173 matches found
CVE-2021-47152
A potential data stream corruption flaw was found in the Linux kernel. This may result in a crash...
CVE-2021-47152
In the Linux kernel, the following vulnerability has been resolved: mptcp: fix data stream corruption Maxim reported several issues when forcing a TCP transparent proxy to use the MPTCP protocol for the inbound connections. He also provided a clean reproducer. The problem boils down to...
CVE-2021-47152
CVE-2021-47152 refers to a Linux kernel fix for data stream corruption in the MPTCP path. The issue arises when mptcp_frag_can_collapse_to() incorrectly assumes only MPTCP uses a page_frag; if other protocols allocate fragments (e.g., plain TCP), memory can be re-used for mptcp_data_frag. The mit...
CLSA-2024-1711026811 kernel: Fix of 7 CVEs
netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one CVE-2023-39197 - mtd: Fix gluebi NULL pointer dereference caused by ftl notifier CVE-2023-52449 - media: pvrusb2: fix use after free on context disconnection CVE-2023-52445 - net: prevent mss overflow in skbsegment...
CERT-UA Uncovers New Malware Wave Distributing OCEANMAP, MASEPIE, STEELHOOK
The Computer Emergency Response Team of Ukraine CERT-UA has warned of a new phishing campaign orchestrated by the Russia-linked APT28 group to deploy previously undocumented malware such as OCEANMAP, MASEPIE, and STEELHOOK to harvest sensitive information. The activity, which was detected by the...
NetworkSherlock - Powerful And Flexible Port Scanning Tool With Shodan
NetworkSherlock is a powerful and flexible port scanning tool designed for network security professionals and penetration testers. With its advanced capabilities, NetworkSherlock can efficiently scan IP ranges, CIDR blocks, and multiple targets. It stands out with its detailed banner grabbing...
kernel: bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Check for any of tcpbpfprots when cloning a listener A listening socket linked to a sockmap has its skprot overridden. It points to one of the struct proto variants in tcpbpfprots. The variant depends on the socket'...
Mirai Botnet Variant 'Pandora' Hijacks Android TVs for Cyberattacks
A Mirai botnet variant called Pandora has been observed infiltrating inexpensive Android-based TV sets and TV boxes and using them as part of a botnet to perform distributed denial-of-service DDoS attacks. Doctor Web said the compromises are likely to occur either during malicious firmware update...
The vulnerability of the TCP protocol implementation in microsoftware for Cisco Adaptive Security Appliances (ASA) and Cisco Firepower Threat Defense (FTD) allows a perpetrator to trigger a service failure due to uncontrolled resource consumption.
The vulnerability of the TCP protocol implementation in Cisco Adaptive Security Appliance ASA and Cisco Firepower Threat Defense FTD software relates to uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
Schneider Electric Modicon Improper Check for Unusual or Exceptional Conditions (CVE-2023-25619)
A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause denial of service of the controller when communicating over the Modbus TCP protocol. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more...
CVE-2023-25619
A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause denial of service of the controller when communicating over the Modbus TCP protocol...
CVE-2023-25619
CVE-2023-25619 concerns Schneider Electric Modicon Modbus TCP where a CWE-754 improper check for unusual or exceptional conditions could cause a denial of service of the controller. Affected product family is Schneider Electric Modicon components using Modbus TCP; root cause is improper validatio...
PT-2023-2957 · Schneider Electric · Modicon
Name of the Vulnerable Software and Affected Versions: Schneider Electric Modicon affected versions not specified Description: A vulnerability exists due to improper check for unusual or exceptional conditions, which could cause denial of service of the controller when communicating over the Modb...
Schneider Electric Modicon Exposure of Sensitive Information to an Unauthorized Actor (CVE-2021-22786)
A CWE-200: Information Exposure vulnerability exists that could cause the exposure of sensitive information stored on the memory of the controller when communicating over the Modbus TCP protocol. Affected Products: Modicon M340 CPU part numbers BMXP34 Versions prior to V3.30, Modicon M580 CPU par...
The vulnerability of the Oracle Data Provider for .NET component in the Oracle Database Server database management system allows a hacker to gain full control over the application.
The vulnerability of the Oracle Data Provider for .NET component in the Oracle Database Server database management system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain full control over the application using the TCPS protocol...
CVE-2022-4269
A flaw was found in the Linux kernel Traffic Control TC subsystem. Using a specific networking configuration redirecting egress packets to ingress using TC action "mirred" a local unprivileged user could trigger a CPU soft lockup ABBA deadlock when the transport protocol in use TCP or SCTP does a...
kernel: sock: redo the psock vs ULP protection check
In the Linux kernel, the following vulnerability has been resolved: sock: redo the psock vs ULP protection check Commit 8a59f9d1e3d4 "sock: Introduce sk-skprot-psockupdateskprot" has moved the inetcskhasulpsk check from skpsockinit to the new tcpbpfupdateproto function. I'm guessing that this was...
GSD-2022-1004534 tcp: Fix a data-race around sysctl_tcp_mtu_probe_floor.
tcp: Fix a data-race around sysctltcpmtuprobefloor. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.134 by commit...
CVE-2022-29951
JTEKT TOYOPUC PLCs through 2022-04-29 mishandle authentication. They utilize the CMPLink/TCP protocol configurable on ports 1024-65534 on either TCP or UDP for a wide variety of engineering purposes such as starting and stopping the PLC, downloading and uploading projects, and changing...
Authentication flaw
JTEKT TOYOPUC PLCs through 2022-04-29 mishandle authentication. They utilize the CMPLink/TCP protocol configurable on ports 1024-65534 on either TCP or UDP for a wide variety of engineering purposes such as starting and stopping the PLC, downloading and uploading projects, and changing...