4 matches found
EUVD-2026-55499
In the Linux kernel, the following vulnerability has been resolved: tcp: challenge ACK for non-exact RST in SYN-RECEIVED The SYN-RECEIVED request-socket path in tcpcheckreq accepts an in-window RST without requiring SEG.SEQ to exactly match RCV.NXT. A non-exact RST therefore removes the request...
Admin user account takeover due to password reset code not being checked on the backend
This report is not public...
CLSA-2021-1636389447 Fixed CVEs in glibc: CVE-2021-43396, CVE-2021-3326
CVE-2021-3326: avoid denial of service due to a failed assertion - CVE-2021-43396: check actual stored character in state reset code...
openSUSE Security Update : icinga2 (openSUSE-2020-1820)
This update for icinga2 fixes the following issues : - Info that since version 2.12.0 following security issue is fixed: prepare-dirs script allows for symlink attack in the icinga user context. boo1172171 CVE-2020-14004 Update to 2.12.1 : - Bugfixes + Core - Fix crashes during config update 8348...