DEBIAN-CVE-2019-8921

An issue was discovered in bluetoothd in BlueZ through 5.48. The vulnerability lies in the handling of a SVCATTRREQ by the SDP implementation. By crafting a malicious CSTATE, it is possible to trick the server into returning more bytes than the buffer actually holds, resulting in leaking arbitrar...

UBUNTU-CVE-2019-8922

A heap-based buffer overflow was discovered in bluetoothd in BlueZ through 5.48. There isn't any check on whether there is enough space in the destination buffer. The function simply appends all data passed to it. The values of all attributes that are requested are appended to the output buffer...

CVE-2021-44429: Buffer Copy without Checking Size of Input

Serva 4.4.0 allows remote attackers to cause a denial of service daemon crash via a TFTP read RRQ request, aka opcode 1, a related issue to CVE-2013-0145...

CVE-2021-44428: Buffer Copy without Checking Size of Input

Pinkie 2.15 allows remote attackers to cause a denial of service daemon crash via a TFTP read RRQ request, aka opcode 1...

PT-2021-24090

Name of the Vulnerable Software and Affected Versions: Pinkie version 2.15 Description: The issue allows remote attackers to cause a denial of service, resulting in a daemon crash, via a TFTP read RRQ request, also known as opcode 1. Recommendations: For Pinkie version 2.15, as a temporary...

PT-2021-6622

Name of the Vulnerable Software and Affected Versions ZyXEL NBG6816 Armor Z1 and NBG6817 Armor Z2 affected versions not specified Description The issue is related to a cross-site request forgery vulnerability in the HTTP daemon of the firmware. This could allow an attacker to execute arbitrary...

BlueZ 缓冲区错误漏洞

BlueZ is a Bluetooth protocol stack written in C. It is primarily used to provide support for the core Bluetooth layers and protocols. A security vulnerability exists in Bluetoothd in BlueZ version 5.48 and earlier, which stems from a program receiving data without any size checking, and which ca...

BlueZ 数据伪造问题漏洞

BlueZ is a Bluetooth protocol stack written in C. It is primarily used to provide support for the core Bluetooth layers and protocols. A security vulnerability exists in Bluetoothd in BlueZ version 5.48 and earlier, which allows an attacker to cause an arbitrary heap data leak by crafting a...

CVE-2019-8922

A heap-based buffer overflow was discovered in bluetoothd in BlueZ through 5.48. There isn't any check on whether there is enough space in the destination buffer. The function simply appends all data passed to it. The values of all attributes that are requested are appended to the output buffer...

CVE-2019-8921

An issue was discovered in bluetoothd in BlueZ through 5.48. The vulnerability lies in the handling of a SVCATTRREQ by the SDP implementation. By crafting a malicious CSTATE, it is possible to trick the server into returning more bytes than the buffer actually holds, resulting in leaking arbitrar...

PT-2021-24091

Name of the Vulnerable Software and Affected Versions: Serva version 4.4.0 Description: The issue allows remote attackers to cause a denial of service, resulting in a daemon crash, via a TFTP read request, specifically an RRQ request, which is associated with opcode 1. Recommendations: For Serva...

PT-2021-5730

Name of the Vulnerable Software and Affected Versions MediaTek microchips versions 2.0.2 MT7603E, MT7613, MT7615, MT7622, MT7628, MT7629, MT7915 Description The issue is related to the mishandling of IEEE 1905 protocols and the lack of authorization in the daemon of MediaTek microchips. This can...

Oracle Linux 8 : glibc (ELSA-2021-9560)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-9560 advisory. - CVE-2021-33574: Deep copy pthread attribute in mqnotify 1966472 - CVE-2021-35942: wordexp: handle overflow in positional parameter number 1979127 -...

Update now! Netgear vulnerability patched

Netgear has released a fix for a vulnerability on several of their product models. The affected product models include extenders, routers, air cards, and modems. The vulnerability was discovered by researchers at GRIMM, but prior to the planned disclosure date, Netgear released a patch that fixed...

Schedmd SchedMD Slurm 安全漏洞

Schedmd SchedMD Slurm is an open source and highly scalable cluster management and job scheduling system for large and small Linux clusters from SchedMD Schedmd, USA. A security vulnerability exists in SchedMD Slurm, which stems from the fact that on sites using the new AccountingStoreFlags=job...

EulerOS Virtualization 2.9.1 : krb5 (EulerOS-SA-2021-2743)

According to the versions of the krb5 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - ecverify in kdc/kdcpreauthec.c in the Key Distribution Center KDC in MIT Kerberos 5 aka krb5 before 1.18.4 and 1.19.x before 1.19.2...

mina-sshd-core: Memory leak denial of service in Apache Mina SSHD Server

A vulnerability in sshd-core of Apache Mina SSHD allows an attacker to overflow the server causing an OutOfMemory error. This issue affects the SFTP and port forwarding features of Apache Mina SSHD version 2.0.0 and later versions. It was addressed in Apache Mina SSHD 2.7.0...

mina-sshd-core: Memory leak denial of service in Apache Mina SSHD Server

A vulnerability in sshd-core of Apache Mina SSHD allows an attacker to overflow the server causing an OutOfMemory error. This issue affects the SFTP and port forwarding features of Apache Mina SSHD version 2.0.0 and later versions. It was addressed in Apache Mina SSHD 2.7.0...

EulerOS 2.0 SP9 : krb5 (EulerOS-SA-2021-2714)

According to the versions of the krb5 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - ecverify in kdc/kdcpreauthec.c in the Key Distribution Center KDC in MIT Kerberos 5 aka krb5 before 1.18.4 and 1.19.x before 1.19.2 allows remote...

EulerOS 2.0 SP9 : krb5 (EulerOS-SA-2021-2689)

According to the versions of the krb5 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - ecverify in kdc/kdcpreauthec.c in the Key Distribution Center KDC in MIT Kerberos 5 aka krb5 before 1.18.4 and 1.19.x before 1.19.2 allows remote...