siemens security configuration tool - vulnerabilities and exploits

(subscribe to this query)

The fix for XSA-423 added logic to Linux'es netback driver to deal with a frontend splitting a packet in a way such that not all of the headers would come in one piece. Unfortunately the logic introduced there didn't account for the extreme case of the entire packet bei...

Xen Xen Debian Debian Linux 10.0

An issue exists in l2cap_sock_release in net/bluetooth/l2cap_sock.c in the Linux kernel prior to 6.4.10. There is a use-after-free because the children of an sk are mishandled.

Linux Linux Kernel Debian Debian Linux 10.0 Debian Debian Linux 11.0 Debian Debian Linux 12.0 Canonical Ubuntu Linux 18.04 Canonical Ubuntu Linux 14.04 Canonical Ubuntu Linux 20.04 Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 22.04

Rejected reason: ** REJECT ** DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2023-4206, CVE-2023-4207, CVE-2023-4208. Reason: This record is a duplicate of CVE-2023-4206, CVE-2023-4207, CVE-2023-4208. Notes: All CVE users should reference CVE-2023-4206, CVE-2023-4207, CVE-2023-4208 ...

A flaw was found in the Linux kernel's TUN/TAP functionality. This issue could allow a local user to bypass network filters and gain unauthorized access to some resources. The original patches fixing CVE-2023-1076 are incorrect or incomplete. The problem is that the followin...

Linux Linux Kernel 6.5 Linux Linux Kernel Redhat Enterprise Linux 8.0 Redhat Enterprise Linux 9.0 Fedoraproject Fedora 37 Fedoraproject Fedora 38 Debian Debian Linux 10.0 Debian Debian Linux 11.0 Debian Debian Linux 12.0

A use-after-free flaw was found in nfc_llcp_find_local in net/nfc/llcp_core.c in NFC in the Linux kernel. This flaw allows a local user with special privileges to impact a kernel information leak issue.

Linux Linux Kernel Debian Debian Linux 10.0 Debian Debian Linux 11.0 Debian Debian Linux 12.0

An out-of-bounds write vulnerability in the Linux kernel's net/sched: sch_qfq component can be exploited to achieve local privilege escalation. The qfq_change_agg() function in net/sched/sch_qfq.c allows an out-of-bounds write because lmax is updated according to packet size...

Linux Linux Kernel 6.5 Linux Linux Kernel Debian Debian Linux 10.0 Debian Debian Linux 11.0 Debian Debian Linux 12.0

A use-after-free vulnerability in the Linux kernel's net/sched: cls_fw component can be exploited to achieve local privilege escalation. If tcf_change_indev() fails, fw_set_parms() will immediately return an error after incrementing or decrementing the reference counter in t...

Linux Linux Kernel 6.5 Linux Linux Kernel Debian Debian Linux 10.0 Debian Debian Linux 11.0 Debian Debian Linux 12.0

2 Github repositories

A use-after-free vulnerability in the Linux kernel's net/sched: cls_u32 component can be exploited to achieve local privilege escalation. If tcf_change_indev() fails, u32_set_parms() will immediately return an error after incrementing or decrementing the reference counter in...

Linux Linux Kernel 6.4 Linux Linux Kernel Debian Debian Linux 10.0 Debian Debian Linux 11.0

In multiple functions of binder.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Google Android -Debian Debian Linux 10.0 Debian Debian Linux 11.0

A hash collision flaw was found in the IPv6 connection lookup table in the Linux kernel’s IPv6 functionality when a user makes a new kind of SYN flood attack. A user located in the local network or with a high bandwidth connection can increase the CPU usage of the server th...

Linux Linux Kernel Redhat Enterprise Linux 8.0 Redhat Enterprise Linux 9.0 Fedoraproject Fedora 38

1 2 3 4 5 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook