https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 19:51:41 +0000 https://cve.radiocsirt.org/vuln/2nga002579 <p>ABB is aware of public reports of a vulnerabilities in product versions listed as affected in this advisory. An attacker who successfully exploited these vulnerabilities could cause the product to stop, make the product inacces-sible, take remote control of the product or insert and run arbitrary code. As part of ABB product lifecycle policy, once a product transitions to end-of-life, we discontinue maintenance, security patches, and technical support to focus on current and future technologies. While the product will continue to function, we strongly recommend implementing mitigations defined in this document, such as using a private APN cellular network between Arctic wireless gateways and ARM600 for establishing VPN tunnels, to mitigate security risks and avoid potential vulnerabilities. As part of ABB product lifecycle policy, once a product transitions to Limited state, we discontinue maintenance, security patches, and technical support to focus on current and future technologies. While the product will continue to function, we strongly recommend implementing mitigations defined in this document to mitigate security risks.</p> <p>ABB is aware of public reports of a vulnerabilities in product versions listed as affected in this advisory. An attacker who successfully exploited these vulnerabilities could cause the product to stop, make the product inacces-sible, take remote control of the product or insert and run arbitrary code. As part of ABB product lifecycle policy, once a product transitions to end-of-life, we discontinue maintenance, security patches, and technical support to focus on current and future technologies. While the product will continue to function, we strongly recommend implementing mitigations defined in this document, such as using a private APN cellular network between Arctic wireless gateways and ARM600 for establishing VPN tunnels, to mitigate security risks and avoid potential vulnerabilities. As part of ABB product lifecycle policy, once a product transitions to Limited state, we discontinue maintenance, security patches, and technical support to focus on current and future technologies. While the product will continue to function, we strongly recommend implementing mitigations defined in this document to mitigate security risks.</p> https://cve.radiocsirt.org/vuln/2nga002579 https://cve.radiocsirt.org/vuln/alsa-2022:6206 <p><strong>Affected:</strong> AlmaLinux:8: systemd, AlmaLinux:8: systemd-container, AlmaLinux:8: systemd-devel, AlmaLinux:8: systemd-journal-remote, AlmaLinux:8: systemd-libs, AlmaLinux:8: systemd-pam, AlmaLinux:8: systemd-tests, AlmaLinux:8: systemd-udev</p> <p>The systemd packages contain systemd, a system and service manager for Linux, compatible with the SysV and LSB init scripts. It provides aggressive parallelism capabilities, uses socket and D-Bus activation for starting services, offers on-demand starting of daemons, and keeps track of processes using Linux cgroups. In addition, it supports snapshotting and restoring of the system state, maintains mount and automount points, and implements an elaborate transactional dependency-based service control logic. It can also work as a drop-in replacement for sysvinit. Security Fix(es): * systemd-resolved: use-after-free when dealing with DnsStream in resolved-dns-stream.c (CVE-2022-2526) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> AlmaLinux:8: systemd, AlmaLinux:8: systemd-container, AlmaLinux:8: systemd-devel, AlmaLinux:8: systemd-journal-remote, AlmaLinux:8: systemd-libs, AlmaLinux:8: systemd-pam, AlmaLinux:8: systemd-tests, AlmaLinux:8: systemd-udev</p> <p>The systemd packages contain systemd, a system and service manager for Linux, compatible with the SysV and LSB init scripts. It provides aggressive parallelism capabilities, uses socket and D-Bus activation for starting services, offers on-demand starting of daemons, and keeps track of processes using Linux cgroups. In addition, it supports snapshotting and restoring of the system state, maintains mount and automount points, and implements an elaborate transactional dependency-based service control logic. It can also work as a drop-in replacement for sysvinit. Security Fix(es): * systemd-resolved: use-after-free when dealing with DnsStream in resolved-dns-stream.c (CVE-2022-2526) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2022:6206 https://cve.radiocsirt.org/vuln/bdu:2022-05168 bdu:2022-05168 https://cve.radiocsirt.org/vuln/bdu:2022-05168 https://cve.radiocsirt.org/vuln/certfr-2022-avi-1025 certfr-2022-avi-1025 https://cve.radiocsirt.org/vuln/certfr-2022-avi-1025 https://cve.radiocsirt.org/vuln/euvd-2026-12404 EUVD-2026-12404 https://cve.radiocsirt.org/vuln/euvd-2026-12404 https://cve.radiocsirt.org/vuln/fkie_cve-2022-2526 <p>A use-after-free vulnerability was found in systemd. This issue occurs due to the on_stream_io() function and dns_stream_complete() function in &#39;resolved-dns-stream.c&#39; not incrementing the reference counting for the DnsStream object. Therefore, other functions and callbacks called can dereference the DNSStream object, causing the use-after-free when the reference is still used later.</p> <p>A use-after-free vulnerability was found in systemd. This issue occurs due to the on_stream_io() function and dns_stream_complete() function in &#39;resolved-dns-stream.c&#39; not incrementing the reference counting for the DnsStream object. Therefore, other functions and callbacks called can dereference the DNSStream object, causing the use-after-free when the reference is still used later.