TencentOS Server 3: linuxptp (TSSA-2022:0255)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2022:0255 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

ptp4l Unexpected Termination

The vulnerability of the ptp4l software service for implementing the LinuxPTP timing protocol is due to an operation going beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause an application to terminate abnormally by creating a one-step...

ptp4l Code Execution

The vulnerability of the ptp4l software service for implementing the PTP protocol in LinuxPTP is related to insufficient checking of the length of transferred messages. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected...