OESA-2023-1073 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: atmtcenqueue in net/sched/schatm.c in the Linux kernel through 6.1.4 allows attackers to cause a denial of service because of type confusion non-negative numbers can sometimes indicate a TCACTSHOT condition rather than valid...

OESA-2023-1074 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: atmtcenqueue in net/sched/schatm.c in the Linux kernel through 6.1.4 allows attackers to cause a denial of service because of type confusion non-negative numbers can sometimes indicate a TCACTSHOT condition rather than valid...

GSD-2023-1001724 ipv6: raw: Deduct extension header length in rawv6_push_pending_frames

ipv6: raw: Deduct extension header length in rawv6pushpendingframes This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.7 by commit...

PT-2023-34800 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v2.6.12 through v6.1.6 Description: The issue is related to the handling of extension header length in rawv6 push pending frames. The actual impact and attack plausibility have not yet been proven. Recommendations: For...

AZL-13170 CVE-2023-0394 affecting package kernel for versions less than 5.15.92.1-1

A NULL pointer dereference flaw was found in rawv6pushpendingframes in net/ipv6/raw.c in the network subcomponent in the Linux kernel. This flaw causes the system to crash...

PT-2023-33423 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 4.8 through 4.19.267 Description: The issue concerns an out-of-bounds read in the afe4403 read raw function. This problem was introduced in version v4.8 and is fixed in Linux Kernel version v4.19.268. The actual impact a...

PT-2023-33296 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.159 Description: A shift-out-of-bounds issue was discovered in the hid report raw event function. The actual impact and attack plausibility have not yet been proven. This issue was introduced in version...

PT-2023-33452 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.14.301 Description: The issue concerns an out-of-bounds read in the afe4403 read raw function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

PT-2023-33401

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.269 Description The issue concerns a shift-out-of-bounds problem in the hid report raw event function. This problem was introduced in version v2.6.20 and fixed in version v4.19.269. The actual impact and...

PT-2023-33422 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 4.8 through 4.19.267 Description: The issue concerns an out-of-bounds read in the afe4404 read|write raw functions. This is an automated ID intended to aid in discovery of potential security vulnerabilities, with the...

PT-2023-33389

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v4.8 through v5.4.225 Description The issue concerns an out-of-bounds read in the afe4403 read raw function. It was introduced in version v4.8 and fixed in version v5.4.226. The actual impact and attack plausibility have...

PT-2023-8498

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.3 Description The issue is related to the IPv6 implementation in the Linux kernel, specifically with the net/ipv6/route.c file. It involves incorrect handling of boundary conditions, potentially allowing a remo...

PT-2023-10610 · Insteon · Insteon Hub

Name of the Vulnerable Software and Affected Versions: Insteon Hub version 1012 Description: Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub. Specially crafted commands sent through the PubNub service can cause a...

CVE-2022-23549 Discourse vulnerable to bypass of post max_length using HTML comments

Discourse is an option source discussion platform. Prior to version 2.8.14 on the stable branch and version 2.9.0.beta16 on the beta and tests-passed branches, users can create posts with raw body longer than the maxlength site setting by including html comments that are not counted toward the...

RAW image plugin Code Execution

The vulnerability of the plugin for viewing RAW images is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code using specially created data...

CVE-2022-44687

Raw Image Extension Remote Code Execution Vulnerability...

CVE-2022-44687

Raw Image Extension Remote Code Execution Vulnerability...

Remote code execution

Raw Image Extension Remote Code Execution Vulnerability...

Raw Image Extension Remote Code Execution Vulnerability

...

CVE-2022-44687 Raw Image Extension Remote Code Execution Vulnerability

...