Friday Squid Blogging: Squid-Inspired Hydrogel

Scientists have created a hydrogel "using squid mantle and creative chemistry." As usual, you can also use this squid post to talk about the security stories in the news that I havent covered. Read my blog posting guidelines here...

SOUND4 IMPACT/FIRST/PULSE/Eco 2.x Radio Steam Disclosure

SOUND4 IMPACT/FIRST/PULSE/Eco =2.x Unauthenticated Radio Stream Disclosure Vendor: SOUND4 Ltd. Product web page: https://www.sound4.com | https://www.sound4.biz Affected version: FM/HD Radio Processing: Impact/Pulse/First Version 2: 1.1/2.15 Impact/Pulse/First Version 1: 2.1/1.69 Impact/Pulse Eco...

PT-2022-34284 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.211 Description: The issue is related to a refcount leak in the of flash probe versatile function. The actual impact and attack plausibility have not yet been proven. Recommendations: For versions prior to...

GSD-2022-1004913 power/reset: arm-versatile: Fix refcount leak in versatile_reboot_probe

power/reset: arm-versatile: Fix refcount leak in versatilerebootprobe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.325 by commit...

GSD-2022-1004858 power/reset: arm-versatile: Fix refcount leak in versatile_reboot_probe

power/reset: arm-versatile: Fix refcount leak in versatilerebootprobe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.290 by commit...

GSD-2022-1004787 power/reset: arm-versatile: Fix refcount leak in versatile_reboot_probe

power/reset: arm-versatile: Fix refcount leak in versatilerebootprobe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.254 by commit...

GSD-2022-1004546 power/reset: arm-versatile: Fix refcount leak in versatile_reboot_probe

power/reset: arm-versatile: Fix refcount leak in versatilerebootprobe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.134 by commit...

GSD-2022-1004365 power/reset: arm-versatile: Fix refcount leak in versatile_reboot_probe

power/reset: arm-versatile: Fix refcount leak in versatilerebootprobe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.58 by commit...

GSD-2022-1004142 power/reset: arm-versatile: Fix refcount leak in versatile_reboot_probe

power/reset: arm-versatile: Fix refcount leak in versatilerebootprobe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.15 by commit...

GSD-2022-1004070 ARM: versatile: Add missing of_node_put in dcscb_init

ARM: versatile: Add missing ofnodeput in dcscbinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.318 by commit...

GSD-2022-1003985 ARM: versatile: Add missing of_node_put in dcscb_init

ARM: versatile: Add missing ofnodeput in dcscbinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.283 by commit...

GSD-2022-1003876 ARM: versatile: Add missing of_node_put in dcscb_init

ARM: versatile: Add missing ofnodeput in dcscbinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.247 by commit...

GSD-2022-1003736 ARM: versatile: Add missing of_node_put in dcscb_init

ARM: versatile: Add missing ofnodeput in dcscbinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.198 by commit...

GSD-2022-1003573 ARM: versatile: Add missing of_node_put in dcscb_init

ARM: versatile: Add missing ofnodeput in dcscbinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.121 by commit...

GSD-2022-1003353 ARM: versatile: Add missing of_node_put in dcscb_init

ARM: versatile: Add missing ofnodeput in dcscbinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.46 by commit...

GSD-2022-1003052 ARM: versatile: Add missing of_node_put in dcscb_init

ARM: versatile: Add missing ofnodeput in dcscbinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.14 by commit...

GSD-2022-1002731 ARM: versatile: Add missing of_node_put in dcscb_init

ARM: versatile: Add missing ofnodeput in dcscbinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.3 by commit...

Schneider Electric SESU

1. EXECUTIVE SUMMARY CVSS v3 3.8 ATTENTION: Low attack complexity Vendor: Schneider Electric Equipment: Schneider Electric Software Update SESU Vulnerability: Insufficient Entropy 2. RISK EVALUATION Successful exploitation of this vulnerability could cause unintended connection from an internal...

Fedora: Security Advisory for x11vnc (FEDORA-2021-c5b679877e)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Huawei VRP Detection (SSH Login)

SSH login-based detection of Huawei Versatile Routing Platform VRP network devices. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...