Linux Kernel

OS Command Injection in Rapid7 InsightConnect Traceroute Plugin

OS Command Injection in Rapid7 InsightConnect Ping Plugin

A buffer overflow exists in HelpSystems tcpcrypt on Linux, used for BoKS encrypted telnet through BoKS version 6.7.1. Since tcpcrypt is setuid, exploitation leads to privilege escalation.

An issue was discovered in the Linux kernel before 6.3.4. fs/ksmbd/connection.c in ksmbd has an off-by-one error in memory allocation (because of ksmbd_smb2_check_message) that may lead to out-of-bounds access.

nvme-rdma: destroy cm id before destroy qp to avoid use after free

"IBM InfoSphere Information Server 11.7 is potentially vulnerable to CSV Injection. A remote attacker could execute arbitrary commands on the system, caused by improper validation of csv file contents. IBM X-Force ID: 223598."

IBM Spectrum Copy Data Management 2.2.13 and earlier could allow a remote attacker to access the Spring Boot console without authorization. IBM X-Force ID: 214523.

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.1.0 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 203734.

An issue in HTACG HTML Tidy v5.7.28 allows attacker to execute arbitrary code via the -g option of the CleanNode() function in gdoc.c.

In some cases, an unsuccessful attempt to log into IBM Spectrum Protect Operations Center 8.1.0.000 through 8.1.14.000 does not cause the administrator's invalid sign-on count to be incremented on the IBM Spectrum Protect Server. An attacker could exploit this vulnerability using brute force techniques to gain unauthorized administrative access to the IBM Spectrum Protect Server. IBM X-Force ID: 226325.

ksmbd: Fix dangling pointer in krb_authenticate

NVIDIA NeMo library for all platforms contains a vulnerability in the model loading component, where an attacker could cause code injection by loading .nemo files with maliciously crafted metadata. A successful exploit of this vulnerability may lead to remote code execution and data tampering.

Authentication Bypass in Webhook Endpoints Allowed Unauthorized Flow Execution

smb: client: validate dacloffset before building DACL pointers

net/sched: Fix UAF when resolving a clash

ipv6: rpl: reserve mac_len headroom when recompressed SRH grows

NVIDIA NemoClaw for Linux contains a vulnerability in its remote-access helper workflow, where an attacker could cause weak authentication. A successful exploit of this vulnerability might lead to code execution, information disclosure, and data tampering.

ksmbd: fix UAF issue in ksmbd_tcp_new_connection()

IBM Security Guardium 11.2 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 196313.

IBM Security Guardium 11.2 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 196279.

Vasion Print (formerly PrinterLogic) Usage of Outdated and Unsupported OpenSSL Version

SUNRPC: fix some memleaks in gssx_dec_option_array

inet: fully convert sk->sk_rx_dst to RCU rules

Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863)

SQL Injection in Nefteprodukttekhnika BUK TS-G Allows Remote Code Execution

nvme-rdma: fix possible use-after-free in transport error_recovery work

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5, 6.1.0.0 through 6.1.0.4, and 6.1.1.0 through 6.1.1.1 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 215888.

Memory exhaustion in LZ4 decompression in UniRPC daemon

Spectrum command injection in NCM service

of: module: add buffer overflow check in of_modalias()

NVIDIA Dynamo for Linux contains a vulnerability in the multimodal serving topology, where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure.

IBM QRadar SIEM 7.3, 7.4, and 7.5 in some situations may not automatically log users out after they exceede their idle timeout. IBM X-Force ID: 208341.

Maxboard SQL injection and LFI vulnerability

tipc: force a dst refcount before doing decryption

ipv6: prevent possible UAF in ip6_xmit()

ila: block BH in ila_output()

RDMA/iwcm: Fix a use-after-free related to destroying CM IDs

net/x25: Fix potential double free of skb

net: stmmac: fix integer underflow in chain mode

dlm: fix plock invalid read