CVE-2022-44793

net-snmp: NULL Pointer Exception when handling pv6IpForwarding

handle_ipv6IpForwarding in agent/mibgroup/ip-mib/ip_scalars.c in Net-SNMP 5.4.3 through 5.9.3 has a NULL Pointer Exception bug that can be used by a remote attacker to cause the instance to crash via a crafted UDP packet, resulting in Denial of Service.

CVSS 3.1 · 6.5 Medium EPSS 53.5% KEV · Not listed

Vendors

Debian Net-snmp Netapp and 1 more

Products

Debian Linux Net-snmp H300s and 8 more

CVE-2022-44792

net-snmp: NULL Pointer Exception when handling ipDefaultTTL

handle_ipDefaultTTL in agent/mibgroup/ip-mib/ip_scalars.c in Net-SNMP 5.8 through 5.9.3 has a NULL Pointer Exception bug that can be used by a remote attacker (who has write access) to cause the instance to crash via a crafted UDP packet, resulting in Denial of Service.

CVSS 3.1 · 6.5 Medium EPSS 52.1% KEV · Not listed

Vendors

Debian Net-snmp Netapp and 1 more

Products

Debian Linux Net-snmp H300s and 8 more

CVE-2022-45934

kernel: integer overflow in l2cap_config_req() in net/bluetooth/l2cap_core.c

An issue was discovered in the Linux kernel through 6.0.10. l2cap_config_req in net/bluetooth/l2cap_core.c has an integer wraparound via L2CAP_CONF_REQ packets.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Debian Fedoraproject Linux and 2 more

Products

Debian Linux Fedora Linux Kernel and 11 more

CVE-2022-45885

kernel: use-after-free due to race condition occurring in dvb_frontend.c

An issue was discovered in the Linux kernel through 6.0.9. drivers/media/dvb-core/dvb_frontend.c has a race condition that can cause a use-after-free when a device is disconnected.

CVSS 3.1 · 7 High EPSS < 1% KEV · Not listed

Vendors

Linux Netapp

Products

Linux Kernel H300s H300s Firmware and 8 more

CVE-2022-45887

kernel: memory leak in ttusb_dec_exit_dvb() in media/usb/ttusb-dec/ttusb_dec.c

An issue was discovered in the Linux kernel through 6.0.9. drivers/media/usb/ttusb-dec/ttusb_dec.c has a memory leak because of the lack of a dvb_frontend_detach call.

CVSS 3.1 · 4.7 Medium EPSS < 1% KEV · Not listed

Vendors

Linux Netapp Redhat

Products

Linux Kernel H300s H300s Firmware and 11 more

CVE-2021-42375

busybox: incorrect handling of a special element in ash applet leads to denial of service when processing a crafted shell command

An incorrect handling of a special element in Busybox's ash applet leads to denial of service when processing a crafted shell command, due to the shell mistaking specific characters for reserved characters. This may be used for DoS under rare conditions of filtered command input.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Busybox Fedoraproject Netapp

Products

Busybox Fedora Cloud Backup and 16 more

CVE-2023-3111

kernel: Use after free in prepare_to_relocate in fs/btrfs/relocation.c

A use after free vulnerability was found in prepare_to_relocate in fs/btrfs/relocation.c in btrfs in the Linux Kernel. This possible flaw can be triggered by calling btrfs_ioctl_balance() before calling btrfs_ioctl_defrag().

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Debian Linux Netapp

Products

Debian Linux Linux Kernel H300s and 9 more

CVE-2022-31160

jQuery UI contains potential XSS vulnerability when refreshing a checkboxradio with an HTML-like initial text label

jQuery UI is a curated set of user interface interactions, effects, widgets, and themes built on top of jQuery. Versions prior to 1.13.2 are potentially vulnerable to cross-site scripting. Initializing a checkboxradio widget on an input enclosed within a label makes that parent label contents considered as the input label. Calling `.checkboxradio( "refresh" )` on such a widget and the initial HTML contained encoded HTML entities will make them erroneously get decoded. This can lead to potentially executing JavaScript code. The bug has been patched in jQuery UI 1.13.2. To remediate the issue, someone who can change the initial HTML can wrap all the non-input contents of the `label` in a `span`.

