Rocky Linux 8 : kernel (RLSA-2022:1988)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2022:1988 advisory. - An out-of-bounds memory write flaw was found in the Linux kernel's joystick devices subsystem in versions before 5.9-rc1, in the way the user calls...

The vulnerabilities in the implementation of the TCP/IP protocol stack of Cisco Email Security Appliance, Cisco Web Security Appliance web servers, and Cisco Secure Email and Web Manager (formerly known as Cisco Security Management Appliance) allow attackers to induce service interruptions.

The vulnerability of the TCP/IP protocol stack implementation of Cisco Email Security Appliance, Cisco Web Security Appliance, and Cisco Secure Email and Web Manager formerly Cisco Security Management Appliance is related to an exception handling error. Exploitation of this vulnerability could...

MGASA-2021-0507 Updated kernel packages fix security vulnerabilities

This kernel update is based on upstream 5.10.78 and fixes at least the following security issues: A use-after-free vulnerability in the NFC stack can lead to a threat to confidentiality, integrity, and system availability CVE-2021-3760. A flaw in the SCTP stack where a blind attacker may be able ...

Espressif ESP-IDF 安全漏洞

Espressif ESP-IDF is an Internet of Things IoT development framework from China's Lexin Information Technology Espressif. Espressif ESP-IDF suffers from a security vulnerability that stems from a security issue in the commercial BT stack. The vulnerability can be exploited by an attacker to cause...

kernel: Heap address information leak while using L2CAP_GET_CONF_OPT

A flaw was found in the Linux kernel's implementation of Logical Link Control and Adaptation Protocol L2CAP, part of the Bluetooth stack. An attacker, within the range of standard Bluetooth transmissions, can create and send a specially crafted packet. The response to this specially crafted packe...

The vulnerability of Google Chrome’s browser stack allows a malicious actor to install an improperly formatted X.509 certificate.

The vulnerability of Google Chrome’s browser stack exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to install an improperly formatted X.509 certificate using a specially crafted HTML page...

HP HP-UX 10.34 Microsoft Windows 95NT 3.5.1 SP1NT 3.5.1 SP2NT 3.5.1 SP3NT 3.5.1 SP4NT 4.0NT 4.0 SP1NT 4.0 SP2NT 4.0 SP3 - Denial of Service

HP HP-UX 10.34 Microsoft Windows 95NT 3.5.1 SP1NT 3.5.1 SP2NT 3.5.1 SP3NT 3.5.1 SP4NT 4.0NT 4.0 SP1NT 4.0 SP2NT 4.0 SP3 - Denial of Service // source: https://www.securityfocus.com/bid/124/info The Teardrop denial of service attack exploits a flaw inherent to multiple vendor TCP/IP stacks. This...