Security Bulletin: Multiple vulnerabilities in Java SE affect IBM CICS TX Advanced

Summary Java SE is used by IBM CICS TX Advanced to run WebSphere Liberty, Fix Installer and Java based CICS applications in the product. The following CVEs are applicable: Denial of service CVEs - CVE-2022-21365, CVE-2022-21360, CVE-2022-21349, CVE-2022-21341, CVE-2022-21340, CVE-2022-21294,...

DEBIAN-CVE-2021-46023

An Untrusted Pointer Dereference was discovered in function mrbvmexec in mruby before 3.1.0-rc. The vulnerability causes a segmentation fault and application crash...

GSD-2023-1002004 scsi: storvsc: Fix swiotlb bounce buffer leak in confidential VM

scsi: storvsc: Fix swiotlb bounce buffer leak in confidential VM This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.7 by commit...

PT-2023-34930 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.11 Description: The issue is related to a potential vm use-after-free in the drm/i915 component. The actual impact and attack plausibility have not yet been proven. It was introduced in version v5.16 and...

PT-2023-35052 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.8 Description: The issue is related to the proc-empty-vm and proc-pid-vm tests in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2023-35080 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.7 Description: The issue is related to a swiotlb bounce buffer leak in confidential VM, which may potentially lead to a security vulnerability. The actual impact and attack plausibility have not yet been...

Denial Of Service (DoS)

virtualbox is vulnerable to Denial of Service DoS. The vulnerability allows low privileged users with login access to run executes to compromise Oracle VM VirtualBox. This can be exploited as a frequently repeatable crash rendering the VM unavailable...

Denial Of Service (DoS)

virtualbox is vulnerable to Denial of Service DoS. The vulnerability allows low privileged users with logon access to run executes to compromise Oracle VM VirtualBox. This can be exploited as a frequently repeatable crash rendering the VM unavailable...

Denial Of Service (DoS)

virtualbox is vulnerable to Denial of Service DoS. The vulnerability allows low privileged users with login access to run executes to compromise Oracle VM VirtualBox. This can be exploited as a frequently repeatable crash rendering the VM unavailable...

Denial Of Service (DoS)

virtualbox is vulnerable to Denial of Service DoS. The vulnerability allows low privileged users with login access to run executes to compromise Oracle VM VirtualBox. This can be exploited as a frequently repeatable crash rendering the VM unavailable...

Denial Of Service (DoS)

virtualbox is vulnerable to Denial of Service DoS. The vulnerability allows low privileged users with logon access to run executes to compromise Oracle VM VirtualBox. This can be exploited as a frequently repeatable crash rendering the VM unavailable...

Denial Of Service (DoS)

virtualbox is vulnerable to Denial of Service DoS. The vulnerability allows low privileged users with logon access to run executes to compromise Oracle VM VirtualBox. This can be exploited as a frequently repeatable crash rendering the VM unavailable...

Ubuntu: Security Advisory (USN-5863-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GSD-2023-1001710 scsi: storvsc: Fix swiotlb bounce buffer leak in confidential VM

scsi: storvsc: Fix swiotlb bounce buffer leak in confidential VM This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.7 by commit...

The vulnerability of the Core component of the Oracle VM VirtualBox software for Windows operating systems allows a hacker to trigger a service failure.

The vulnerability of the Core component of the Oracle VM VirtualBox virtualization software for Windows operating systems is related to insufficient testing of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

Important: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 9.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

openSUSE 15 Security Update : virtualbox (openSUSE-SU-2023:0033-1)

The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2023:0033-1 advisory. - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to...

USN-5831-1 linux-azure-fde vulnerabilities

Kyle Zeng discovered that the sysctl implementation in the Linux kernel contained a stack-based buffer overflow. A local attacker could use this to cause a denial of service system crash or execute arbitrary code. CVE-2022-4378 Tamás Koczka discovered that the Bluetooth L2CAP handshake...

The vulnerability of the Core component of the Oracle VM VirtualBox software allows a hacker to gain full control over the application.

The vulnerability of the Core component of the Oracle VM VirtualBox software lies in insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain full control over the application remotely...

The vulnerability of the Core component of the Oracle VM VirtualBox virtualization software for Windows operating systems allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Core component of the Oracle VM VirtualBox virtualization software for Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...