Lucene search
+L

2010 matches found

Positive Technologies
Positive Technologies
•added 2023/01/11 12:00 a.m.•1 views

PT-2025-13379

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to incorrect arithmetic operations when fetching VLAN header bits in the netfilter component of the Linux kernel. Specifically, when the offset and length exceed the...

7.8CVSS5.8AI score0.00197EPSS
SaveExploits0
osv_gsd
osv_gsd
•added 2022/12/08 2:58 a.m.•20 views

GSD-2022-1008042 bridge: switchdev: Fix memory leaks when changing VLAN protocol

bridge: switchdev: Fix memory leaks when changing VLAN protocol This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.157 by commit...

7.2AI score
SaveExploits0
osv_gsd
osv_gsd
•added 2022/12/08 2:44 a.m.•14 views

GSD-2022-1007903 bridge: switchdev: Fix memory leaks when changing VLAN protocol

bridge: switchdev: Fix memory leaks when changing VLAN protocol This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.80 by commit...

7.2AI score
SaveExploits0
osv_gsd
osv_gsd
•added 2022/12/08 2:28 a.m.•14 views

GSD-2022-1007734 bridge: switchdev: Fix memory leaks when changing VLAN protocol

bridge: switchdev: Fix memory leaks when changing VLAN protocol This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.10 by commit...

7.2AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2022/12/08 12:00 a.m.•5 views

PT-2022-36297 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.157 Description: A memory leak issue was discovered when changing VLAN protocol. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

7.2AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/12/08 12:00 a.m.•10 views

PT-2022-35989 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.10 Description: The issue is related to memory leaks when changing VLAN protocol in the bridge switchdev. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kerne...

7.2AI score
SaveExploits0References1
RedHat Linux
RedHat Linux
•added 2022/11/29 2:05 p.m.•55 views

Important: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 8.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

7.8CVSS6.5AI score0.00407EPSS
SaveExploits1References2
Oracle linux
Oracle linux
•added 2022/11/15 12:00 a.m.•48 views

Unbreakable Enterprise kernel-container security update

4.14.35-2047.519.2.1.el7 - xfs: trim IO to found COW extent limit Eric Sandeen Orabug: 34765284 - xfs: don't use delalloc extents for COW on files with extsize hints Christoph Hellwig Orabug: 34765284 4.14.35-2047.519.2 - Revert 'xfs: don't use delalloc extents for COW on files with extsize hints...

7.8CVSS8.2AI score0.00254EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2022/11/14 12:00 a.m.•22 views

PT-2025-18529

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak issue has been resolved in the Linux kernel. The problem occurs when the VLAN protocol of a bridge changes, and the bridge driver attempts to delete a VLAN via the 8021q...

7.8CVSS7.4AI score0.00226EPSS
SaveExploits0References448
Rockylinux
Rockylinux
•added 2022/10/25 7:22 a.m.•20 views

NetworkManager bug fix and enhancement update

An update is available for NetworkManager. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list NetworkManager is a system network service that manages network device...

1.6AI score
SaveExploits0
Lenovo
Lenovo
•added 2022/10/11 12:55 p.m.•10 views

IPV6 VLAN Stacking Vulnerability - Lenovo Support US

No description provided...

7.3AI score
SaveExploits0
RedhatCVE
RedhatCVE
•added 2022/10/02 4:18 p.m.•72 views

CVE-2021-27854

Layer 2 network filtering capabilities such as IPv6 RA guard can be bypassed using combinations of VLAN 0 headers, LLC/SNAP headers and Ethernet to Wifi frame translation...

5.3CVSS2.6AI score0.00714EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2022/10/02 4:18 p.m.•175 views

CVE-2021-27853

Layer 2 network filtering capabilities such as IPv6 RA guard or ARP inspection can be bypassed using combinations of VLAN 0 headers and LLC/SNAP headers...

5.3CVSS2.1AI score0.00813EPSS
SaveExploits1References3
osv_cve
osv_cve
•added 2022/09/30 7:15 p.m.•20 views

CVE-2022-20728

A vulnerability in the client forwarding code of multiple Cisco Access Points APs could allow an unauthenticated, adjacent attacker to inject packets from the native VLAN to clients within nonnative VLANs on an affected device. This vulnerability is due to a logic error on the AP that forwards...

4.7CVSS5.8AI score0.00267EPSS
SaveExploits0References1
NVD
NVD
•added 2022/09/30 7:15 p.m.•35 views

CVE-2022-20728

A vulnerability in the client forwarding code of multiple Cisco Access Points APs could allow an unauthenticated, adjacent attacker to inject packets from the native VLAN to clients within nonnative VLANs on an affected device. This vulnerability is due to a logic error on the AP that forwards...

4.7CVSS0.00267EPSS
SaveExploits0References1
Prion
Prion
•added 2022/09/30 7:15 p.m.•29 views

Design/Logic Flaw

A vulnerability in the client forwarding code of multiple Cisco Access Points APs could allow an unauthenticated, adjacent attacker to inject packets from the native VLAN to clients within nonnative VLANs on an affected device. This vulnerability is due to a logic error on the AP that forwards...

3.3CVSS5AI score0.00267EPSS
SaveExploits0References1Affected Software26
Cvelist
Cvelist
•added 2022/09/30 6:45 p.m.•43 views

CVE-2022-20728 Cisco Access Points VLAN Bypass from Native VLAN Vulnerability

A vulnerability in the client forwarding code of multiple Cisco Access Points APs could allow an unauthenticated, adjacent attacker to inject packets from the native VLAN to clients within nonnative VLANs on an affected device. This vulnerability is due to a logic error on the AP that forwards...

4.7CVSS5.2AI score0.00267EPSS
SaveExploits0References1
CVE
CVE
•added 2022/09/30 6:45 p.m.•98 views

CVE-2022-20728

CVE-2022-20728 describes a VLAN-bypass flaw in the client forwarding code of multiple Cisco Access Points. An unauthenticated, adjacent attacker can inject packets from the native VLAN to nonnative VLAN clients due to a logic error that forwards packets destined to a wireless client when received...

4.7CVSS4.9AI score0.00267EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2022/09/30 6:45 p.m.•17 views

CVE-2022-20728 Cisco Access Points VLAN Bypass from Native VLAN Vulnerability

A vulnerability in the client forwarding code of multiple Cisco Access Points APs could allow an unauthenticated, adjacent attacker to inject packets from the native VLAN to clients within nonnative VLANs on an affected device. This vulnerability is due to a logic error on the AP that forwards...

4.7CVSS7AI score0.00267EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/09/30 12:00 a.m.•5 views

CVE-2022-20728: Improper Access Control

A vulnerability in the client forwarding code of multiple Cisco Access Points APs could allow an unauthenticated, adjacent attacker to inject packets from the native VLAN to clients within nonnative VLANs on an affected device. This vulnerability is due to a logic error on the AP that forwards...

4.7CVSS5.6AI score0.00267EPSS
SaveExploits0References2
Rows per page
Query Builder