SUSE CVE-2024-46681

In the Linux kernel, the following vulnerability has been resolved: pktgen: use cpusreadlock in pgnetinit I have seen the WARNONsmpprocessorid != cpu firing in pktgenthreadworker during tests. We must use cpusreadlock/cpusreadunlock around the foreachonlinecpucpu loop. While we are at it use...

AZL-49341 CVE-2024-46681 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: pktgen: use cpusreadlock in pgnetinit I have seen the WARNONsmpprocessorid != cpu firing in pktgenthreadworker during tests. We must use cpusreadlock/cpusreadunlock around the foreachonlinecpucpu loop. While we are at it use...

The vulnerability of the Mtrace2 function in the Cisco IOS XR operating system, which allows a hacker to trigger a service failure

The vulnerability of the Mtrace2 multi-address tracing function in the Cisco IOS XR operating system is related to memory release errors. Exploiting this vulnerability can allow a malicious actor to cause service failure by sending a large number of UDP packets...

Cisco IOS XR Software UDP Packet Memory Exhaustion (cisco-sa-pak-mem-exhst-3ke9FeFy)

According to its self-reported version, Cisco IOS XR is affected by a vulnerability. - A vulnerability in the multicast traceroute version 2 Mtrace2 feature of Cisco IOS XR Software could allow an unauthenticated, remote attacker to exhaust the UDP packet memory of an affected device. This...

PT-2024-33708

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.6.58 Description: A vulnerability has been found in the Linux kernel where specific helpers with ARG PTR TO LONG,INT as arguments can write into read-only BPF maps from the BPF program side. This occurs becaus...

编号撤回

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a failure to properly wait for memory space when writing mes packets, which could result in a ring buffer...

The vulnerability of the avahi_dns_packetAppendRecord() function in the Avahi service discovery system, related to the reachable assertion, allows a attacker to cause a service failure.

The vulnerability of the avahidnspacketAppendRecord function in the Avahi service discovery system is related to a reachable assertion. Exploiting this vulnerability allows an attacker to cause a service failure...

CVE-2024-45825

CVE-2024-45825 IMPACT A denial-of-service vulnerability exists in the affected products. The vulnerability occurs when a malformed CIP packet is sent over the network to the device and results in a major nonrecoverable fault causing a denial-of-service...

CVE-2024-45825

CVE-2024-45825 affects Rockwell Automation’s 5015-U8IHFT I/O module. A denial-of-service condition arises from receiving a malformed CIP packet over the network, causing a major nonrecoverable fault. The issue is attributed to improper input validation, with affected versions documented as 1.012 ...

CVE-2024-42483 ESP-NOW Replay Attacks Vulnerability

ESP-NOW Component provides a connectionless Wi-Fi communication protocol. An replay attacks vulnerability was discovered in the implementation of the ESP-NOW because the caches is not differentiated by message types, it is a single, shared resource for all kinds of messages, whether they are...

SUSE CVE-2024-45020

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix a kernel verifier crash in stacksafe Daniel Hodges reported a kernel verifier crash when playing with sched-ext. Further investigation shows that the crash is due to invalid memory access in stacksafe. More specifically,...

The vulnerability of the ospf_te_parse_ri() function in the OSPF LSA Packet Handler component of the networking routing software for Unix-like systems allows a hacker to cause a service failure.

The vulnerability of the ospfteparseri function in the OSPF LSA Packet Handler component of the networking routing software for Unix-like systems can lead to an out-of-buffer operation. Exploitation of this vulnerability can allow a malicious actor to cause service interruptions remotely...

EulerOS 2.0 SP10 : libndp (EulerOS-SA-2024-2445)

According to the versions of the libndp package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A vulnerability was found in libndp. This flaw allows a local malicious user to cause a buffer overflow in NetworkManager, triggered by sending a...

EulerOS 2.0 SP9 : libndp (EulerOS-SA-2024-2397)

According to the versions of the libndp package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A vulnerability was found in libndp. This flaw allows a local malicious user to cause a buffer overflow in NetworkManager, triggered by sending a...

Rockwell Automation 5015-U8IHFT 安全漏洞

The Rockwell Automation 5015-U8IHFT is a general purpose module from Rockwell Automation. A denial of service vulnerability exists in the Rockwell Automation 5015-U8IHFT, which can be exploited by an attacker to cause a denial of service when sending a specially crafted packet to a CIP security...

ESP-NOW 安全漏洞

ESP-NOW is a Wi-Fi communication protocol open-sourced by Espressif Systems. A security vulnerability exists in ESP-NOW 2.5.1 and prior versions that stems from the risk of replay attacks due to the cache not distinguishing between message types. This could allow an attacker to clear legitimate...

Siemens SIMATIC S7-200 SMART Devices Denial of Service Vulnerability

The S7-200 SMART series is a series of miniature programmable logic controllers that control a variety of small automation applications. A denial of service vulnerability exists in Siemens SIMATIC S7-200 SMART Devices due to a failure of an affected device to properly handle incorrectly structure...

EulerOS 2.0 SP9 : libndp (EulerOS-SA-2024-2372)

According to the versions of the libndp package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A vulnerability was found in libndp. This flaw allows a local malicious user to cause a buffer overflow in NetworkManager, triggered by sending a...

Updated libpcap packages fix security vulnerabilities

In affected libpcap versions during the setup of a remote packet capture the internal function sockinitaddress calls getaddrinfo and possibly freeaddrinfo, but does not clearly indicate to the caller function whether freeaddrinfo still remains to be called after the function returns. This makes i...

MGASA-2024-0295 Updated libpcap packages fix security vulnerabilities

In affected libpcap versions during the setup of a remote packet capture the internal function sockinitaddress calls getaddrinfo and possibly freeaddrinfo, but does not clearly indicate to the caller function whether freeaddrinfo still remains to be called after the function returns. This makes i...