877 matches found
CVE-2021-0342
A flaw use after free in the Linux kernel TUN/TAP device driver functionality was found in the way user create and use tun/tap device. A local user could use this flaw to crash the system or possibly escalate their privileges on the system. Mitigation To mitigate this issue, prevent the module tu...
DEBIAN-CVE-2021-0342
In tungetuser of tun.c, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges required. User interaction is not required for exploitation. Product: Android; Versions: Android kernel; Android ID: A-146554327...
PT-2020-22145
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap buffer overflow read issue is identified, with a crash type of Heap-buffer-overflow READ 4. The crash state involves functions such as get 32aligned...
My Path to Akamai
Three years ago, I graduated with a bachelor's degree in Electronic Engineering Mechatronic from University Tun Hussein Onn Malaysia. I was to be an engineer in the oil and gas industry - but the universe had a better plan for me. Instead, I stepped into IT, providing Technical Support despite my...
PT-2020-21855
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the following functions: nl attr is valid, format odp tun...
PT-2020-22604
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the following functions: tun key to attr, odp flow key fro...
PT-2020-22605
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type of Use-of-uninitialized-value. The crash state involves several functions: format u8x, format odp tun gtpu opt, and...
kernel: memory leak in register_queue_kobjects() in net/core/net-sysfs.c leads to denial of service
A flaw that allowed an attacker to leak kernel memory was found in the network subsystem where an attacker with permissions to create tun/tap devices can create a denial of service and panic the system...
The vulnerability of the dev_get_valid_name function in the TUN subsystem of the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the devgetvalidname function in the TUN subsystem of the Linux operating system is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
PT-2020-5519
Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to a component of the Android operating system, specifically a problem with memory usage after it has been freed. This could potentially allow an attacker to escalate their privileges. The...
Linux: SSH PermitTunnel
PermitTunnel: Specifies whether tun device forwarding is allowed. The argument must be SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Denial Of Service (DoS)
kernel is vulnerable to denial of service. The vulnerability exists through ioctl call in network tun handling...
PT-2020-12648
Name of the Vulnerable Software and Affected Versions Slack Nebula versions 1.1.0 and earlier Description The issue allows a low-privileged attacker to execute code in the context of the root user via tun darwin.go or tun windows.go. A user can also use Nebula to execute arbitrary code in the...
kernel: memory leak in register_queue_kobjects() in net/core/net-sysfs.c leads to denial of service
A flaw that allowed an attacker to leak kernel memory was found in the network subsystem where an attacker with permissions to create tun/tap devices can create a denial of service and panic the system...
kernel: memory leak in register_queue_kobjects() in net/core/net-sysfs.c leads to denial of service
A flaw that allowed an attacker to leak kernel memory was found in the network subsystem where an attacker with permissions to create tun/tap devices can create a denial of service and panic the system...
kernel: memory leak in register_queue_kobjects() in net/core/net-sysfs.c leads to denial of service
A flaw that allowed an attacker to leak kernel memory was found in the network subsystem where an attacker with permissions to create tun/tap devices can create a denial of service and panic the system...
Ubuntu 18.04 LTS : Linux kernel vulnerabilities (USN-4258-1)
The remote Ubuntu 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4258-1 advisory. It was discovered that the Atheros 802.11ac wireless USB device driver in the Linux kernel did not properly validate device metadata. A physically...
USN-4258-1: Linux kernel vulnerabilities
It was discovered that the Atheros 802.11ac wireless USB device driver in the Linux kernel did not properly validate device metadata. A physically proximate attacker could use this to cause a denial of service system crash. CVE-2019-15099 It was discovered that a race condition existed in the...
Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2019-1672)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...