K52510343: ICMP PMTU messages are forwarded to the server side when the TCP proxy-mss setting is enabled in the associated profile

Security Advisory Description This issue occurs when all of the following conditions are met: Internet Control Message Protocol ICMP path maximum transmission unit PMTU messages are forwarded through the BIG-IP system running on the affected versions. OneConnect or SNAT is configured and actively...

PT-2025-8596

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.19.0-rc2-syzkaller-00443-g8720bd951b8e Description A bug has been identified in the Linux kernel, specifically in the skb tunnel check pmtu function. The issue arises from an incorrect assumption about the mac...

PT-2022-32699

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.53 Description The issue concerns the skb tunnel check pmtu function, where it does not properly check if the MAC header is set in tunnels. This could potentially lead to security vulnerabilities, although...

PT-2022-32864

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.129 Description The issue concerns the skb tunnel check pmtu function, where it does not properly check if the MAC header is set in tunnels. This could potentially lead to security vulnerabilities, although...

PT-2022-32485

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.10 Description The issue is related to the skb tunnel check pmtu function, where it does not properly check if the MAC header is set in tunnels. This could potentially lead to security vulnerabilities,...

PT-2022-32804

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.134 Description The issue concerns data-races around sysctl ip fwd use pmtu. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v5.10.134,...

PT-2022-33046

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.254 Description The issue concerns data-races around sysctl ip fwd use pmtu. The actual impact and attack plausibility have not yet been proven. Recommendations For versions prior to v4.19.254, update to...

PT-2022-32399

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.15 Description The issue concerns data-races around sysctl ip fwd use pmtu. The actual impact and attack plausibility have not yet been proven. It was introduced in version v3.14 and fixed in Linux Kernel...

PT-2022-32622

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.58 Description The issue concerns data-races around sysctl ip fwd use pmtu. The actual impact and attack plausibility have not yet been proven. It was introduced in version v3.14 and fixed in Linux Kernel...

PT-2022-32946

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.208 Description The issue concerns data-races around sysctl ip fwd use pmtu. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v5.4.208,...

Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

kernel security and bug fix update

4.18.0-240.8.13.OL8 - Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and shim-x64...

CVE-2015-7759

BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, Link Controller, and PEM 12.0.0 before HF1, when the TCP profile for a virtual server is configured with Congestion Metrics Cache enabled, allow remote attackers to cause a denial of service Traffic Management Microkernel TMM restart via crafted ICMP...

Design/Logic Flaw

BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, Link Controller, and PEM 12.0.0 before HF1, when the TCP profile for a virtual server is configured with Congestion Metrics Cache enabled, allow remote attackers to cause a denial of service Traffic Management Microkernel TMM restart via crafted ICMP...

CVE-2015-7759: Improper Input Validation

BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, Link Controller, and PEM 12.0.0 before HF1, when the TCP profile for a virtual server is configured with Congestion Metrics Cache enabled, allow remote attackers to cause a denial of service Traffic Management Microkernel TMM restart via crafted ICMP...

SOL17047 - ICMP packet processing vulnerability CVE-2015-5058

Vulnerability Recommended Actions If you are running a version listed in the Versions known to be vulnerable column, you can eliminate this vulnerability by upgrading to a version listed in the Versions known to be not vulnerable column. If the table lists only an older version than what you are...

FreeBSD -- Remote kernel panics on IPv6 connections

Problem Description: In case of an incoming ICMPv6 'Packet Too Big Message', there is an insufficient check on the proposed new MTU for a path to the destination. Impact: When the kernel is configured to process IPv6 packets and has active IPv6 TCP sockets, a specifically crafted ICMPv6 'Packet T...

HP-UX ICMP vulnerable to DoS via ICMP Path Maximum Transmission Unit (PMTU) Discovery

Overview A vulnerability in HP-UX may allow a remote attacker to cause a denial of service by sending a specially crafted ICMP packet. Description A number of widely accepted Internet standards describe different aspects of the relationships between the Internet Control Message Protocol ICMP and...

[security bulletin] SSRT4884 HP-UX TCP/IP Remote Denial of Service (DoS)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c00576017 Version: 8 HPSBUX01164 SSRT4884 HP-UX TCP/IP Remote Denial of Service DoS NOTICE: The information in this Security Bulletin should be acted upon as soon as possible. Release Date:...

[SA16106] Avaya Predictive Dialing System TCP/IP Denial of Service

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...