RXSA-2023:0101 Important: kernel security and bug fix update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: memory corruption in AX88179178A based USB ethernet device. CVE-2022-2964 kernel: i915: Incorrect GPU TLB flush can lead to random memory access CVE-2022-4139 For more details about the...

CVE-2022-39186 EXFO - BV-10 Performance Endpoint Unit Misconfiguration

EXFO - BV-10 Performance Endpoint Unit misconfiguration. System configuration file has misconfigured permissions...

CVE-2022-39185 EXFO - BV-10 Performance Endpoint Unit Undocumented privileged user.

EXFO - BV-10 Performance Endpoint Unit Undocumented privileged user. Unit has an undocumented hard-coded privileged user...

CVE-2022-39184 EXFO - BV-10 Performance Endpoint Unit Authentication bypass

EXFO - BV-10 Performance Endpoint Unit authentication bypass User can manually manipulate access enabling authentication bypass...

CVE-2022-39184

CVE-2022-39184 affects EXFO BV-10 Performance Endpoint Unit. The vulnerability is an authentication bypass where a user can manually manipulate access to enable bypass. Documented impact is high ( Confidentiality/Integrity/Availability = High) with CVSS 3.1 base score 9.8. Connected sources confi...

CVE-2022-39185

The CVE-2022-39185 entry covers the EXFO BV-10 Performance Endpoint Unit, describing an undocumented hard-coded privileged user that grants elevated access. Affected component is the BV-10 unit itself; the root cause is the presence of an undocumented privileged account. Impact is high, with pote...

CVE-2022-39186

CVE-2022-39186 affects EXFO BV-10 Performance Endpoint Unit. The root cause is a misconfigured permissions setting on the system configuration file, as reported by multiple sources (NVD, CNNVD). Potential impact includes high confidentiality exposure, with local attack vector and low attack compl...

CVE-2022-39184: Improper Authentication

EXFO - BV-10 Performance Endpoint Unit authentication bypass User can manually manipulate access enabling authentication bypass...

CVE-2022-39185: Use of Hard-coded Credentials

EXFO - BV-10 Performance Endpoint Unit Undocumented privileged user. Unit has an undocumented hard-coded privileged user...

CVE-2022-39186: Incorrect Permission Assignment for Critical Resource

EXFO - BV-10 Performance Endpoint Unit misconfiguration. System configuration file has misconfigured permissions...

Important: kernel security and bug fix update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: memory corruption in AX88179178A based USB ethernet device. CVE-2022-2964 kernel: i915: Incorrect GPU TLB flush can lead to random memory access CVE-2022-4139 For more details about the...

Huawei EulerOS: Security Advisory for unbound (EulerOS-SA-2023-1177)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2023-12668 · Hitachi · Lumada Apm

Name of the Vulnerable Software and Affected Versions: Lumada APM on-premises versions 6.0.0.0 through 6.4.0. Description: A vulnerability exists in Lumada APM's User Asset Group feature due to a flaw in access control mechanism implementation on the "Limited Engineer" role, granting it access to...

PT-2023-13708 · Exfo · Exfo Bv-10 Performance Endpoint Unit

Name of the Vulnerable Software and Affected Versions: EXFO BV-10 Performance Endpoint Unit affected versions not specified Description: The issue concerns an undocumented hard-coded privileged user in the EXFO BV-10 Performance Endpoint Unit. This means that there is a user account with elevated...

PT-2023-9338 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a refcount leak in the amd pmc probe function of the Linux kernel. The pci get domain bus and slot function takes a reference, which the caller should release b...

ALSA-2023:0101 Important: kernel security and bug fix update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: memory corruption in AX88179178A based USB ethernet device. CVE-2022-2964 kernel: i915: Incorrect GPU TLB flush can lead to random memory access CVE-2022-4139 For more details about the...

PT-2023-13709 · Exfo · Exfo Bv-10 Performance Endpoint Unit

Name of the Vulnerable Software and Affected Versions: EXFO - BV-10 Performance Endpoint Unit affected versions not specified Description: The issue concerns a misconfiguration in the EXFO - BV-10 Performance Endpoint Unit, specifically with the system configuration file having misconfigured...

Huawei EulerOS: Security Advisory for unbound (EulerOS-SA-2023-1156)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization 2.10.1 : unbound (EulerOS-SA-2023-1156)

According to the versions of the unbound packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A vulnerability named 'Non-Responsive Delegation Attack' NRDelegation Attack has been discovered in various DNS resolving...

EulerOS Virtualization 2.10.1 : bind (EulerOS-SA-2023-1141)

According to the versions of the bind packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - By flooding the target resolver with queries exploiting this flaw an attacker can significantly impair the resolver's performance,...