GSD-2023-1001900 ipv4: prevent potential spectre v1 gadget in fib_metrics_match()

ipv4: prevent potential spectre v1 gadget in fibmetricsmatch This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.9 by commit...

GSD-2023-1001898 net/sched: sch_taprio: do not schedule in taprio_reset()

net/sched: schtaprio: do not schedule in taprioreset This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.9 by commit...

GSD-2023-1001894 perf/x86/amd: fix potential integer overflow on shift of a int

perf/x86/amd: fix potential integer overflow on shift of a int This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.9 by commit...

GSD-2023-1001887 ALSA: hda/via: Avoid potential array out-of-bound in add_secret_dac_path()

ALSA: hda/via: Avoid potential array out-of-bound in addsecretdacpath This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.11 by commit...

GSD-2023-1001878 block: ublk: extending queue_size to fix overflow

block: ublk: extending queuesize to fix overflow This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.11 by commit...

GSD-2023-1001854 drm/i915: Avoid potential vm use-after-free

drm/i915: Avoid potential vm use-after-free This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.11 by commit...

GSD-2023-1001853 drm/i915: Fix potential bit_17 double-free

drm/i915: Fix potential bit17 double-free This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.11 by commit...

PT-2023-35173 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.90 Description: The issue is related to a potential NULL pointer dereference in the ncm bitrate function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kern...

PT-2023-35143 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.91 Description: The issue concerns the stmmac component in the Linux Kernel, where not all safety features are enabled by default. This could potentially lead to security vulnerabilities, although the actu...

PT-2023-35270

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.164 Description The issue concerns the s390/cpum sf component, where the compare and swap loops lack READ ONCE semantics. This is an automated identification of a potential security issue, but its actual...

PT-2023-35225

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.166 Description The issue is related to a potential security vulnerability in the Linux Kernel. It was introduced in version v2.6.28 and fixed in version v5.10.166. The actual impact and attack plausibility...

PT-2023-35262

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.164 Description A potential security issue has been identified in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2023-35166

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.91 Description A potential security issue has been identified in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2023-35027 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.9 Description: A potential security issue has been identified in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

SUSE-SU-2023:0341-1 Security update for bind

This update for bind fixes the following issues: - Updated to version 9.16.37 jscSLE-24600: - CVE-2022-3094: Fixed an issue where a message flood could exhaust all available memory bsc1207471. - CVE-2022-3736: Fixed a potential crash upon receiving an RRSIG in configurations with stale cache and...

CVE-2022-43501

KASAGO TCP/IP stack provided by Zuken Elmic generates ISNsInitial Sequence Number for TCP connections from an insufficiently random source. An attacker may be able to determine the ISN of the current or future TCP connections and either hijack existing ones or spoof future ones...

SUSE: Security Advisory (SUSE-SU-2023:0314-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2023-12373 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about a specific vulnerability. It appears to be a notification about a rejected CVE candidate...

The vulnerability of the Cloud Mobility for Dell Storage data storage system, related to improper verification of the certificate revocation process, allows a perpetrator to carry out a “man-in-the-middle” attack.

The vulnerability of the Cloud Mobility for Dell Storage storage system is related to improper verification of the certificate revocation process. Exploiting this vulnerability could allow an attacker to carry out a “man-in-the-middle” type attack...

Upgraded Q -> 3 from #664 [1675726078144]

Judge has assessed an item in Issue 664 as 3 risk. The relevant finding follows: L-1 ERC20 Quest: withdrawFee function should only be able to be called once instead of multiple times Issue: The withdrawFee function can be called multiple times by admin after a quest ends, resulting in more than t...