CLSA-2023-1698306895 Fix of 7 CVEs

CVE-2023-0597 // CVE-url: https://ubuntu.com/security/CVE-2023-0597 - x86/kasan: Map shadow for percpu pages on demand - x86/mm: Recompute physical address for every page of per-CPU CEA mapping - x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area - x86/mm: Do not shuffle CPU...

USN-6440-3 linux-aws-hwe vulnerabilities

Seth Jenkins discovered that the Linux kernel did not properly perform address randomization for a per-cpu memory management structure. A local attacker could use this to expose sensitive information kernel memory or in conjunction with another kernel vulnerability. CVE-2023-0597 It was discovere...

USN-6440-1: Linux kernel vulnerabilities

Seth Jenkins discovered that the Linux kernel did not properly perform address randomization for a per-cpu memory management structure. A local attacker could use this to expose sensitive information kernel memory or in conjunction with another kernel vulnerability. CVE-2023-0597 It was discovere...

CVE-2023-38217

Adobe Bridge versions 12.0.4 and earlier and 13.0.3 and earlier are affected by an Out-of-bounds Read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user...

Adobe Bridge 缓冲区错误漏洞

Adobe Bridge is a powerful creative resource manager that lets users quickly and easily preview, organize, edit, and publish multiple creative resources, edit metadata, and add keywords, tags, and ratings to material resources.Adobe Bridge uses collections to organize assets and find assets using...

CVE-2020-27634

In Contiki 4.5, TCP ISNs are improperly random...

CVE-2020-27635

In PicoTCP 1.7.0, TCP ISNs are improperly random...

CVE-2020-27631

In Oryx CycloneTCP 1.9.6, TCP ISNs are improperly random...

CVE-2020-27633

In FNET 4.6.3, TCP ISNs are improperly random...

Design/Logic Flaw

In PicoTCP 1.7.0, TCP ISNs are improperly random...

Design/Logic Flaw

In FNET 4.6.3, TCP ISNs are improperly random...

Design/Logic Flaw

In Contiki 4.5, TCP ISNs are improperly random...

CVE-2020-27636

In Microchip MPLAB Net 3.6.1, TCP ISNs are improperly random...

CVE-2020-27636

In Microchip MPLAB Net 3.6.1, TCP ISNs are improperly random...

CVE-2020-27633

CVE-2020-27633 affects FNET 4.6.3, where TCP Initial Sequence Numbers (ISNs) are generated with insufficient randomness, enabling potential spoofing or disruption of TCP connections. The vulnerability is caused by a predictable ISN generation in FNET’s TCP stack, with no explicit exploitation det...

CVE-2020-27630

In Silicon Labs uC/TCP-IP 3.6.0, TCP ISNs are improperly random...

CVE-2020-27634

In Contiki 4.5, TCP ISNs are improperly random...

CVE-2020-27633

In FNET 4.6.3, TCP ISNs are improperly random...

CVE-2020-27630

In Silicon Labs uC/TCP-IP 3.6.0, TCP ISNs are improperly random...

CVE-2020-27630

CVE-2020-27630 affects Silicon Labs uC/TCP-IP 3.6.0, where TCP Initial Sequence Numbers (ISNs) are generated improperly. The vulnerability stems from ISN generation using a linear-congruential-like pattern, enabling spoofing/disruption of TCP connections. The primary impacted stack is uC/TCP-IP (...