Skip to content
OpenAdvisories

Archive

21 January 2024

Vulnerabilities first published on this day (UTC), newest first.

5 results · Clear filters · Feed

  • High 7.0

    Kernel: gc's deletion of an skb races with unix_stream_read_generic() leading to uaf

    A use-after-free flaw was found in the Linux Kernel due to a race problem in the unix garbage collector's deletion of SKB races with unix_stream_read_generic() on the socket that the SKB is queued on.

  • High 7.5

    An issue was discovered in Mbed TLS through 3.5.1. In mbedtls_ssl_session_reset, the maximum negotiable TLS version is …

  • High 7.5

    An issue was discovered in Mbed TLS 3.5.1. There is persistent handshake denial if a client sends a TLS 1.3 ClientHello…

  • High 7.5

    ReDoS in Embedchain

    The JSON loader in Embedchain before 0.1.57 allows a ReDoS (regular expression denial of service) via a long string to json.py.

  • High 8.8

    Ubee DDW365 XCNDDW365 devices have predictable default WPA2 PSKs that could lead to unauthorized remote access. A remot…