CVE-2021-31562

The SSL/TLS configuration of Fresenius Kabi Agilia Link + version 3.0 has serious deficiencies that may allow an attacker to compromise SSL/TLS sessions in different ways. An attacker may be able to eavesdrop on transferred data, manipulate data allegedly secured by SSL/TLS, and impersonate an...

ALSA-2022:0188 Important: kernel security and bug fix update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: xfs: raw block device data leak in XFSIOCALLOCSP IOCTL CVE-2021-4155 kernel: fscontext: heap overflow in legacy parameter handling CVE-2022-0185 For more details about the security issues...

Important: kernel security and bug fix update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: xfs: raw block device data leak in XFSIOCALLOCSP IOCTL CVE-2021-4155 kernel: fscontext: heap overflow in legacy parameter handling CVE-2022-0185 For more details about the security issues...

RLSA-2022:0188 Important: kernel security and bug fix update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: xfs: raw block device data leak in XFSIOCALLOCSP IOCTL CVE-2021-4155 kernel: fscontext: heap overflow in legacy parameter handling CVE-2022-0185 For more details about the security issues...

CVE-2021-4083

A read-after-free memory flaw was found in the Linux kernel's garbage collection for Unix domain socket file handlers in the way users call close and fget simultaneously and can potentially trigger a race condition. This flaw allows a local user to crash the system or escalate their privileges on...

UBUNTU-CVE-2021-4083

A read-after-free memory flaw was found in the Linux kernel's garbage collection for Unix domain socket file handlers in the way users call close and fget simultaneously and can potentially trigger a race condition. This flaw allows a local user to crash the system or escalate their privileges on...

SUSE-SU-2021:4192-1 Security update for permissions

This update for permissions fixes the following issues: - Update to version 20181225: drop ping capabilities in favor of ICMPPROTO sockets bsc1174504...

OPENSUSE-SU-2021:4192-1 Security update for permissions

This update for permissions fixes the following issues: - Update to version 20181225: drop ping capabilities in favor of ICMPPROTO sockets bsc1174504...

PT-2021-28458

Name of the Vulnerable Software and Affected Versions: permissions version 20181225 Description: The issue concerns the update of permissions to version 20181225, which includes dropping ping capabilities in favor of ICMP PROTO sockets. Recommendations: For version 20181225, update to this versio...

PT-2021-27378

Name of the Vulnerable Software and Affected Versions: permissions versions prior to 20181225 Description: The issue concerns the update of permissions to version 20181225, which includes dropping ping capabilities in favor of ICMP PROTO sockets. Recommendations: For versions prior to 20181225,...

GSD-2021-1002740 inet_diag: fix kernel-infoleak for UDP sockets

inetdiag: fix kernel-infoleak for UDP sockets This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.11 by commit...

GSD-2021-1002695 inet_diag: fix kernel-infoleak for UDP sockets

inetdiag: fix kernel-infoleak for UDP sockets This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.88 by commit...

PT-2021-27163

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.88 Description The issue concerns a kernel-infoleak for UDP sockets. It was introduced in version v3.3 and fixed in Linux Kernel version v5.10.88. The actual impact and attack plausibility have not yet been...

PT-2021-27208

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.11 Description The issue is related to a kernel-infoleak for UDP sockets in the inet diag module. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel version...

PT-2021-27214

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.11 Description The issue concerns the mptcp protocol in the Linux Kernel, where the 'kern' flag is not properly cleared from fallback sockets. The actual impact and attack plausibility of this issue have no...

PT-2021-27139

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.168 Description The issue concerns a kernel-infoleak for UDP sockets. It was introduced in version v3.3 and fixed in Linux Kernel version v5.4.168. The actual impact and attack plausibility have not yet been...

PT-2021-27169

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.88 Description The issue concerns the mptcp protocol in the Linux Kernel, where the 'kern' flag is not properly cleared from fallback sockets. The actual impact and attack plausibility of this issue have no...

Huawei EulerOS: Security Advisory for flatpak (EulerOS-SA-2021-2799)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP8 : flatpak (EulerOS-SA-2021-2799)

According to the versions of the flatpak packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. In versions prior to 1.10.4 and 1.12.0,...

postgresql: server processes unencrypted bytes from man-in-the-middle

It was found that a PostgreSQL server could accept plain text data during the establishment of an SSL connection. When a user is requesting a certificate based authentication, an active Person in the Middle could use this flaw in order to inject arbitrary SQL commands...