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-2526 https://cve.radiocsirt.org/vuln/ghsa-f4r4-2gxf-88xj <p>A use-after-free vulnerability was found in systemd. This issue occurs due to the on_stream_io() function and dns_stream_complete() function in &#39;resolved-dns-stream.c&#39; not incrementing the reference counting for the DnsStream object. Therefore, other functions and callbacks called can dereference the DNSStream object, causing the use-after-free when the reference is still used later.</p> <p>A use-after-free vulnerability was found in systemd. This issue occurs due to the on_stream_io() function and dns_stream_complete() function in &#39;resolved-dns-stream.c&#39; not incrementing the reference counting for the DnsStream object. Therefore, other functions and callbacks called can dereference the DNSStream object, causing the use-after-free when the reference is still used later.</p> https://cve.radiocsirt.org/vuln/ghsa-f4r4-2gxf-88xj https://cve.radiocsirt.org/vuln/gsd-2022-2526 gsd-2022-2526 https://cve.radiocsirt.org/vuln/gsd-2022-2526 https://cve.radiocsirt.org/vuln/icsa-25-105-08 <p>ABB is aware of public reports of a vulnerabilities in product versions listed as affected in this advisory. An attacker who successfully exploited these vulnerabilities could cause the product to stop, make the product inacces-sible, take remote control of the product or insert and run arbitrary code. As part of ABB product lifecycle policy, once a product transitions to end-of-life, we discontinue maintenance, security patches, and technical support to focus on current and future technologies. While the product will continue to function, we strongly recommend implementing mitigations defined in this document, such as using a private APN cellular network between Arctic wireless gateways and ARM600 for establishing VPN tunnels, to mitigate security risks and avoid potential vulnerabilities. As part of ABB product lifecycle policy, once a product transitions to Limited state, we discontinue maintenance, security patches, and technical support to focus on current and future technologies. While the product will continue to function, we strongly recommend implementing mitigations defined in this document to mitigate security risks.</p> <p>ABB is aware of public reports of a vulnerabilities in product versions listed as affected in this advisory. An attacker who successfully exploited these vulnerabilities could cause the product to stop, make the product inacces-sible, take remote control of the product or insert and run arbitrary code. As part of ABB product lifecycle policy, once a product transitions to end-of-life, we discontinue maintenance, security patches, and technical support to focus on current and future technologies. While the product will continue to function, we strongly recommend implementing mitigations defined in this document, such as using a private APN cellular network between Arctic wireless gateways and ARM600 for establishing VPN tunnels, to mitigate security risks and avoid potential vulnerabilities. As part of ABB product lifecycle policy, once a product transitions to Limited state, we discontinue maintenance, security patches, and technical support to focus on current and future technologies. While the product will continue to function, we strongly recommend implementing mitigations defined in this document to mitigate security risks.</p> https://cve.radiocsirt.org/vuln/icsa-25-105-08 https://cve.radiocsirt.org/vuln/rhsa-2022:6160 <p>systemd-resolved: use-after-free when dealing with DnsStream in resolved-dns-stream.c</p> <p>systemd-resolved: use-after-free when dealing with DnsStream in resolved-dns-stream.c</p> https://cve.radiocsirt.org/vuln/rhsa-2022:6160 https://cve.radiocsirt.org/vuln/rhsa-2022:6161 <p>systemd-resolved: use-after-free when dealing with DnsStream in resolved-dns-stream.c</p> <p>systemd-resolved: use-after-free when dealing with DnsStream in resolved-dns-stream.c</p> https://cve.radiocsirt.org/vuln/rhsa-2022:6161 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-2526 <p><strong>Affected:</strong> Ubuntu:18.04:LTS: systemd</p> <p>A use-after-free vulnerability was found in systemd. This issue occurs due to the on_stream_io() function and dns_stream_complete() function in &#39;resolved-dns-stream.c&#39; not incrementing the reference counting for the DnsStream object. Therefore, other functions and callbacks called can dereference the DNSStream object, causing the use-after-free when the reference is still used later.</p> <p><strong>Affected:</strong> Ubuntu:18.04:LTS: systemd</p> <p>A use-after-free vulnerability was found in systemd. This issue occurs due to the on_stream_io() function and dns_stream_complete() function in &#39;resolved-dns-stream.c&#39; not incrementing the reference counting for the DnsStream object. Therefore, other functions and callbacks called can dereference the DNSStream object, causing the use-after-free when the reference is still used later.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-2526 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1177 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in systemd ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in systemd ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1177