CVE-2023-35309: Sensitive Data Storage in Improperly Locked Memory

Microsoft Message Queuing MSMQ Remote Code Execution Vulnerability...

CVE-2023-32057: Improper Input Validation

Microsoft Message Queuing MSMQ Remote Code Execution Vulnerability...

PT-2023-3682 · Microsoft · Message Queuing +1

Name of the Vulnerable Software and Affected Versions: Microsoft Message Queuing MSMQ affected versions not specified Description: The issue is related to insufficient input validation in Microsoft Message Queuing MSMQ for Windows operating systems. It allows a remote attacker to execute arbitrar...

PT-2023-3871 · Microsoft · Windows +1

Name of the Vulnerable Software and Affected Versions: Microsoft Message Queuing MSMQ affected versions not specified Description: The issue is caused by a race condition in the Windows operating system's message queuing component. This allows remote attackers to execute arbitrary code and affect...

CVE-2023-32044: Out-of-bounds Read

Microsoft Message Queuing MSMQ Denial of Service Vulnerability...

CVE-2023-32045: Out-of-bounds Read

Microsoft Message Queuing MSMQ Denial of Service Vulnerability...

Microsoft Message Queuing security vulnerabilities

Microsoft Message Queuing is a solution for implementing asynchronous and synchronous scenarios that require high performance. A security vulnerability exists in Microsoft Message Queuing. An attacker could exploit this vulnerability to cause a denial of service. The following products and editio...

PT-2023-3683 · Microsoft · Message Queuing +1

Name of the Vulnerable Software and Affected Versions: Microsoft Message Queuing MSMQ affected versions not specified Description: The issue is related to insufficient input validation in Microsoft Message Queuing MSMQ in Microsoft Windows operating systems. It allows a remote attacker to cause a...

Microsoft Message Queuing security vulnerabilities

Microsoft Message Queuing is a solution for implementing asynchronous and synchronous scenarios that require high performance. A security vulnerability exists in Microsoft Message Queuing. An attacker could exploit this vulnerability to remotely execute code. The following products and editions a...

CVE-2023-31222

Deserialization of untrusted data in Microsoft Messaging Queuing Service in Medtronic's Paceart Optima versions 1.11 and earlier on Windows allows an unauthorized user to impact a healthcare delivery organization’s Paceart Optima system cardiac device causing data to be deleted, stolen, or...

Deserialization of untrusted data

Deserialization of untrusted data in Microsoft Messaging Queuing Service in Medtronic's Paceart Optima versions 1.11 and earlier on Windows allows an unauthorized user to impact a healthcare delivery organization’s Paceart Optima system cardiac device causing data to be deleted, stolen, or...

Medtronic Paceart Optima code issue vulnerability

Medtronic Paceart Optima is a comprehensive workflow solution from Medtronic, Inc. to efficiently compile and manage patient cardiac device data. A security vulnerability exists in Medtronic Paceart Optima version 1.11 and prior versions that originates from a data deserialization issue in...

CVE-2023-31222: Deserialization of Untrusted Data

Deserialization of untrusted data in Microsoft Messaging Queuing Service in Medtronic's Paceart Optima versions 1.11 and earlier on Windows allows an unauthorized user to impact a healthcare delivery organization’s Paceart Optima system cardiac device causing data to be deleted, stolen, or...

USN-6134-1: Linux kernel (Intel IoTG) vulnerabilities

It was discovered that the Traffic-Control Index TCINDEX implementation in the Linux kernel did not properly perform filter deactivation in some situations. A local attacker could possibly use this to gain elevated privileges. Please note that with the fix for this CVE, kernel support for the...

kernel: mptcp: do not queue data on closed subflows

In the Linux kernel, the following vulnerability has been resolved: mptcp: do not queue data on closed subflows Dipanjan reported a syzbot splat at close time: WARNING: CPU: 1 PID: 10818 at net/ipv4/afinet.c:153 inetsockdestruct+0x6d0/0x8e0 net/ipv4/afinet.c:153 Modules linked in: uioivshmemOE ui...

Nexx Garage Door Controllers Plugin Unauthorized Access

The vulnerability of microprogrammed software in Nexx Garage Door Controllers NXG-100B, NXG-200, Nexx Smart Plugs NXPG-100W, and Nexx Smart Alarms NXAL-100 lies in the use of pre-set credentials. Exploiting this vulnerability could allow an attacker to gain unauthorized access to the MQ Telemetry...

USN-6072-1: Linux kernel (OEM) vulnerabilities

It was discovered that the Traffic-Control Index TCINDEX implementation in the Linux kernel did not properly perform filter deactivation in some situations. A local attacker could possibly use this to gain elevated privileges. Please note that with the fix for this CVE, kernel support for the...

USN-6072-1 linux-oem-6.0 vulnerabilities

It was discovered that the Traffic-Control Index TCINDEX implementation in the Linux kernel did not properly perform filter deactivation in some situations. A local attacker could possibly use this to gain elevated privileges. Please note that with the fix for this CVE, kernel support for the...

Microsoft Message Queuing RCE (CVE-2023-21554, QueueJumper)

Binary data msmq2023-04.nbin...

kernel: Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set

A vulnerability was found in the Linux kernel's Bluetooth subsystem in the hcicmdsyncqueue function. There was a missing check for whether the HCIUNREGISTER flag had been set, meaning that commands were still sent even as the Bluetooth device was being unregistered. This issue could lead to a...