CVSS 3.1 · 6.1 Medium EPSS 2.7% KEV · Not listed

Vendors

Debian Drupal Fedoraproject and 2 more

Products

Debian Linux Jquery Ui Checkboxradio Fedora and 12 more

CVE-2022-47521

kernel: a heap-based buffer overflow in drivers/net/wireless/microchip/wilc1000/cfg80211.c

An issue was discovered in the Linux kernel before 6.0.11. Missing validation of IEEE80211_P2P_ATTR_CHANNEL_LIST in drivers/net/wireless/microchip/wilc1000/cfg80211.c in the WILC1000 wireless driver can trigger a heap-based buffer overflow when parsing the operating channel attribute from Wi-Fi management frames.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Debian Linux Netapp

Products

Debian Linux Linux Kernel H300s and 9 more

CVE-2022-47519

kernel: an out-of-bounds write in drivers/net/wireless/microchip/wilc1000/cfg80211.c

An issue was discovered in the Linux kernel before 6.0.11. Missing validation of IEEE80211_P2P_ATTR_OPER_CHANNEL in drivers/net/wireless/microchip/wilc1000/cfg80211.c in the WILC1000 wireless driver can trigger an out-of-bounds write when parsing the channel list attribute from Wi-Fi management frames.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Debian Linux Netapp

Products

Debian Linux Linux Kernel H300s and 9 more

CVE-2022-1586

pcre2: Out-of-bounds read in compile_xclass_matchingpath in pcre2_jit_compile.c

An out-of-bounds read vulnerability was discovered in the PCRE2 library in the compile_xclass_matchingpath() function of the pcre2_jit_compile.c file. This involves a unicode property matching issue in JIT-compiled regular expressions. The issue occurs because the character was not fully read in case-less matching within JIT.

CVSS 3.1 · 9.1 Critical EPSS 3.4% KEV · Not listed

Vendors

Debian Fedoraproject Netapp and 2 more

Products

Debian Linux Fedora Active Iq Unified Manager and 15 more

CVE-2023-33250

kernel: use-after-free in iopt_unmap_iova_range() in Linux kernel

The Linux kernel 6.3 has a use-after-free in iopt_unmap_iova_range in drivers/iommu/iommufd/io_pagetable.c.

CVSS 3.1 · 4.4 Medium EPSS < 1% KEV · Not listed

Vendors

Linux Netapp

Products

Linux Kernel H300s H300s Firmware and 6 more

CVE-2023-32258

Session race condition remote code execution vulnerability

A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the processing of SMB2_LOGOFF and SMB2_CLOSE commands. The issue results from the lack of proper locking when performing operations on an object. An attacker can leverage this vulnerability to execute code in the context of the kernel.

CVSS 3.1 · 8.1 High EPSS 2.5% KEV · Not listed

Vendors

Linux Netapp Redhat

Products

Linux Kernel H300s H410s and 3 more

CVE-2023-0045

Incorrect indirect branch prediction barrier in the Linux Kernel

The current implementation of the prctl syscall does not issue an IBPB immediately during the syscall. The ib_prctl_set  function updates the Thread Information Flags (TIFs) for the task and updates the SPEC_CTRL MSR on the function __speculation_ctrl_update, but the IBPB is only issued on the next schedule, when the TIF bits are checked. This leaves the victim vulnerable to values already injected on the BTB, prior to the prctl syscall.  The patch that added the support for the conditional mitigation via prctl (ib_prctl_set) dates back to the kernel 4.9.176. We recommend upgrading past commit a664ec9158eeddd75121d39c9a0758016097fa96

CVSS 3.1 · 4.7 Medium EPSS 2.4% KEV · Not listed

Vendors

Debian Linux Netapp

Products

Debian Linux Linux Kernel Active Iq Unified Manager and 10 more

CVE-2023-4236

named may terminate unexpectedly under high DNS-over-TLS query load

A flaw in the networking code handling DNS-over-TLS queries may cause `named` to terminate unexpectedly due to an assertion failure. This happens when internal data structures are incorrectly reused under significant DNS-over-TLS query load. This issue affects BIND 9 versions 9.18.0 through 9.18.18 and 9.18.11-S1 through 9.18.18-S1.

