71 matches found
PT-2026-27664
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel related to Bluetooth socket destructors. When TX timestamping is enabled using the SO TIMESTAMPING option, Send Queues SKBs can accumulate in the sk err...
CVE-2022-50838 net: stream: purge sk_error_queue in sk_stream_kill_queues()
In the Linux kernel, the following vulnerability has been resolved: net: stream: purge skerrorqueue in skstreamkillqueues Changheon Lee reported TCP socket leaks, with a nice repro. It seems we leak TCP sockets with the following sequence: 1 SOFTIMESTAMPINGTXACK is enabled on the socket. Each ACK...
Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-56605)
Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2capsockcreate btsockalloc allocates the sk object and attaches it to the provided sock object. On error l2capsockalloc frees the sk object, but the dangling pointer is still attached to the sock object, which may create use-after-fr...
EUVD-2004-1745
Malware in sbrugna...
EUVD-2019-8963
Malware in sbrugna...
EUVD-2019-7793
Malware in sbrugna...
EUVD-2005-3492
Malware in sbrugna...
EUVD-2005-0280
Malware in sbrugna...
CVE-2025-38475
CVE-2025-38475 : Linux kernel SMC sockets suffered from inet_sock type confusion causing oops/double-free behavior when freeing inet_opt due to smc_sock hijacking AF_INET/AF_INET6 fields. Root cause: smc_sock did not place inet_sock as the first member, allowing misinterpretation of function poin...
CVE-2025-38154
In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Avoid using sksocket after free when sending The sk-sksocket is not locked or referenced in backlog thread, and during the call to skbsendsock, there is a race condition with the release of sksocket. All types of...
iputils security update
20210202-11.0.1.1 - Upstream backport 'ping: Add SARESTART to saflags' Orabug: 34573399 20210202-11.1 - Fix CVE-2025-47268 iputils: Signed Integer Overflow in Timestamp Multiplication in iputils ping RHEL-94335 20210202-11 - ping: Fix ping6 binding to VRF and address RHEL-57734 20210202-10 -...
DEBIAN-CVE-2024-56605
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2capsockcreate btsockalloc allocates the sk object and attaches it to the provided sock object. On error l2capsockalloc frees the sk object, but the dangling pointer...
Unable To Launch VDI "Unknown Client Error 1110"
Citrix Workspace App connects to VDI over a VPN, failing with the following error. Socket error 10057 Unknown client error 1110...
Error "Socket Error 10054" When Launching Virtual Desktop
Error "Socket Error 10054" when launching Virtual Desktop...
PT-2020-4886 · Microsoft · Azure Sphere
Name of the Vulnerable Software and Affected Versions: Azure Sphere affected versions not specified Description: The issue is related to a socket implementation error in the Azure Sphere operating system, specifically with the AF AZSPIO socket. It involves a memory reuse error, which can be...
CVE-2019-19342
A flaw was found in Ansible Tower, versions 3.6.x before 3.6.2 and 3.5.x before 3.5.4, when /websocket is requested and the password contains the '' character. This request would cause a socket error in RabbitMQ when parsing the password and an HTTP error code 500 and partial password disclose wi...
CVE-2016-7796
The managerdispatchnotifyfd function in systemd allows local users to cause a denial of service system hang via a zero-length message received over a notify socket, which causes an error to be returned and the notification handler to be disabled...
glibc: denial of service
clntudpcall allocates a buffer, using alloca, to store the payload of an incoming socket error. If a malicious server floods the client with crafted ICMP and UDP packets, this can cause the client to allocate sufficiently many such temporary buffers to cause a stack frame overflow denial of...
ISC BIND 9.9.8 < 9.9.8-P2 / 9.10.3 < 9.10.3-P2 Socket Error Handling DoS
According to its self-reported version number, the remote installation of BIND is affected by a denial of service vulnerability due to a race condition that occurs when handling socket errors. An unauthenticated, remote attacker can exploit this to trigger an INSIST failure, resulting in a denial...
FreeBSD : bind -- multiple vulnerabilities (a8ec4db7-a398-11e5-85e9-14dae9d210b8)
ISC reports : Named is potentially vulnerable to the OpenSSL vulnerability described in CVE-2015-3193. Incorrect reference counting could result in an INSIST failure if a socket error occurred while performing a lookup. This flaw is disclosed in CVE-2015-8461. RT40945 Insufficient testing when...