USN-6221-1: Linux kernel vulnerabilities

It was discovered that a race condition existed in the overlay file system implementation in the Linux kernel. A local attacker could use this to cause a denial of service system crash. CVE-2021-20321 It was discovered that the virtual terminal vt device implementation in the Linux kernel contain...

CVE-2023-20575

A potential power side-channel vulnerability in some AMD processors may allow an authenticated attacker to use the power reporting functionality to monitor a program’s execution inside an AMD SEV VM potentially resulting in a leak of sensitive information...

CVE-2023-20575

CVE-2023-20575 describes a potential power side-channel vulnerability in some AMD processors that could allow an authenticated attacker to use the power reporting functionality to monitor a program’s execution inside an AMD SEV VM , potentially leaking sensitive information. The AMD security bull...

Ubuntu: Security Advisory (USN-6205-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

org.graylog.plugins:graylog-plugin-pipeline-processor (1.1.0), org.graylog.plugins:usage-statistics (2.1.0) potentially affected by CVE-2023-41045 via org.graylog2:graylog2-server (2.1.0)

org.graylog2:graylog2-server MAVEN version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-pipeline-processor 1.1.0 - org.graylog.plugins:usage-statistics 2.1....

org.graylog.plugins:graylog-plugin-parent (2.4.0-beta.1), org.graylog.plugins:graylog-plugin-pipeline-processor (2.4.0-beta.1) +2 more potentially affected by CVE-2023-41045 via org.graylog2:graylog2-server (2.4.0-beta.1)

org.graylog2:graylog2-server MAVEN version 2.4.0-beta.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 2.4.0-beta.1 -...

org.graylog.plugins:graylog-plugin-parent (2.2.0), org.graylog.plugins:graylog-plugin-pipeline-processor (2.2.0) +2 more potentially affected by CVE-2023-41045 via org.graylog2:graylog2-server (2.2.0)

org.graylog2:graylog2-server MAVEN version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 2.2.0 - org.graylog.plugins:graylog-plugin-pipeline-processor...

org.graylog.plugins:graylog-plugin-parent (2.2.0-beta.1), org.graylog.plugins:graylog-plugin-pipeline-processor (2.2.0-beta.1) +2 more potentially affected by CVE-2023-41045 via org.graylog2:graylog2-server (2.2.0-beta.1)

org.graylog2:graylog2-server MAVEN version 2.2.0-beta.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 2.2.0-beta.1 -...

org.graylog.plugins:graylog-plugin-parent (2.3.0-rc.2), org.graylog.plugins:graylog-plugin-pipeline-processor (2.3.0-rc.2) +2 more potentially affected by CVE-2023-41045 via org.graylog2:graylog2-server (2.3.0-rc.2)

org.graylog2:graylog2-server MAVEN version 2.3.0-rc.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 2.3.0-rc.2 -...

org.graylog.plugins:graylog-plugin-parent (2.5.0-beta.1), org.graylog.plugins:graylog-plugin-pipeline-processor (2.5.0-beta.1) +2 more potentially affected by CVE-2023-41045 via org.graylog2:graylog2-server (2.5.0-beta.1)

org.graylog2:graylog2-server MAVEN version 2.5.0-beta.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 2.5.0-beta.1 -...

org.graylog.plugins:graylog-plugin-parent (2.3.0-alpha.2), org.graylog.plugins:graylog-plugin-pipeline-processor (2.3.0-alpha.2) +2 more potentially affected by CVE-2023-41045 via org.graylog2:graylog2-server (2.3.0-alpha.2)

org.graylog2:graylog2-server MAVEN version 2.3.0-alpha.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 2.3.0-alpha.2 -...

org.graylog.plugins:graylog-plugin-pipeline-processor (1.1.1), org.graylog.plugins:usage-statistics (2.1.1) potentially affected by CVE-2023-41045 via org.graylog2:graylog2-server (2.1.1)

org.graylog2:graylog2-server MAVEN version 2.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-pipeline-processor 1.1.1 - org.graylog.plugins:usage-statistics 2.1....

org.graylog.plugins:graylog-plugin-parent (2.4.0-beta.3), org.graylog.plugins:graylog-plugin-pipeline-processor (2.4.0-beta.3) +2 more potentially affected by CVE-2023-41045 via org.graylog2:graylog2-server (2.4.0-beta.3)

org.graylog2:graylog2-server MAVEN version 2.4.0-beta.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 2.4.0-beta.3 -...

org.graylog.plugins:graylog-plugin-parent (2.5.1), org.graylog.plugins:graylog-plugin-pipeline-processor (2.5.1) +2 more potentially affected by CVE-2023-41045 via org.graylog2:graylog2-server (2.5.1)

org.graylog2:graylog2-server MAVEN version 2.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 2.5.1 - org.graylog.plugins:graylog-plugin-pipeline-processor...

org.graylog.plugins:graylog-plugin-parent (2.3.0-alpha.3), org.graylog.plugins:graylog-plugin-pipeline-processor (2.3.0-alpha.3) +2 more potentially affected by CVE-2023-41045 via org.graylog2:graylog2-server (2.3.0-alpha.3)

org.graylog2:graylog2-server MAVEN version 2.3.0-alpha.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 2.3.0-alpha.3 -...

org.graylog.plugins:graylog-plugin-parent (2.4.4), org.graylog.plugins:graylog-plugin-pipeline-processor (2.4.4) +2 more potentially affected by CVE-2023-41045 via org.graylog2:graylog2-server (2.4.4)

org.graylog2:graylog2-server MAVEN version 2.4.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 2.4.4 - org.graylog.plugins:graylog-plugin-pipeline-processor...

EulerOS 2.0 SP11 : kernel (EulerOS-SA-2023-2296)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - When SMT is enabled, certain AMD processors may speculatively execute instructions using a target from the sibling thread after an SMT mode swit...

Qualcomm Chipsets 安全漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that originates from information disclosure in the DSP service when loading dynamic modules. The following products and versions are affected: FastConnect 6700,...

CVE-2023-3497

Out of bounds read in Google Security Processor firmware in Google Chrome on Chrome OS prior to 114.0.5735.90 allowed a local attacker to perform denial of service via physical access to the device. Chromium security severity: Medium...

CVE-2023-3497

Out of bounds read in Google Security Processor firmware in Google Chrome on Chrome OS prior to 114.0.5735.90 allowed a local attacker to perform denial of service via physical access to the device. Chromium security severity: Medium...