CVSS 3.1 · 7.5 High EPSS 2.2% KEV · Not listed

Vendors

Debian Fedoraproject Isc and 1 more

Products

Debian Linux Fedora Bind and 10 more

CVE-2023-32254

Tree connection race condition remote code execution vulnerability

A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the processing of SMB2_TREE_DISCONNECT commands. The issue results from the lack of proper locking when performing operations on an object. An attacker can leverage this vulnerability to execute code in the context of the kernel.

CVSS 3.1 · 9.8 Critical EPSS 2.9% KEV · Not listed

Vendors

Linux Netapp Redhat

Products

Linux Kernel H300s H410s and 4 more

CVE-2023-32250

Session race condition remote code execution vulnerability

A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the processing of SMB2_SESSION_SETUP commands. The issue results from the lack of proper locking when performing operations on an object. An attacker can leverage this vulnerability to execute code in the context of the kernel.

CVSS 3.1 · 9 Critical EPSS 2.6% KEV · Not listed

Vendors

Linux Netapp Redhat

Products

Linux Kernel H300s H410s and 5 more

CVE-2023-2911

Exceeding the recursive-clients quota may cause named to terminate unexpectedly when stale-answer-client-timeout is set to 0

If the `recursive-clients` quota is reached on a BIND 9 resolver configured with both `stale-answer-enable yes;` and `stale-answer-client-timeout 0;`, a sequence of serve-stale-related lookups could cause `named` to loop and terminate unexpectedly due to a stack overflow. This issue affects BIND 9 versions 9.16.33 through 9.16.41, 9.18.7 through 9.18.15, 9.16.33-S1 through 9.16.41-S1, and 9.18.11-S1 through 9.18.15-S1.

CVSS 3.1 · 7.5 High EPSS 2.4% KEV · Not listed

Vendors

Debian Fedoraproject Isc and 1 more

Products

Debian Linux Fedora Bind and 11 more

CVE-2023-2829

Malformed NSEC records can cause named to terminate unexpectedly when synth-from-dnssec is enabled

A `named` instance configured to run as a DNSSEC-validating recursive resolver with the Aggressive Use of DNSSEC-Validated Cache (RFC 8198) option (`synth-from-dnssec`) enabled can be remotely terminated using a zone with a malformed NSEC record. This issue affects BIND 9 versions 9.16.8-S1 through 9.16.41-S1 and 9.18.11-S1 through 9.18.15-S1.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed

Vendors

Isc Netapp

Products

Bind Active Iq Unified Manager H300s and 9 more

CVE-2023-2828

named's configured cache size limit can be significantly exceeded

Every `named` instance configured to run as a recursive resolver maintains a cache database holding the responses to the queries it has recently sent to authoritative servers. The size limit for that cache database can be configured using the `max-cache-size` statement in the configuration file; it defaults to 90% of the total amount of memory available on the host. When the size of the cache reaches 7/8 of the configured limit, a cache-cleaning algorithm starts to remove expired and/or least-recently used RRsets from the cache, to keep memory use below the configured limit. It has been discovered that the effectiveness of the cache-cleaning algorithm used in `named` can be severely diminished by querying the resolver for specific RRsets in a certain order, effectively allowing the configured `max-cache-size` limit to be significantly exceeded. This issue affects BIND 9 versions 9.11.0 through 9.16.41, 9.18.0 through 9.18.15, 9.19.0 through 9.19.13, 9.11.3-S1 through 9.16.41-S1, and 9.18.11-S1 through 9.18.15-S1.

CVSS 3.1 · 7.5 High EPSS 3.7% KEV · Not listed

Vendors

Debian Fedoraproject Isc and 2 more

Products

Debian Linux Fedora Bind and 16 more