SUSE-SU-2023:2718-1 Security update for the Linux Kernel (Live Patch 34 for SLE 12 SP5)

This update for the Linux Kernel 4.12.14-122130 fixes several issues. The following security issues were fixed: - CVE-2023-23455: Fixed a denial of service inside atmtcenqueue in net/sched/schatm.c because of type confusion non-negative numbers can sometimes indicate a TCACTSHOT condition rather...

SUSE-SU-2023:2690-1 Security update for the Linux Kernel (Live Patch 33 for SLE 12 SP4)

This update for the Linux Kernel 4.12.14-95117 fixes several issues. The following security issues were fixed: - CVE-2023-31436: Fixed an out-of-bounds write in qfqchangeclass because lmax can exceed QFQMINLMAX bsc1210989. - CVE-2023-1390: Fixed remote DoS vulnerability in tipclinkxmit bsc1210779...

SUSE-SU-2023:2689-1 Security update for the Linux Kernel (Live Patch 41 for SLE 12 SP5)

This update for the Linux Kernel 4.12.14-122153 fixes several issues. The following security issues were fixed: - CVE-2023-31436: Fixed an out-of-bounds write in qfqchangeclass because lmax can exceed QFQMINLMAX bsc1210989. - CVE-2023-1390: Fixed remote DoS vulnerability in tipclinkxmit bsc121077...

EulerOS 2.0 SP5 : libsolv (EulerOS-SA-2023-2182)

According to the versions of the libsolv package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Two heap-overflow vulnerabilities exist in openSUSE/libsolv libsolv through 13 Dec 2020 in the decisionmap variable via the resolvedependencies...

AZL-37098 CVE-2023-32324 affecting package cups for versions less than 2.4.10-1

OpenPrinting CUPS is an open source printing system. In versions 2.4.2 and prior, a heap buffer overflow vulnerability would allow a remote attacker to launch a denial of service DoS attack. A buffer overflow vulnerability in the function formatlogline could allow remote attackers to cause a DoS ...

TooTallNate proxy-agents 安全漏洞

TooTallNate proxy-agents is a collection of various Node.js HTTP proxy implementations. A security vulnerability exists in TooTallNate proxy-agents, which stems from the use of undefined variables to raise a TypeError exception. A remote attacker can exploit this vulnerability to trigger a denial...

libreswan security and bug fix update

4.9-2.0.1.2 - Add libreswan-oracle.patch to detect Oracle Linux distro 4.9-2.2 - Update libreswan-4.9-2176248-authby-rsasig.patch 4.9-2.1 - Resolves: rhbz2187647 authby=rsasig fails in FIPS policy 4.9-2 - Fix CVE-2023-23009: remote DoS via crafted TS payload with an incorrect selector length...

Important: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Important: Red Hat Security Advisory: kpatch-patch security update

An update for kpatch-patch is now available for Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, i...

libreswan security update

4.9-2.0.1 - Add libreswan-oracle.patch to detect Oracle Linux distro 4.9-2 - Fix CVE-2023-23009: remote DoS via crafted TS payload with an incorrect selector length rhbz2173674...

RHEL 8 : libreswan (RHSA-2023:3095)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2023:3095 advisory. Libreswan is an implementation of IPsec and IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide both...

RHEL 9 : libreswan (RHSA-2023:2633)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2023:2633 advisory. Libreswan is an implementation of IPsec and IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide both...

Moderate: libreswan security update

Libreswan is an implementation of IPsec and IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. These services allow you to build secure tunnels through untrusted networks such as virtual private network VPN...

syslog-ng: Denial of Service

Background syslog replacement with advanced filtering features. Description An integer overflow in the RFC3164 parser allows remote attackers to cause a denial of service via crafted syslog input that is mishandled by the tcp or network function. Impact Attackers with access to input syslogs over...

SUSE SLES12 Security Update : libmicrohttpd (SUSE-SU-2023:1944-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:1944-1 advisory. - CVE-2023-27371: Fixed parser bug that could be used to crash servers using the MHDPostProcessor bsc1208745. Tenable has extracted the...

CVE-2023-22915

A buffer overflow vulnerability in the “fbwififorward.cgi” CGI program of Zyxel USG FLEX series firmware versions 4.50 through 5.35, USG FLEX 50W firmware versions 4.30 through 5.35, USG20W-VPN firmware versions 4.30 through 5.35, and VPN series firmware versions 4.30 through 5.35, which could...

Exploit for CVE-2023-28615

CVE-2023-29929: Remote "Instakill" DoS in Kemp LoadMaster via...

SUSE SLED12: ImageMagick / ImageMagick-config-6-SUSE / etc (SUSE-SU-2023:1734-1)

The remote SUSE Linux SLED12 / SLEDSAP12 / SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:1734-1 advisory. - CVE-2023-1289: Fixed segmentation fault and possible DoS via specially crafted SVG. bsc1209141 Tenable has extracted...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : libmicrohttpd (SUSE-SU-2023:1686-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:1686-1 advisory. - GNU libmicrohttpd before 0.9.76 allows remote DoS Denial of Service due to improper parsing of a...

CVE-2022-37013

Summary: CVE-2022-37013 affects Unified Automation OPC UA C++ Demo Server 1.7.6-537 (with vendor rollup). The root cause is in certificate handling, where a crafted certificate can force the server into an infinite loop, enabling a remote, unauthenticated denial‑of‑service. Documented by ZDI as t...