undertow: Possible regression in fix for CVE-2020-10687

A flaw was found in Undertow. A regression in the fix for CVE-2020-10687 was found. HTTP request smuggling related to CVE-2017-2666 is possible against HTTP/1.x and HTTP/2 due to permitting invalid characters in an HTTP request. This flaw allows an attacker to poison a web-cache, perform an XSS...

GSD-2021-1000075 cifs: fix regression when mounting shares with prefix paths

cifs: fix regression when mounting shares with prefix paths This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.3 by commit...

UVI-2021-1000093 net: hso: fix NULL-deref on disconnect regression

net: hso: fix NULL-deref on disconnect regression This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.1 by commit...

UVI-2021-1000128 net: hso: fix NULL-deref on disconnect regression

net: hso: fix NULL-deref on disconnect regression This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.11.17 by commit...

UVI-2021-1000186 net: hso: fix NULL-deref on disconnect regression

net: hso: fix NULL-deref on disconnect regression This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.115 by commit...

UVI-2021-1000042 net: hso: fix NULL-deref on disconnect regression

net: hso: fix NULL-deref on disconnect regression This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.11.17 by commit...

UVI-2021-1000043 net: hso: fix NULL-deref on disconnect regression

net: hso: fix NULL-deref on disconnect regression This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.115 by commit...

GSD-2021-1000166 net: hso: fix NULL-deref on disconnect regression

net: hso: fix NULL-deref on disconnect regression This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.33 by commit...

GSD-2021-1000043 net: hso: fix NULL-deref on disconnect regression

net: hso: fix NULL-deref on disconnect regression This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.115 by commit...

UVI-2021-1000075 cifs: fix regression when mounting shares with prefix paths

cifs: fix regression when mounting shares with prefix paths This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.3 by commit...

UVI-2021-1000112 cifs: fix regression when mounting shares with prefix paths

cifs: fix regression when mounting shares with prefix paths This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.11.20 by commit...

GSD-2021-1000112 cifs: fix regression when mounting shares with prefix paths

cifs: fix regression when mounting shares with prefix paths This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.11.20 by commit...

UVI-2021-1000049 net: hso: fix NULL-deref on disconnect regression

net: hso: fix NULL-deref on disconnect regression This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.189 by commit...

PT-2021-24516

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 5.11.14 through 5.11.16 Description: The issue is related to a NULL-deref on disconnect regression in the net: hso component. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

PT-2021-28579

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.11.20 Description A regression issue exists when mounting shares with prefix paths. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2021-28514

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.10.30 through v5.10.32 Description The issue is related to a NULL-deref on disconnect regression in the net: hso component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2021-24520

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.10.30 through v5.10.32 Description: A potential security issue exists due to a NULL-deref on disconnect regression in the net: hso component. The actual impact and attack plausibility have not yet been proven...

PT-2021-28654

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 4.19.187 through 4.19.188 Description A potential security issue exists due to a NULL-deref on disconnect regression in the net: hso component. The actual impact and attack plausibility have not yet been proven...

PT-2021-24548

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.12.3 Description: A regression issue exists when mounting shares with prefix paths. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

PT-2021-24585

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.11.20 Description A regression issue exists when mounting shares with prefix paths. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...