India’s New Super App Has a Privacy Problem

Tata Neu is the country’s latest do-everything app. When users signed up, their personal information was already there...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2022-9348)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-9348 advisory. - fget: check that the fd still exists after getting a ref to it Linus Torvalds Orabug: 33679806 CVE-2021-0920 - afunix: fix garbage collect vs...

Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.10-2022-011 (ALASKERNEL-5.10-2022-011)

The version of kernel installed on the remote host is prior to 5.10.102-99.473. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.10-2022-011 advisory. AMD recommends using a software mitigation for this issue, which the kernel is enabling by default. The...

Amazon Linux 2 : kernel (ALASKERNEL-5.10-2022-005)

The version of kernel installed on the remote host is prior to 5.10.62-55.141. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.10-2022-005 advisory. A flaw was found in the Linux kernel's implementation of wireless drivers using the Atheros chipsets. An...

Amazon Linux 2 : kernel (ALASKERNEL-5.4-2022-007)

The version of kernel installed on the remote host is prior to 5.4.144-69.257. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.4-2022-007 advisory. A race problem was seen in the vtkioctl in drivers/tty/vt/vtioctl.c in the Linux kernel, which may cause an...

CVE-2019-16158

Fortinet FortiManager GUI contains an improper neutralization of input in the buffer parameter, enabling an authenticated attacker to perform an XSS attack. This vulnerability is documented in FG-IR-19-271 and is referenced in CNVD-2020-19918. No specific patch/version details are provided in the...

PT-2022-30516

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.189 Description The issue is related to a refcount problem in the atmel nand controller init function. The actual impact and potential for attack have not been confirmed. Recommendations For versions prior t...

PT-2022-30623

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.238 Description The issue is related to a refcount problem in the atmel nand controller init function. The actual impact and potential for attack have not been confirmed. Recommendations For versions prior ...

PT-2022-30654

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.238 Description The issue is related to a reference counting problem for the struct tpm chip. The actual impact and potential for attack have not been proven yet. Recommendations For Linux Kernel versions...

PT-2022-30706

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.276 Description The issue is related to a refcount problem in the atmel nand controller init function. It was introduced in version v4.12 and fixed in version v4.14.276. The actual impact and attack...

PT-2022-30341

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.110 Description The issue is related to a PCI-E clock problem in the Linux Kernel, specifically affecting the qcom: ipq8074 component. The actual impact and potential for attack have not been proven yet...

PT-2022-30031

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.33 Description The issue is related to a socket problem in the send6 function when IPv6 is disabled. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-30090

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.33 Description The issue is related to a PCI-E clock problem in the Linux Kernel, specifically affecting the qcom: ipq8074 component. The actual impact and potential for attack have not been fully determine...

PT-2022-30112

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.33 Description The issue is related to a refcount problem in the atmel nand controller init function. It was introduced in version v4.12 and fixed in version v5.15.33. The actual impact and attack...

PT-2022-30209

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.33 Description The issue concerns a reference counting problem for the struct tpm chip. It was introduced in version v4.12 and fixed in version v5.15.33. The actual impact and attack plausibility have not y...

PT-2022-29774

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.19 Description The issue is related to a PCI-E clock problem in the Linux Kernel, specifically affecting the qcom: ipq8074 component. The actual impact and potential for attack have not been fully determine...

PT-2022-29458

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.2 Description The issue is related to a PCI-E clock problem in the Linux Kernel, specifically affecting the qcom: ipq8074 component. The actual impact and potential for attack have not been fully determined...

PT-2022-29484

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.2 Description The issue is related to a refcount problem in the atmel nand controller init function. It was introduced in version v4.12 and fixed in version v5.17.2. The actual impact and attack plausibilit...

PT-2022-29386

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.2 Description The issue is related to a socket problem in the send6 function when IPv6 is disabled. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-30351

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.110 Description The issue is related to a refcount problem in the atmel nand controller init function. It was introduced in version v4.12 and fixed in version v5.10.110. The actual impact and attack...