What is Citrix ADC TCP retransmit timeout (RTO) value

You may need to know Citrix ADC's TCP retransmit timeout RTO for troubleshooting retransmission issues...

OSV-2022-616 Timeout in JsonFuzzer

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49401 Crash type: Timeout Crash state: JsonFuzzer...

PT-2022-10741 · Undertow · Undertow

Name of the Vulnerable Software and Affected Versions: Undertow versions prior to 2.2.15 Final Description: A flaw was found in Undertow that tripped the client-side invocation timeout with certain calls made over HTTP2. This flaw allows an attacker to carry out denial of service attacks...

Valinor error messages leading to potential data exfiltration before v0.12.0

php registerConstructorMoney::class, 'fromString' -mapper; try vardump$mapper-mapFoo::class, 'a' = 'HAHA', 'b' = '100 EUR', 'c' = 'USD 100' ; catch MappingError $e $messages = new NodeTraverserfunction Node $node foreach $node-messages as $message vardump '$message', $message-path, $message-body ...

undertow: client side invocation timeout raised when calling over HTTP2

A flaw was found in Undertow that tripped the client-side invocation timeout with certain calls made over HTTP2. This flaw allows an attacker to carry out denial of service attacks...

GO-2022-0233 Resource exhaustion in github.com/pires/go-proxyproto

The PROXY protocol server does not impose a timeout on reading the header from new connections, allowing a malicious client to cause resource exhaustion and a denial of service by opening many connections and sending no data on them. v0.6.0 of the proxyproto package adds support for a user-define...

OESA-2022-1730 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: NFC: netlink: fix sleep in atomic bug when firmware download timeoutCVE-2022-1975 In various methods of kernel base drivers, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalati...

PT-2022-32339

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.318 Description The issue concerns a use-after-free in sco sock timeout, potentially leading to security vulnerabilities. The actual impact and attack plausibility have not yet been proven. Recommendations F...

PT-2022-31018

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.15 through v5.18.3 Description The issue concerns a use-after-free in sco sock timeout, potentially leading to security vulnerabilities. The actual impact and attack plausibility have not yet been proven. Recommendatio...

PT-2022-31643

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.46 Description The issue is related to a dangling sco conn and use-after-free in sco sock timeout. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versio...

PT-2022-31788

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.122 Description The issue concerns an interaction between wait for device probe and deferred probe timeout in the driver core. The actual impact and attack plausibility have not yet been proven...

PT-2022-31531

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.47 Description The issue concerns an interaction between wait for device probe and deferred probe timeout in the driver core. The actual impact and attack plausibility have not yet been proven...

PT-2022-32160

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.247 Description The issue is related to a dangling sco conn and use-after-free in sco sock timeout. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-32272

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.283 Description The issue is related to a dangling sco conn and use-after-free in sco sock timeout. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-32034

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 5.4.146 through 5.4.197 Description The issue is related to a use-after-free in sco sock timeout, potentially leading to security vulnerabilities. The actual impact and attack plausibility have not yet been proven...

PT-2022-31225

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.15 Description The issue concerns an interaction between wait for device probe and deferred probe timeout in the driver core. The actual impact and attack plausibility have not yet been proven...

CVE-2022-31093

NextAuth.js is a complete open source authentication solution for Next.js applications. In affected versions an attacker can send a request to an app using NextAuth.js with an invalid callbackUrl query parameter, which internally is converted to a URL object. The URL instantiation would fail due ...

Design/Logic Flaw

NextAuth.js is a complete open source authentication solution for Next.js applications. In affected versions an attacker can send a request to an app using NextAuth.js with an invalid callbackUrl query parameter, which internally is converted to a URL object. The URL instantiation would fail due ...

CVE-2022-31093 Improper Handling of `callbackUrl` parameter in next-auth

NextAuth.js is a complete open source authentication solution for Next.js applications. In affected versions an attacker can send a request to an app using NextAuth.js with an invalid callbackUrl query parameter, which internally is converted to a URL object. The URL instantiation would fail due ...

ZEIT Next.js 代码问题漏洞

ZEIT Next.js is an open source web application framework from ZEIT based on Vue.js, Node.js, Webpack and Babel.js. NextAuth.js is the authentication for Next.js. A code issue vulnerability exists in Next.js NextAuth.js versions prior to 3.29.5 and prior to 4.5.0 that stems from a lack of validati...