CVE-2022-4269

A flaw was found in the Linux kernel Traffic Control TC subsystem. Using a specific networking configuration redirecting egress packets to ingress using TC action "mirred" a local unprivileged user could trigger a CPU soft lockup ABBA deadlock when the transport protocol in use TCP or SCTP does a...

CVE-2022-4269

CVE-2022-4269 : Linux kernel Traffic Control (TC) vulnerability. When using the mirred action to redirect egress to ingress, a local unprivileged user may trigger a CPU soft lockup (ABBA deadlock) during TCP/SCTP retransmission, causing denial of service. Affected: Linux kernel TC subsystem. Root...

CVE-2022-4269

A flaw was found in the Linux kernel Traffic Control TC subsystem. Using a specific networking configuration redirecting egress packets to ingress using TC action "mirred" a local unprivileged user could trigger a CPU soft lockup ABBA deadlock when the transport protocol in use TCP or SCTP does a...

soft-finder.de Cross Site Scripting vulnerability OBB-3072882

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

GSD-2022-1006653 mm/kmemleak: prevent soft lockup in kmemleak_scan()'s object iteration loops

mm/kmemleak: prevent soft lockup in kmemleakscan's object iteration loops This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.7 by commit...

CVE-2022-44747

Local privilege escalation due to improper soft link handling. The following products are affected: Acronis Cyber Protect Home Office Windows before build 40107...

CVE-2022-44747

Local privilege escalation due to improper soft link handling. The following products are affected: Acronis Cyber Protect Home Office Windows before build 40107...

Privilege escalation

Local privilege escalation due to improper soft link handling. The following products are affected: Acronis Cyber Protect Home Office Windows before build 40107...

CVE-2022-44747

CVE-2022-44747 affects Acronis Cyber Protect Home Office for Windows prior to build 40107. The issue is a local privilege escalation caused by improper soft link handling in the product’s file/system access paths. Impact described across sources is elevated local privileges (local vector with low...

CVE-2022-44747

Local privilege escalation due to improper soft link handling. The following products are affected: Acronis Cyber Protect Home Office Windows before build 40107...

CVE-2022-44747

Local privilege escalation due to improper soft link handling. The following products are affected: Acronis Cyber Protect Home Office Windows before build 40107...

PT-2022-27297 · Acronis · Acronis Cyber Protect Home Office

Name of the Vulnerable Software and Affected Versions: Acronis Cyber Protect Home Office Windows versions prior to build 40107 Description: The issue is related to local privilege escalation due to improper soft link handling. Recommendations: For versions prior to build 40107, update to build...

Multiple vulnerabilities in FUJI SOFT network devices

Overview USB dongle +F FS040U and mobile routers +F FS020W/+F FS030W/+F FS040W provided by FUJI SOFT INCORPORATED contain multiple vulnerabilities listed below. Plaintext Storage of a Password CWE-256 - CVE-2022-43442 Cross-Site Request Forgery CWE-352 - CVE-2022-43470 Tomohisa Hasegawa of Canon ...

JVN#74285622: Multiple vulnerabilities in FUJI SOFT network devices

USB dongle +F FS040U and mobile routers +F FS020W/+F FS030W/+F FS040W provided by FUJI SOFT INCORPORATED contain multiple vulnerabilities listed below. Plaintext Storage of a Password CWE-256 - CVE-2022-43442 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N...

iKuai8 Command Injection Vulnerability

iKuai8 is a soft routing tool. iKuai8 suffers from a command injection vulnerability that is caused by an error in the iKuaiOS soft routing system. An attacker can exploit this vulnerability to execute arbitrary commands on the system...

CVE-2022-34326

In ambiot amb1sdk aka SDK for Ameba1 before 2022-06-20 on Realtek RTL8195AM devices before 284241d70308ff2519e40afd7b284ba892c730a3, the timer task and RX task would be locked when there are frequent and continuous Wi-Fi connection with four-way handshake failures in Soft AP mode...

CVE-2022-34326

In ambiot amb1sdk aka SDK for Ameba1 before 2022-06-20 on Realtek RTL8195AM devices before 284241d70308ff2519e40afd7b284ba892c730a3, the timer task and RX task would be locked when there are frequent and continuous Wi-Fi connection with four-way handshake failures in Soft AP mode...

Design/Logic Flaw

In ambiot amb1sdk aka SDK for Ameba1 before 2022-06-20 on Realtek RTL8195AM devices before 284241d70308ff2519e40afd7b284ba892c730a3, the timer task and RX task would be locked when there are frequent and continuous Wi-Fi connection with four-way handshake failures in Soft AP mode...

Realtek RTL8195AM 安全漏洞

The Realtek RTL8195AM is an IoT microcontroller from China-based Realtek Semiconductor Realtek. A security vulnerability exists in previous versions of the Realtek RTL8195AM 284241d70308ff2519e40afd7b284ba892c730a3, which stems from the ability to lock the timer task when there are frequent and...

PT-2022-22132 · Realtek · Amb1 Sdk +1

Name of the Vulnerable Software and Affected Versions: amb1 sdk aka SDK for Ameba1 versions prior to 2022-06-20 Realtek RTL8195AM devices versions prior to 284241d70308ff2519e40afd7b284ba892c730a3 Description: The issue occurs when there are frequent and continuous Wi-Fi connection failures in So...