904 matches found
EulerOS Virtualization 2.9.0 : glibc (EulerOS-SA-2022-1629)
According to the versions of the glibc packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - The deprecated compatibility function svcunixcreate in the sunrpc module of the GNU C Library aka glibc through 2.34 copies its pa...
GSD-2022-1001962 SUNRPC: Fix the svc_deferred_event trace class
SUNRPC: Fix the svcdeferredevent trace class This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.112 by commit...
GSD-2022-1001665 SUNRPC: Fix the svc_deferred_event trace class
SUNRPC: Fix the svcdeferredevent trace class This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.35 by commit...
GSD-2022-1001340 SUNRPC: Ensure we flush any closed sockets before xs_xprt_free()
SUNRPC: Ensure we flush any closed sockets before xsxprtfree This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.20 by commit...
GSD-2022-1000996 SUNRPC: Ensure we flush any closed sockets before xs_xprt_free()
SUNRPC: Ensure we flush any closed sockets before xsxprtfree This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.3 by commit...
GSD-2022-1000987 SUNRPC: Fix the svc_deferred_event trace class
SUNRPC: Fix the svcdeferredevent trace class This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.4 by commit...
EulerOS 2.0 SP10 : glibc (EulerOS-SA-2022-1485)
According to the versions of the glibc packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The deprecated compatibility function svcunixcreate in the sunrpc module of the GNU C Library aka glibc through 2.34 copies its path argument on...
The SUNRPC subsystem in the Linux kernel through 5.17.2 can call xs_xprt_free before ensuring that sockets are in the intended state.
...
CVE-2022-28893
A use-after-free flaw was found in the Linux kernel’s net/sunrpc/xprt.c function in the Remote Procedure Call SunRPC protocol. This flaw allows a local attacker to crash the system, leading to a kernel information leak issue. Mitigation This flaw can be mitigated by preventing the affected SUNRPC...
CVE-2022-28893
The SUNRPC subsystem in the Linux kernel through 5.17.2 can call xsxprtfree before ensuring that sockets are in the intended state...
CVE-2022-28893
The SUNRPC subsystem in the Linux kernel through 5.17.2 can call xsxprtfree before ensuring that sockets are in the intended state...
AZL-9332 CVE-2022-28893 affecting package kernel for versions less than 5.15.41.1-1
The SUNRPC subsystem in the Linux kernel through 5.17.2 can call xsxprtfree before ensuring that sockets are in the intended state...
DEBIAN-CVE-2022-28893
The SUNRPC subsystem in the Linux kernel through 5.17.2 can call xsxprtfree before ensuring that sockets are in the intended state...
CVE-2022-28893
The SUNRPC subsystem in the Linux kernel through 5.17.2 can call xsxprtfree before ensuring that sockets are in the intended state...
Code injection
The SUNRPC subsystem in the Linux kernel through 5.17.2 can call xsxprtfree before ensuring that sockets are in the intended state...
UBUNTU-CVE-2022-28893
The SUNRPC subsystem in the Linux kernel through 5.17.2 can call xsxprtfree before ensuring that sockets are in the intended state...
CVE-2022-28893
The SUNRPC subsystem in the Linux kernel through 5.17.2 can call xsxprtfree before ensuring that sockets are in the intended state...
CVE-2022-28893
CVE-2022-28893 is a Linux kernel SUNRPC issue fixed in later kernels when the xs_xprt_free path runs before sockets reach the intended state, enabling kernel memory corruption via a use-after-free (UAF) condition in the inet_put_port flow. Public documentation confirms the root cause and that exp...
