webhook-cve-2022-0811

webhook-cve-2022-0811 这是一个非常简单的 webhook，当配置了恶意的 sysctl 值时，它会阻止 Pod 的创建。 构建 go test CGOENABLED=0 GOOS=linux GOARCH=amd64 GO111MODULE=on go build 构建镜像并部署到 Minikube 启动 minikube： minikube start minikube addons enable registry 构建： podman build -t localhost:5000/webhook-cve-2022-0811:latest . podman pu...

PT-2026-64643

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the IPv4 implementation where invalid values assigned to the net.ipv4.tcp reordering sysctl are not properly rejected. Because this value is stored as an int but copie...

UBUNTU-CVE-2025-40281

In the Linux kernel, the following vulnerability has been resolved: sctp: prevent possible shift-out-of-bounds in sctptransportupdaterto syzbot reported a possible shift-out-of-bounds 1 Blamed commit added rtoalphamax and rtobetamax set to 1000. It is unclear if some sctp users are setting very...

CVE-2021-38209

net/netfilter/nfconntrackstandalone.c in the Linux kernel before 5.12.2 allows observation of changes in any net namespace because these changes are leaked into all other net namespaces. This is related to the NFSYSCTLCTMAX, NFSYSCTLCTEXPECTMAX, and NFSYSCTLCTBUCKETS sysctls...

Linux: Read sysctl config files (KB)

sysctl.conf is a simple file containing sysctl values to be read in and set by sysctl. Files to consider: /etc/sysctl.conf, /etc/sysctl.d/. Note: This script only stores information for other Policy Controls. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from ...

openSUSE Security Update : lynis (openSUSE-2017-705)

This update for lynis fixes the following issues : Lynis 2.5.1 : - Improved detection of SSL certificate files - Minor changes to improve logging and results - Firewall tests: Determine if CSF is in testing mode The Update also includes changes from Lynis 2.5.0 : - CVE-2017-8108: symlink attack m...