Bad local IPv6 connection reuse

libcurl keeps previously used connections in a connection pool for subsequent transfers to reuse, if one of them matches the setup. Due to errors in the logic, the config matching function did not take the IPv6 address zone id into account which could lead to libcurl reusing the wrong connection...

UBUNTU-CVE-2022-27775

An information disclosure vulnerability exists in curl 7.65.0 to 7.82.0 are vulnerable that by using an IPv6 address that was in the connection pool but with a different zone id it could reuse a connection instead...

DEBIAN-CVE-2022-29806

ZoneMinder before 1.36.13 allows remote code execution via an invalid language. Ability to create a debug log file at an arbitrary pathname contributes to exploitability...

EulerOS 2.0 SP8 : ldns (EulerOS-SA-2022-1572)

According to the versions of the ldns package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - When a zone file in ldns 1.7.1 is parsed, the function ldnsnsec3saltdata is too trusted for the length value obtained from the zone file. When the...

EulerOS 2.0 SP5 : ldns (EulerOS-SA-2022-1538)

According to the versions of the ldns package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - When ldns version 1.7.1 verifies a zone file, the ldnsrrnewfrmstrinternal function has a heap out of bounds read vulnerability. An attacker can lea...

PT-2022-29584

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.2 Description A potential issue exists in the Linux Kernel, where the mm/pages alloc.c file may create ZONE MOVABLE beyond the end of a node. The actual impact and attack plausibility have not yet been...

PT-2022-29892

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.19 Description The issue is related to the creation of ZONE MOVABLE beyond the end of a node in mm/pages alloc.c. The actual impact and attack plausibility have not yet been proven. Recommendations For Linu...

PT-2022-29279

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.3 Description The issue is related to the btrfs zoned mode, where devices are traversed under chunk mutex in the btrfs can activate zone function. The actual impact and attack plausibility have not yet been...

PT-2022-30644

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.238 Description The issue is related to the creation of ZONE MOVABLE beyond the end of a node in mm/pages alloc.c. The actual impact and attack plausibility have not yet been proven. Recommendations For Lin...

PT-2022-30723

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.276 Description The issue is related to the creation of ZONE MOVABLE beyond the end of a node in mm/pages alloc.c. The actual impact and attack plausibility have not yet been proven. Recommendations For Lin...

PT-2022-30407

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.110 Description A potential security issue exists due to the creation of ZONE MOVABLE beyond the end of a node in mm/pages alloc.c. The actual impact and attack plausibility have not yet been proven...

PT-2022-30547

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.189 Description A potential issue exists in the Linux Kernel, where the mm/pages alloc.c file may create ZONE MOVABLE beyond the end of a node. The actual impact and attack plausibility have not yet been...

PT-2022-30784

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.311 Description A potential issue exists in the Linux Kernel, specifically in the mm/pages alloc.c file, where ZONE MOVABLE is created beyond the end of a node. The actual impact and attack plausibility have...

PT-2022-2589

Name of the Vulnerable Software and Affected Versions curl versions 7.65.0 through 7.82.0 Description The issue is related to the implementation of the configuration matching function in the curl utility, which does not properly handle IPv6 address zone IDs. This can lead to incorrect connections...

openSUSE 15 Security Update : pdns-recursor (openSUSE-SU-2022:0105-1)

The remote SUSE Linux SUSE15 host has a package installed that is affected by a vulnerability as referenced in the openSUSE-SU-2022:0105-1 advisory. - In PowerDNS Authoritative Server before 4.4.3, 4.5.x before 4.5.4, and 4.6.x before 4.6.1 and PowerDNS Recursor before 4.4.8, 4.5.x before 4.5.8,...

Skype Extension for Chrome Unauthorized Access

The vulnerability of the Skype Extension for Chrome is related to deficiencies in the system’s controlled zone segmentation. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

PT-2022-2516 · D Link · D-Link Dir-823-Pro

Name of the Vulnerable Software and Affected Versions: D-Link DIR-823-Pro version 1.0.2 Description: The issue is related to the implementation of the SetNTPserverSeting function in the D-Link DIR-823-Pro wireless router's firmware, which fails to properly sanitize data at the management level...

PowerDNS Recursor DoS Vulnerability (2022-01)

PowerDNS Recursor is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

PowerDNS Authoritative Server DoS Vulnerability (2022-01)

PowerDNS Authoritative Server is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Insecure Authentication

PowerDNS has insecure authentication. The vulnerability exists due to a lack of insufficient validation of an IXFR end condition which causes incomplete zone transfers to be handled as successful transfers...