed outside the buffer in memory, as a result of a pointer being reassigned when its validity period has expired. Exploiting this vulnerability allows a remote attacker t...

Exploit for Integer Underflow (Wrap or Wraparound) in Microsoft

Warning: This vulnerability's remote code execution exploit is...

SSH Username Enumeration

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'SSH Username Enumeration', 'Description' = %q This module uses a malformed packet or timing attack to enumerate users on an OpenSSH server. The...