EulerOS Virtualization 2.9.0 : grub2 (EulerOS-SA-2022-2381)

According to the versions of the grub2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A crafted 16-bit grayscale PNG image may lead to a out-of-bounds write in the heap area. An attacker may take advantage of that to...

PT-2024-8458 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a memory leak in the nf tables addchain function of the Linux kernel's nf tables component. This leak occurs when the nft chain offload priority function return...

PT-2024-8457 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to an integer underflow in the nf tables addchain function, which can lead to a denial of service. The problem occurs because nf tables chain destroy after nft...

USN-5617-1 xen vulnerabilities

It was discovered that memory contents previously stored in microarchitectural special registers after RDRAND, RDSEED, and SGX EGETKEY read operations on Intel client and Xeon E3 processors may be briefly exposed to processes on the same or different processor cores. A local attacker could use th...

kernel: a use-after-free write in the netfilter subsystem can lead to privilege escalation to root

A use-after-free vulnerability was found in the Linux kernel's Netfilter subsystem in net/netfilter/nftablesapi.c. This flaw allows a local attacker with user access to cause a privilege escalation issue...

GSD-2022-1005700 arm64: set UXN on swapper page tables

arm64: set UXN on swapper page tables This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.60 by commit 775871d4be0d75e219cca937af843a4a1b60489...

PT-2022-34167 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.137 Description: The issue is related to a null dereference in the nf tables component of the netfilter subsystem. This problem was introduced in version v3.16 and is fixed in version v5.10.137. The actual...

PT-2022-34169 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.137 Description: The issue concerns the netfilter nf tables component, where SET ID is not properly restricted from referring to another table. This could potentially lead to security vulnerabilities,...

PT-2022-33958 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.60 Description: The issue concerns the arm64 architecture, specifically the setting of UXN on swapper page tables. The actual impact and attack plausibility have not yet been proven. Recommendations: For...

PT-2022-33931 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 3.16 through 5.15.60 Description: The issue concerns the netfilter nf tables, where SET ID is allowed to refer to another table, potentially leading to security vulnerabilities. The actual impact and attack plausibility...

GSD-2022-1005384 arm64: set UXN on swapper page tables

arm64: set UXN on swapper page tables This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.1 by commit 9283e708a9b8529e7aafac9ab5c5c79a9fab8846...

PT-2022-33603 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.2 Description: The issue concerns the netfilter nf tables, where SET ID should not refer to another table. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

PT-2022-33604 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.2 Description: The issue is related to a null dereference due to a zeroed list head in the nf tables component of netfilter. The actual impact and attack plausibility have not yet been proven...

mariadb: MariaDB through 10.5.9 allows a sql_parse.cc application crash because of incorrect used_tables expectations

MariaDB through 10.5.9 allows a sqlparse.cc application crash because of incorrect usedtables expectations...

PT-2022-37273 · Git +1 · Hunspell

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash reported by OSS-Fuzz, with a Segv on an unknown address. The crash occurs in the HashMgr class, specifically in the add...

OESA-2022-1910 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: A flaw was found in the Linux kernel's implementation of Pressure Stall Information. While the feature is disabled by default, it could allow an attacker to crash the system or have other memory-corruption side...

A flaw was found in the Linux kernel in net/netfilter/nf_tables_core.c:nft_do_chain which can cause a use-after-free. This issue needs to handle 'return' with proper preconditions as it can lead to a kernel information leak problem caused by a local unprivileged attacker.

...

An issue was discovered in net/netfilter/nf_tables_api.c in the Linux kernel before 5.19.6. A denial of service can occur upon binding to an already bound chain.

...

OESA-2022-1881 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: A race condition in perfeventopen which can be exploited by an unprivileged user to gain root privileges. The bug allows to build several exploit primitives such as kernel address information leak, arbitrary execution,...

OESA-2022-1880 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: A race condition in perfeventopen which can be exploited by an unprivileged user to gain root privileges. The bug allows to build several exploit primitives such as kernel address information leak, arbitrary execution,...